Cyber Events Database Codebook Charlie Harry, Nancy Gallagher, and Lauren Samuelsen

The source combines this information with the local date/time of the page being accessed, as well as the title associated with the overarching website. [...] • Industry Name (industry) – String variable indicating the name of the NAICS code category • Motive (motive) – Categorical variable indicating the intended results sought by the actor committing the event o Protest – The disruption of services in order to send a political or social message to the target organization, or to a government or population indirectly. [...] • Event Type (event_type) – Categorical variable indicating whether the primary end effects of the event were disruptive, exploitative, or a mixture of the two. [...] • Event Sub-type (event_subtype) – Categorical variable further classifying the nature of an event based on the part of the target organization’s IT infrastructure that was most seriously impacted, regardless of the tactics or techniques used to achieve the final result. [...] ▪ Examples: Current techniques used to achieve this type of effect include the manipulation of Programmable Logic Controllers (PLC) to open or close electrical breakers, leading to a de-energizing of that portion of the grid, or the utilization of user passwords to change settings in a human machine interface so that a blast furnace overheats and is destroyed.