Heidelberg Cyber Conflict Dataset (HD-CY.CON)

While existing cyber conflict datasets focus on generic categories, such as "state or state-supported" cyber operations, the Heidelberg data set offers a more nuanced differentiation of political and technical attribution statements, including the attributing initiator and its characteristics. In addition, HD-CY.CON uses conflict categories of the Conflict Barometer by the Heidelberg Institute for International Conflict Research (HIIK), thus allowing a closer examination of interaction between between offline-, and online conflict dynamics.

Cyber incidents are coded according to categories of the HD.CY-CON codebook and differentiated into three main incident types: data theft, disruption and hijacking. Moreover, they are accredited an intensity score, based on technical and socio-political indicators.