History

A network/internet security incident is any network-related activity that has negative security implications. The original goal of the ARPANET was to create a network that would function even if some major section(s) of the network failed or was attacked. Thus the Internet was designed to be robust against denial of service attacks. The ARPANET protocols were designed for openness and flexibility. The usefulness of the network grew as more sites joined the ARPANET. The applications on the ARPANET were quite simple: e-mail, newsgroups and remote connection. ARPANET users were a small group who knew and trusted each other. They played pranks on each other using the network - jokes and annoying messages, and small security breaches. Cliff Stoll in the Lawrence Berkeley National Laboratory in northern California identified the first international security incident in 1986. An international effort was using the network to connect to the systems in the US and copy information. This was due to a simple accounting error in the computer records of the ARPANET systems. The first automated security incident, the Morris worm was reported in 1988.

Source