Cybersecurity did not begin with criminals. It began with curiosity. In 1971 a researcher released Creeper, an experimental self-moving program that hopped between machines on ARPANET and displayed a harmless message. Creeper was never meant to cause damage, but it proved that code could travel across a network on its own. A companion program called Reaper was written to chase it down and remove it, arguably the first act of digital defense. These experiments defined the era: the network was small, trusting, and built by people who assumed everyone connected to it shared the same academic goals.

That assumption did not last. As ARPANET grew, so did minor intrusions, misrouted traffic, and early questions about who should be allowed access to shared systems. By the late 1980s a generation of hobbyists had formed around dial-up bulletin board systems, where enthusiasts traded knowledge, software, and ideas. Some of these communities were purely creative, while others drifted toward unauthorized exploration of phone and computer networks.

The turning point came in 1988, when the Morris Worm spread across thousands of connected computers and slowed much of the early internet to a crawl. It was not designed to destroy data, but a flaw in its design caused it to replicate uncontrollably. The incident shocked institutions into action and led directly to the creation of coordinated response teams. The first commercial antivirus tools also emerged in this period, marking the start of security as a profession rather than an afterthought.

References#

• NIST, Computer Security Division historical publications and early guidance on networked systems.
• SANS Institute, educational materials on the history of malware and the 1988 internet worm.