The Power Law of Information in Cybersecurity - BSidesLV 2014

Explore the concept of power laws in information security through this 45-minute conference talk from BSidesLV 2014. Delve into empirical quantities, distributions, and price fluctuations, examining historical events like Black Monday 1987. Understand the non-linear nature of data and learn about power laws, scaling parameters, and fat-tailed distributions. Analyze real-world examples such as Richardson's law, data loss databases, and breach frequencies. Investigate the implications of power laws in infosec, including breach power laws and quantiles of losses. Draw parallels with natural phenomena like sea levels and earthquakes, using analogies such as the flood analogy and Richter scale. Gain key takeaways and insights to apply power law concepts in information security practices.

Introduction
Empirical quantities
Distribution
Price fluctuation
Black Monday 1987
Nothing is linear
What are power laws
What are scaling parameters
Richardsons law
Fattailed distribution
Powerlaw distribution
Takeaways
What does this mean
Kevin Thompson
Data Loss DB
Breach Frequency by Day
Russell Thomas
Questions
The sea level
Infinite spend
Key takeaways
Flood analogy
Richter scale
References
Power law in infosec
Breach power law
Two answers
Quantiles
Losses