{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T19:30:03Z","timestamp":1780774203620,"version":"3.54.1"},"reference-count":62,"publisher":"Oxford University Press (OUP)","issue":"1","license":[{"start":{"date-parts":[[2016,12,23]],"date-time":"2016-12-23T00:00:00Z","timestamp":1482451200000},"content-version":"vor","delay-in-days":22,"URL":"http:\/\/creativecommons.org\/licenses\/cc-by-nc\/4.0\/"}],"funder":[{"name":"NSF","award":["1518878,1444871"],"award-info":[{"award-number":["1518878,1444871"]}]},{"DOI":"10.13039\/100000185","name":"DARPA","doi-asserted-by":"crossref","award":["FA8750-15-C-0118"],"award-info":[{"award-number":["FA8750-15-C-0118"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/100006602","name":"AFRL","doi-asserted-by":"crossref","award":["FA8750-15-2-0075"],"award-info":[{"award-number":["FA8750-15-2-0075"]}],"id":[{"id":"10.13039\/100006602","id-type":"DOI","asserted-by":"crossref"}]},{"name":"DOE","award":["DE-AC02-05CH11231"],"award-info":[{"award-number":["DE-AC02-05CH11231"]}]},{"DOI":"10.13039\/100011419","name":"Santa Fe Institute","doi-asserted-by":"crossref","id":[{"id":"10.13039\/100011419","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016,12,1]]},"DOI":"10.1093\/cybsec\/tyw003","type":"journal-article","created":{"date-parts":[[2016,12,27]],"date-time":"2016-12-27T20:30:30Z","timestamp":1482870630000},"page":"3-14","source":"Crossref","is-referenced-by-count":196,"title":["Hype and heavy tails: A closer look at data breaches"],"prefix":"10.1093","volume":"2","author":[{"given":"Benjamin","family":"Edwards","sequence":"first","affiliation":[{"name":"Department of Computer Science, University of New Mexico, 1 University of New Mexico Albuquerque, NM 87131, United States; Computer Languages & Systems Software, Lawrence Berkeley National Laboratory, 1 Cyclotron Road, Berkeley, CA, United States; Santa Fe Institute 1399 Hyde Park Road Santa Fe, NM 87501, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Steven","family":"Hofmeyr","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of New Mexico, 1 University of New Mexico Albuquerque, NM 87131, United States; Computer Languages & Systems Software, Lawrence Berkeley National Laboratory, 1 Cyclotron Road, Berkeley, CA, United States; Santa Fe Institute 1399 Hyde Park Road Santa Fe, NM 87501, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stephanie","family":"Forrest","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of New Mexico, 1 University of New Mexico Albuquerque, NM 87131, United States; Computer Languages & Systems Software, Lawrence Berkeley National Laboratory, 1 Cyclotron Road, Berkeley, CA, United States; Santa Fe Institute 1399 Hyde Park Road Santa Fe, NM 87501, United States"},{"name":"Department of Computer Science, University of New Mexico, 1 University of New Mexico Albuquerque, NM 87131, United States; Computer Languages & Systems Software, Lawrence Berkeley National Laboratory, 1 Cyclotron Road, Berkeley, CA, United States; Santa Fe Institute 1399 Hyde Park Road Santa Fe, NM 87501, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"286","published-online":{"date-parts":[[2016,12,30]]},"reference":[{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B1","article-title":"Health insurer anthem hit by hackers","author":"Mathews","year":"2015","journal-title":"The Wall Street Journal"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B2","article-title":"Millions more Americans hit by government personnel data hack","author":"Zengerle","year":"2015","journal-title":"Reuters"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B3","article-title":"Home depot investigates a possible credit card breach","author":"Chen","year":"2014","journal-title":"The New York Times"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B4","article-title":"Home depot: Hackers stole 53m email addresses","author":"Krebs","year":"2014","journal-title":"Krebs on Security"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B5","article-title":"Banks unsure which cards were exposed in breach","author":"Creswell","year":"2005","journal-title":"The New York Times"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B6","article-title":"Payment processor breach may be largest ever","author":"Krebs","year":"2009","journal-title":"The Washington Post"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B7","article-title":"Experian enmeshed in litigation over business that was breached","author":"Finkle","year":"2014","journal-title":"Reuters"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B8","article-title":"Data breach notification bills introduced in house and senate","author":"Covington","year":"2015","journal-title":"The National Law Review"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B9","article-title":"Analysis of White House data breach notification bill","author":"Kosseff","year":"2015","journal-title":"The National Law Review"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B10","article-title":"Follow the data: dissecting data breaches and debunking myths","author":"Huq","year":"2015","journal-title":"TrendMicro Research Paper"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B11","article-title":"2015 first half review","author":"Gemalto","year":"2015","journal-title":"Findings from the Breach Level Index"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B12","author":"S. Corporation","year":"2014,"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B13","author":"R. Inc","year":"2014"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B14","author":"P. R. Clearinghouse","year":"2015"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B15","first-page":"40","article-title":"Gibrat\u2019s legacy","volume":"35","author":"Sutton","year":"1997","journal-title":"J Econ Lit"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B16","article-title":"Fitting the log skew normal to the sum of independent lognormals distribution","author":"Hcine","year":"2015","journal-title":"arXiv preprint arXiv"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B17","author":"U. D. of Justice","year":"2009"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B18","author":"N. I. of Standards and Technology","year":"2014, )"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B19","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1145\/508171.508187","volume-title":"Proceedings of the 2001 Workshop on New Security Paradigms","author":"Blakley","year":"2001"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B20","author":"P. R. Clearinghouse","year":"2014"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B21","author":"Track","year":"2013"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B22","article-title":"Most security breaches go unreported","author":"Claburn","year":"2008","journal-title":"Information Week"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B23","doi-asserted-by":"crossref","first-page":"68","DOI":"10.1080\/01621459.1951.10500769","article-title":"The Kolmogorov-Smirnov test for goodness of fit","volume":"46","author":"Massey","year":"1951","journal-title":"J Am Stat Assoc"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B24","doi-asserted-by":"crossref","first-page":"226","DOI":"10.1080\/15427951.2004.10129088","article-title":"A brief history of generative models for power law and lognormal distributions","volume":"1","author":"Mitzenmacher","year":"2004","journal-title":"Internet Math"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B25","doi-asserted-by":"crossref","first-page":"34","DOI":"10.32614\/RJ-2011-016","article-title":"Nonparametric goodness-of-fit tests for discrete null distributions","volume":"3","author":"Arnold","year":"2011","journal-title":"The R Journal"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B26","volume-title":"Handbook of the Poisson Distribution","author":"Haight","year":"1967"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B27","first-page":"307","author":"Zhou","year":"2013"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B28","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9780511790942","volume-title":"Data Analysis Using Regression and Multilevel\/Hierarchical Models","author":"Gelman","year":"2006"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B29","first-page":"141","article-title":"Bayesian inference for the skewness parameter of the scalar skew-normal distribution","volume":"21","author":"Bayes","year":"2007","journal-title":"Brazilian J Probab Stat"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B30","first-page":"1593","article-title":"The No-U-Turn Sampler: adaptively setting path lengths in Hamiltonian Monte Carlo","volume":"15","author":"Homan","year":"2014","journal-title":"J Mach Learn Res"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B31","doi-asserted-by":"crossref","first-page":"461","DOI":"10.1214\/aos\/1176344136","article-title":"Estimating the dimension of a model","volume":"6","author":"Schwarz","year":"1978","journal-title":"Annals of Stat"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B32","author":"Hibon","year":"1997"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B33","doi-asserted-by":"crossref","first-page":"307","DOI":"10.1016\/0304-4076(86)90063-1","article-title":"Generalized autoregressive conditional heteroskedasticity","volume":"31","author":"Bollerslev","year":"1986","journal-title":"J Econometrics"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B34","doi-asserted-by":"crossref","first-page":"164","DOI":"10.1093\/oxfordjournals.pan.a004869","article-title":"A linear Poisson autoregressive model: The Poisson ar (p) model","volume":"9","author":"Brandt","year":"2001","journal-title":"Polit Anal"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B35","doi-asserted-by":"crossref","first-page":"679","DOI":"10.2307\/1427183","article-title":"Autoregressive moving-average processes with negative-binomial and geometric marginal distributions","volume":"18","author":"McKenzie","year":"1986","journal-title":"Adv Appl Probab"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B36","volume-title":"Time Series: Theory and Methods","author":"Brockwell","year":"2013"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B37","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1145\/2413296.2413302","volume-title":"Proceedings of the 2012 Workshop on New Security Paradigms","author":"Edwards","year":"2012"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B38","author":"Verizon","year":"2014"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B39","author":"P. I. LLC","year":"2014"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B40","author":"Jacobs","year":"2014"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B41","author":"Trustwave","year":"2013"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B42","doi-asserted-by":"crossref","first-page":"357","DOI":"10.1140\/epjb\/e2010-00120-8","article-title":"Heavy-tailed distribution of cyber-risks","volume":"75","author":"Maillart","year":"2010","journal-title":"Eur Physical J B-Condensed Matter Complex Syst"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B43","doi-asserted-by":"crossref","first-page":"1838","DOI":"10.1214\/12-AOAS614","article-title":"Estimating the historical and future probabilities of large terrorist events","volume":"7","author":"Clauset","year":"2013","journal-title":"Annals Appl Stat"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B44","first-page":"569.","article-title":"Using science to combat data loss: analyzing breaches by type and industry","volume":"4","author":"Curtin","year":"2008","journal-title":"ISJLP"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B45","article-title":"The leaking vault: five years of data breaches","author":"Widup","year":"2010","journal-title":"Digital Forensics Assoc"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B46","first-page":"46.","article-title":"An analysis of the growth of computer and internet security breaches","volume":"12","author":"Bagchi","year":"2003","journal-title":"Commun Assoc Informat Syst"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B47","first-page":"77","author":"Condon","year":"2008"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B48","author":"U.S. Department of Health and Human Services","year":"2014"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B49","author":"R. Inc","year":"2012"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B50","author":"R. Inc","year":"2013"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B51","first-page":"94","article-title":"Is there a cost to privacy breaches? an event study","author":"Acquisti","year":"2006","journal-title":"ICIS 2006 Proceedings"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B52","article-title":"How bad is it? A branching activity model to estimate the impact of information security breaches","author":"Thomas","year":"2013","journal-title":"A Branching Activity Model to Estimate the Impact of Information Security Breaches (11 March 2013)"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B53","first-page":"355","article-title":"Protecting information security under a uniform data breach notification law","volume":"75","author":"Picanso","year":"2006","journal-title":"Fordham L Rev"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B54","first-page":"1061.","article-title":"Privacy costs and personal data protection: economic and legal perspectives","volume":"24","author":"Romanosky","year":"2009","journal-title":"Berkeley Tech L J"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B55","article-title":"Data breaches and identity theft: when is mandatory disclosure optimal?","author":"Romanosky","year":"2010","journal-title":"TPRC"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B56","article-title":"Should payment card issuers reissue cards in response to a data breach?","author":"Graves","year":"2014","journal-title":"2014 Workshop on the Economics of Information Security"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B57","first-page":"1","article-title":"A new evolutionary law","volume":"1","author":"Van Valen","year":"1973","journal-title":"Evolutionary Theory"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B58","article-title":"TJX data breach victims reach 94 million","author":"Bosworth","year":"2007","journal-title":"Consumer Affairs"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B59","author":"N. C. of State Legislatures","year":"2015, )"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B60","year":"1996"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B61","doi-asserted-by":"crossref","first-page":"299","DOI":"10.1046\/j.1365-2710.2002.00430.x","article-title":"Segmented regression analysis of interrupted time series studies in medication use research","volume":"27","author":"Wagner","year":"2002","journal-title":"J Clin Pharmacy Therap"},{"key":"key\n\t\t\t\t2018112109323592600_tyw003-B62","doi-asserted-by":"crossref","first-page":"1","DOI":"10.3141\/2019-01","article-title":"Multivariate Poisson-lognormal models for jointly modeling crash frequency by severity","volume":"2019","author":"Park","year":"2007","journal-title":"Transport Res Record J Transport Res Board"}],"container-title":["Journal of Cybersecurity"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/academic.oup.com\/cybersecurity\/article-pdf\/2\/1\/3\/26672851\/tyw003.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,16]],"date-time":"2019-09-16T20:49:04Z","timestamp":1568666944000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/cybersecurity\/article\/2\/1\/3\/2736315"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,12,1]]},"references-count":62,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2016,12,30]]},"published-print":{"date-parts":[[2016,12,1]]}},"URL":"https:\/\/doi.org\/10.1093\/cybsec\/tyw003","relation":{},"ISSN":["2057-2085","2057-2093"],"issn-type":[{"value":"2057-2085","type":"print"},{"value":"2057-2093","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2016,12,1]]},"published":{"date-parts":[[2016,12,1]]}}}