security

Security Differently: A collection of notebooks for analyzing security differently.

Feel free to use and/or fork this project!

Visit our website!

Notebooks

Notebooks in this package:

A normal curve of height 0.4 and mean of 0 with the area under the curve between -2 and -3 colored red.

Constraints vs Performance

security differently
Visualizations exploring the use of constraints vs performance improvements in risk management.
2024-04-30
John Benninghoff
 

Measuring Changes in Breach Rates

security differently
A critical review of using breach frequency as a measure of security success, inspired by Incident Metrics in SRE: Critically Evaluating MTTR and Friends.
2024-06-05
John Benninghoff

A histogram showing the count of event occurences for whole numbers from 0 to 10.

Risk Quantification Prototype

risk quantification
Prototype Risk Quantification tool for my SIRAcon 2024 talk, “UnFAIR: Simplifying and Expanding Technology Risk Quantification.”
2024-07-23
John Benninghoff

Stacked histograms of number of losses by value for each risk.

Risk Quantification Demo

risk quantification
Risk Quantification demonstration for my SIRAcon 2024 talk, “UnFAIR: Simplifying and Expanding Technology Risk Quantification.”
2024-08-15
John Benninghoff

A histogram showing number of losses by dollar value on a log10 scale. The curve is normally shaped.

Risk Value Analysis

risk quantification
An exploration of the value of cybersecurity risk reduction.
2024-11-03
John Benninghoff
 

Visualizing Risk (Draft)

risk quantification
An exploration of different approaches to communicating security breach risk informed by prior work.
2024-12-06
John Benninghoff
 

Measuring Incident Duration

SRE
Analysis to determine thresholds of sample size to reliably detect changes in incident impact (duration) using Monte Carlo simulation.
2025-03-19
John Benninghoff

Plot of attacker success rate against MFA deployment rate, showing that attacker success rate decreases linearly as deployment rate increases.

MFA Deployment Analysis

risk quantification
security differently
Analysis of the impact of Multi-Factor Authentication (MFA) deployment rate on the likelihood of compromise.
2026-09-11
John Benninghoff
No matching items