The Long Tail of Information Security

This blog post applies Chris Anderson's "Long Tail" concept to information security, arguing that conventional commercial security products protect against common "head" threats but leave many high-impact, low-detection "tail" threats unaddressed; the author recommends investing in skilled security personnel and targeted testing to better detect and mitigate those tail risks.