1) The document introduces Beckstrom's Law, a new model for calculating the value of a network. Beckstrom's Law states that the value of a network equals the net value added to each user's transactions, summed over all users. 2) The model defines the value of a network to a single user as the benefits of transactions minus the costs of transactions. It then sums this value over all users to calculate the total value of the network. 3) The document discusses how Beckstrom's Law can be used to analyze topics like security economics, the economics of deterring hackers, and the value of improving network architecture and protocols. It also notes challenges like needing accurate data to apply the model.

1. The Economics of Networks (and Beckstrom’s Law) Rod Beckstrom CEO and President 31July 2009 DEFCON Las Vegas 27Apr08

2. 29Jul09 Addressing the Internet

3. 29Jul09 Participating in the Internet eco-system and supporting it

4. Do network economics matter? Value of network to one user Total value of a network Security economics Security risk management Hacker economics Economics of deterrence Supply chain incentives Economics of Internet protocols (architecture) Economics of outages Economics of resiliency (correlation of losses) 29Jul09

5. Metcalfe’s Law 29Jul09 fax networks is larger today than ever, but less valuable because of substitutes such as email, Fedex, UPS, PDF’s, web, etc., thus the model does not hold Where: V = value of network j n = the number of end points or nodes p = some constant V j = n 2 * p Historic Network Value Models

6. t not n ! 29Jul09

7. t not n ! 29Jul09

8. New Model: Beckstrom’s Law Economics of Networks 29Jul09 The value of a network equals the net value added to each user’s transactions, summed for all users.

9. V i,j = ΣB - ΣC Where: V = value of network j to user i B = the benefit value of all transactions C = the cost of all transactions Value of a Network to One User New Network Model 29Jul09

10. V = B - C V = $26 - $16 V = $10 If it costs $26 to buy the book in a store or $16 to buy it over the Internet, including shipping, the net value is $10. Online Book Purchase Case 29Jul09

11. V[j] = ΣV i,j = ΣB - ΣC Network Value is Summation of Value to All Users New Network Model 29Jul09

12. 29J ul09 Where: ΣV i,j = value of a network j to all users V i,j = net present value of all transactions to user i with respect to network j, over any time period j = identifies one network i = one user of the network B i,k = the benefit value of transaction k to individual i C i,l = the cost of transaction l to individual i r k and r l = the discount rate of interest to the time of transaction k or l t k or t l = the elapsed time in years to transaction k or l n,m,p = maximum number of individuals i and transactions k and l Beckstrom’s Law New Network Model

13. The “Network Effect” 29Jul09

14. For those networks where… The “Network Effect” 29Jul09 More users add to more total value

15. From the current network member perspective The “Network Effect” 29Jul09

16. For those networks where… The “Inverse Network Effect” 29Jul09 More users reduce total value <

17. From the current network member perspective The “Inverse Network Effect” 29Jul09 <

18. Private Golf Clubs AARP Support groups Costco FaceBook Coops YPO Your social networks Twitter Your customers Internet … Examples 29Jul09

19. Where: SI = Security Investments L = Losses C’ = C – SI – L (all costs except SI & L) V = B - C’ - SI - L Security Model V = B - C Economics of Security Basic Model V = B - C 29Jul09

20. Minimize Security Costs = SI + L The Fundamental Security Risk Management Function Economics of Security 29Jul09

21. Loss $ Security Investment $ 0 Pareto Chart of Best Security Investments Against Losses (hypothetical curve) Economics of Security 29Jul09

22. Loss $ Security Investment $ 0 Different security technology investments can be ranked in order of payoff (reduced losses per dollar of investment). IP Patch IDS DLP Economics of Security 29Jul09

23. Loss $ Better network protocols can drive Loss function down for most or all users. Security Investment $ 0 Economics of Protocols 29Jul09

24. Minimize the Hacker’s Gain Minimize V = B - C’ - SI - L For example, by seeking to reduce their Benefit or take. Increase their operating costs (making stealing more difficult). Force them to invest more in their own Security Investments (making it harder for them not to get caught). Increase their losses by improving enforcement and increasing penalties and imprisonment, for example. Economics of Deterrence 29Jul09

25. Value of network to individuals Total value of a network Security economics Security risk management Hacker economics Economics of deterrence Supply chain incentives Economics of Internet protocols (architecture) Economics of outages Economics of resiliency (correlation of losses) Economics of Networks 29Jul09

27. Granular Scalable Subset-able Accurate Similar to P&L concepts Leverages cost accounting techniques Testable As simple as it can be but no simpler A foundation for derivative models Beckstrom’s Law Benefits 29Jul09

28. You have to get the data or estimate it Beckstrom’s Law Downside 29Jul09

29. t not n ! 29Jul09

30. Questions 29Jul09

31. Acknowledgments for assistance in editing/reviewing the models: Dr. Douglass Maughan, U.S. Department of Homeland Security Science and Technology Dr. Gary Becker, Senior Economist, U.S. Department of Homeland Security Dr. John “Matty” Mathieson, Stanford Research Institute Dr. Patrick Lincoln, Stanford Research Institute 29Jul09

32. Thank You ! twitter.com/rodbeckstrom 29Jul09