My hope is that the cyber security community will develop as a risk science. Science starts with correctable claims. Progress towards more useful knowledge come from continuous corrections. However, a risk hypothesis may represent future events that have never previously happened, might not ever happen, or may not be observed…