In security, the Poisson distribution helps in modeling rare, independent events over time.
Intrusion Detection: If a system typically sees 2 failed login attempts per hour, and suddenly sees 50, the Poisson model helps calculate just how statistically improbable (and therefore suspicious) that event is.



