The book begins with an introduction to the information system security risk management process, before moving on to present the different risk management methodologies that can be currently used (quantitative and qualitative). In the third part of the book, the authors' original quantitative network risk assessment model based on risk propagation is introduced. Finally, a network case study of the future airport AeroMACS system is presented. This example illustrates how the authors' quantitative risk assessment proposal can provide help to network security designers for the decision-making process and how the security of the entire network may thus be improved.
Mohamed Slim Ben Mahmoud is a research engineer for the research group ResCo at the TELECOM laboratory of ENAC, the French national institution for civil aviation.
Nicolas Larrieu is a teacher and researcher at the research group ResCo at the TELECOM laboratory of ENAC.
Alain Pirovano is a teacher and researcher and head of the research group ResCo at the TELECOM laboratory of ENAC.