دانلود کتاب Risk Propagation Assessment for Network Security: Application to Airport Communication Network Design

فهرست مطالب :

Risk Propagation Assessment for Network Security......Page 1
Risk Propagation Assessment for Network Security......Page 2
Contents......Page 4
List of Figures......Page 8
List of Tables......Page 11
Introduction......Page 13
1. Introduction to Information System Security Risk Management Process......Page 18
1.1. On the importance of network security for network designers......Page 20
1.2. On the impact of risk assessment in the decision-making process for network security designers......Page 21
1.3. Quantitative versus qualitative risk assessment approaches......Page 22
1.4.1. Impact of node correlation......Page 25
1.4.2. Network security risk transitivity......Page 26
1.4.3. Network security risk propagation illustrative case......Page 27
PART 1: Network Security Risk Assessment......Page 17
2. Security Risk Management Background......Page 31
2.1.2. OCTAVE......Page 32
2.1.4. MEHARI......Page 33
2.2. Quantitative security risk assessment approaches......Page 34
2.3. Toward a quantitative propagation-based risk assessment methodology......Page 39
3.1. Quantifying methodology parameters......Page 40
3.1.1. Network risk decomposition......Page 41
3.1.2. Node value......Page 42
3.1.4. Impact of threats......Page 43
3.1.5. Likelihood of threats......Page 45
3.2. Network security risk assessment process......Page 49
3.3. Conclusion......Page 52
4.1. Overview of the European SESAR project......Page 54
4.2. Overview of aeronautical communications operating concept and requirements......Page 55
4.3. Introduction to the AeroMACS communication system......Page 58
4.3.1. AeroMACS protocol stack......Page 59
4.3.2. AeroMACS reference network architecture......Page 61
4.3.3. AeroMACS security considerations......Page 63
4.3.3.1. Analysis of AeroMACS security weaknesses......Page 64
4.3.4.1. Isolated AeroMACS network architecture......Page 66
4.3.4.2. End-to-end AeroMACS network architecture......Page 67
PART 2: Application to Airport Communication Network Design......Page 53
5.1.1. Testbed infrastructure......Page 69
5.1.2. Aeronautical node values instantiation......Page 71
5.1.3. Aeronautical services instantiation......Page 72
5.2.2.1. Individual risks......Page 73
5.2.2.2. Propagated risks......Page 78
5.2.2.3. Node and network risks......Page 80
5.2.3. Isolated AeroMACS scenario: EAP vs. RSA sub-scenario......Page 82
5.2.4. Preliminary AeroMACS security enhancement guidance......Page 86
5.2.5. AeroMACS implementation improvements: isolated scenario without operational server vulnerabilities......Page 87
5.2.5.2. Network topology......Page 88
5.2.5.3. Vulnerability statistics......Page 89
5.2.5.5. Propagated risk results......Page 91
5.2.5.6. Network risk results......Page 93
5.2.6.1. Experimental inputs......Page 94
5.2.6.4. Individual risk results......Page 95
5.2.6.5. Propagation risk results......Page 97
5.2.6.6. Network risk results......Page 99
5.2.7.1. Experimental inputs......Page 101
5.2.7.2. Network topology......Page 102
5.2.7.3. Vulnerability statistics......Page 103
5.2.7.4. Individual risk results......Page 105
5.2.7.6. Network risk results......Page 107
5.3. Improving AeroMACS network security......Page 109
5.3.1. DHCP security......Page 111
5.3.2. Mobile IP security......Page 113
Conclusion\r......Page 118
Bibliography......Page 120
Index......Page 125