Risk Propagation Assessment for Network Security. Application to Airport Communication Network Design

Transcription

1 Brochure More information from Risk Propagation Assessment for Network Security. Application to Airport Communication Network Design Description: The focus of this book is risk assessment methodologies for network architecture design. The main goal is to present and illustrate an innovative risk propagation-based quantitative assessment tool. This original approach aims to help network designers and security administrators to design and build more robust and secure network topologies. As an implementation case study, the authors consider an aeronautical network based on AeroMACS (Aeronautical Mobile Airport Communications System) technology. AeroMACS has been identified as the wireless access network for airport surface communications that will soon be deployed in European and American airports mainly for communications between aircraft and airlines. It is based on the IEEE standard, also known as WiMAX. The book begins with an introduction to the information system security risk management process, before moving on to present the different risk management methodologies that can be currently used (quantitative and qualitative). In the third part of the book, the authors original quantitative network risk assessment model based on risk propagation is introduced. Finally, a network case study of the future airport AeroMACS system is presented. This example illustrates how the authors quantitative risk assessment proposal can provide help to network security designers for the decision-making process and how the security of the entire network may thus be improved. Contents Part 1. Network Security Risk Assessment 1. Introduction to Information System Security Risk Management Process. 2. System Security Risk Management Background. 3. A Quantitative Network Risk Management Methodology Based on Risk Propagation. Part 2. Application to Airport Communication Network Design 4. The AeroMACS Communication System in the SESAR Project. 5. Aeronautical Network Case Study. About the Authors Mohamed Slim Ben Mahmoud is a research engineer for the research group ResCo at the TELECOM laboratory of ENAC, the French national institution for civil aviation. Nicolas Larrieu is a teacher and researcher at the research group ResCo at the TELECOM laboratory of ENAC. Alain Pirovano is a teacher and researcher and head of the research group ResCo at the TELECOM laboratory of ENAC. Contents: LIST OF FIGURES ix LIST OF TABLES xiii INTRODUCTION xv PART 1. NETWORK SECURITY RISK ASSESSMENT 1 CHAPTER 1. INTRODUCTION TO INFORMATION SYSTEM SECURITY RISK MANAGEMENT PROCESS On the importance of network security for network designers On the impact of risk assessment in the decision-making process for network security designers Quantitative versus qualitative risk assessment approaches Network security risk propagation concept Impact of node correlation 10

2 Network security risk transitivity Network security risk propagation illustrative case 12 CHAPTER 2. SECURITY RISK MANAGEMENT BACKGROUND Qualitative security risk management methods CRAMM OCTAVE EBIOS MEHARI CORAS Discussion Quantitative security risk assessment approaches Toward a quantitative propagation-based risk assessment methodology 25 CHAPTER 3. A QUANTITATIVE NETWORK RISK ASSESSMENT METHODOLOGY BASED ON RISK PROPAGATION Quantifying methodology parameters Network risk decomposition Node value Enhanced node value Impact of threats Likelihood of threats Network security risk assessment process Conclusion 39 PART 2. APPLICATION TO AIRPORT COMMUNICATION NETWORK DESIGN 41 CHAPTER 4. THE AEROMACS COMMUNICATION SYSTEM IN THE SESAR PROJECT Overview of the European SESAR project Overview of aeronautical communications operating concept and requirements Introduction to the AeroMACS communication system AeroMACS protocol stack AeroMACS reference network architecture AeroMACS security considerations Analysis of AeroMACS security weaknesses AeroMACS reference network topology 55

3 Isolated AeroMACS network architecture End-to-end AeroMACS network architecture 56 CHAPTER 5. AERONAUTICAL NETWORK CASE STUDY Experimental parameters Testbed infrastructure Aeronautical node values instantiation Aeronautical services instantiation Isolated vs. end-to-end emulation scenarios AeroMACS case study: experimental results Main inputs for emulation scenarios Isolated AeroMACS scenario: preliminary results Individual risks Propagated risks Node and network risks Isolated AeroMACS scenario: EAP vs. RSA sub-scenario Preliminary AeroMACS security enhancement guidance AeroMACS implementation improvements: isolated scenario without operational server vulnerabilities Experimental inputs Network topology Vulnerability statistics Individual risk results Propagated risk results Network risk results AeroMACS topological improvements: isolated scenario with two ASN gateways Experimental inputs Network topology Vulnerability statistics Individual risk results Propagation risk results Network risk results Scenario with end-to-end AeroMACS topology 91

4 Experimental inputs Network topology Vulnerability statistics Individual risk results Propagated risk results Network risk results Improving AeroMACS network security DHCP security Mobile IP security 103 CONCLUSION 109 BIBLIOGRAPHY 111 INDEX 117 Ordering: Order Online - Order by Fax - using the form below Order by Post - print the order form below and send to Research and Markets, Guinness Centre, Taylors Lane, Dublin 8, Ireland.

5 Page 1 of 2 Fax Order Form To place an order via fax simply print this form, fill in the information below and fax the completed form to (from USA) or (from Rest of World). If you have any questions please visit Order Information Please verify that the product information is correct. Product Name: Web Address: Office Code: Risk Propagation Assessment for Network Security. Application to Airport Communication Network Design SC Product Format Please select the product format and quantity you require: Hard Copy (Hard Back): Quantity USD USD 29 Shipping/Handling * Shipping/Handling is only charged once per order. Contact Information Please enter all the information below in BLOCK CAPITALS Title: Mr Mrs Dr Miss Ms Prof First Name: Last Name: Address: * Job Title: Organisation: Address: City: Postal / Zip Code: Country: Phone Number: Fax Number: * Please refrain from using free accounts when ordering (e.g. Yahoo, Hotmail, AOL)

6 Page 2 of 2 Payment Information Please indicate the payment method you would like to use by selecting the appropriate box. Pay by credit card: You will receive an with a link to a secure webpage to enter your credit card details. Pay by check: Please post the check, accompanied by this form, to: Research and Markets, Guinness Center, Taylors Lane, Dublin 8, Ireland. Pay by wire transfer: Please transfer funds to: Account number Sort code Swift code IBAN number Bank Address ULSBIE2D IE78ULSB Ulster Bank, Main Street, Blackrock, Co. Dublin, Ireland. If you have a Marketing Code please enter it below: Marketing Code: Please note that by ordering from Research and Markets you are agreeing to our Terms and Conditions at Please fax this form to: (646) or (646) From USA or From Rest of World