Quantitative Security Risk Assessment and Management for Railway Transportation Infrastructures

Authors:
Francesco Flammini;Andrea Gaglione;Nicola Mazzocca;Concetta Pragliola
Affiliations:
ANSALDO STS - Ansaldo Segnalamento Ferroviario S.p.A., Naples, Italy and Dipartimento di Informatica e Sistemistica, Universita' di Napoli "Federico II", Naples, Italy;Dipartimento di Informatica e Sistemistica, Universita' di Napoli "Federico II", Naples, Italy;Dipartimento di Informatica e Sistemistica, Universita' di Napoli "Federico II", Naples, Italy;ANSALDO STS - Ansaldo Segnalamento Ferroviario S.p.A., Naples, Italy
Venue:
Critical Information Infrastructure Security
Year:
2009

Citing 0
Cited 2

On the use of models for the dependability and security of transit systems and infrastructures: a multi-year industrial experience report

International Journal of Critical Computer-Based Systems
Dynamic estimation of local mean power in GSM-R networks

Wireless Networks

Quantified Score

Hi-index	0.01

Visualization

Abstract

Scientists have been long investigating procedures, models and tools for the risk analysis in several domains, from economics to computer networks. This paper presents a quantitative method and a tool for the security risk assessment and management specifically tailored to the context of railway transportation systems, which are exposed to threats ranging from vandalism to terrorism. The method is based on a reference mathematical model and it is supported by a specifically developed tool. The tool allows for the management of data, including attributes of attack scenarios and effectiveness of protection mechanisms, and the computation of results, including risk and cost/benefit indices. The main focus is on the design of physical protection systems, but the analysis can be extended to logical threats as well. The cost/benefit analysis allows for the evaluation of the return on investment, which is a nowadays important issue to be addressed by risk analysts.