Quantitative Risk Management for Communication and Information Systems: State-of-the-Art and Challenges

This survey paper provides an overview of the state of the art models applied to different domains, from software security to networks and communication, and establishes the link between quantitative risk management and adaptive security models. The present paper provides a detailed and comparative state of the art of the quantitative approaches to ICT risk management, as well as the mathematical models used to define the security metrics while measuring the risks.