Author Description

With a focus on the mathematics of risk, emphasizing the qualitative insights that can be obtained from applying structured mathematical thinking. After establishing the rules of the game, the text introduces security and risk terminology, the reason for risk, and the six questions that define risk. It presents the mathematics essential for properly describing systems, articulating scenarios, working with quantities, expressing likeliness, considering variability, assigning value, and considering attacker and defender behavior. The author also explains how to scope a risk study in all its various forms.