Défis de la sécurité de l'information. Support à la gestion des risques de sécurité par les modèles

Within the organisations, information system security is more and more tackled with the help of risk management approaches. However these approaches are on one hand not well suited to be applied on information system development and on the other hand, products coming from the different risk management steps performed are generally not enough formal. Our research work proposes to improve the different risk management steps with models. In order to achieve this objective, we first define a conceptual model associated with the information system security risk management domain, and enriched with appropriate metrics for performing reasoning. We define then a modelling language for formally representing risks analysis artefacts. MOTS-CLÉS : gestion des risques, sécurité, norme, modélisation.