// Comparison

Cyberattaque et cyberdéfense vs Cybersécurité: Which Should You Read?

Two cybersecurity books on Strategy, compared honestly: who each is for, what each does best, and which to read first.

Advanced
3/52011
Cyberattaque et cyberdéfense

Daniel Ventre

An academic, systematic treatment of cyberconflict — doctrines, actors, attack and defence scenarios — from a CNRS researcher who is one of France's most prolific scholars of cyberwar.

Intermediate
4/52022
Cybersécurité

Analyser les risques, mettre en œuvre les solutions

Solange Ghernaouti

Solange Ghernaouti's broad academic survey of cybersecurity — risk analysis, governance, technical and legal dimensions — the standard French university reference, now in its 7th edition.

Read this if

Researchers, analysts and strategy students who want a rigorous, referenced treatment of cyberconflict as a field of study rather than a popular account.
Students, managers and RSSI who need the whole landscape: risk, governance, legal, organisational and technical defence in one structured textbook. Strong on the managerial and risk-analysis side that purely technical books skip.

Skip this if

Readers wanting a quick read or practical security skills; it's dense, academic, and over a decade old, so many examples predate the modern era.
Hands-on practitioners looking for attacks, tooling or labs. This is a survey and risk-management text, not a technical how-to; it explains the field rather than teaching you to break or build.

Key takeaways

  • One of the foundational French academic texts on cyberconflict, heavily referenced and systematic.
  • Strong on taxonomy and doctrine — how states conceptualise attack and defence — rather than current events.
  • From 2011: read it for the framework, not the latest incidents; Ventre's later books update the material.
  • The reference French academic textbook on cybersecurity, regularly updated — useful precisely because it's broad and structured rather than deep.
  • Its strength is risk analysis and governance: how to frame, measure and organise security, not how to exploit a target.
  • Better as a course backbone or a manager's orientation than as a practitioner's bench reference.

How they compare

We rate Cybersécurité higher (4/5 against 3/5 for Cyberattaque et cyberdéfense). For most readers, that means Cybersécurité is the primary pick and Cyberattaque et cyberdéfense is a useful follow-up.

Cyberattaque et cyberdéfense is pitched at advanced level. Cybersécurité is pitched at intermediate level. Read the easier one first if you're not yet comfortable with the topic.

Cyberattaque et cyberdéfense and Cybersécurité both cover Strategy, so reading them in sequence reinforces the same material from different angles.

Keep reading

Related topics