A Hybrid Model of Hesitant Fuzzy Decision-Making Analysis for Estimating Usable-Security of Software

Abstract

The main idea for practicing research towards security is to maintain usability of the software as well. This can be achieved by making less complex and high secure software. Though considerable efforts have been made in this context by the developers and security experts, the standard of usable-security is not the same as it should be. Therefore, it is important to research more on the most conversant mechanisms for assessing and increasing the usable-security of software. The quantitative evaluation of usability and security is an important part in increasing the level of secure software. This paper, in particular, is intended to estimate the usable-security of software and achieve the objective of developing software with optimum security while retaining its usability. The decision-makers often find it difficult to integrate security and usability. Hence this paper approaches the integration of usability and security with its contributing attributes. Also, in this league, the present research study suggests a novel technique which is the hybrid of Analytic Hierarchy Process (AHP), Hesitant Fuzzy (HF) sets, and Technique for Order of Preference by Similarity to Ideal Solution (TOPSIS) to significantly assess the usability along with security. To test the usefulness of the proposed approach hybrid HF-AHP-TOPSIS technique, the researchers applied it onto software developed for Babasaheb Bhimrao Ambedkar University in India. Furthermore, the procedural sensitivity was also achieved by using the various versions of the method. The findings of the usability along with security assessment insist that this inventive hybrid procedure would be the most conversant mechanism for determining the usable-security of software. Further these findings will be helpful in managing security without affecting the usability for end user. INDEX TERMS Software development life cycle, software security, usable-security, hesitant-fuzzy-AHP, hesitant-fuzzy-TOPSIS.

Fuzzy-Based Symmetrical Multi-Criteria Decision-Making Procedure for Evaluating the Impact of Harmful Factors of Healthcare Information Security

“…Obtained results from both the techniques are illustrated in Table 16 and Figure 8. The results described in Table 16 show that the results calculated from both techniques are highly correlated (person correlation coefficient is) [49][50][51]. It is clearly portrayed in Table 16 that the fuzzy-based methodology provides improved results over the classical methodology.…”

Ontology-based context-sensitive software security knowledge management modeling

“…Interrelation between software security management and context-driven ontologies Figure 1 shows the relationship between software security management, context-driven ontology, and ontology for security management. The concept of ontology plays an important role in the semantic web and particularly in universal computing and next-generation mobile communication systems [16][17][18][19][20]. Ontology can provide a better way of creating associations.…”

“…Further, after the construction of pair-wise comparisons a matrix different fuzzy operation is performed on it and then defuzzification is performed. This work used alpha cut method for defuzzification [18] where alpha cut method as formulated in (4)- (6).…”

“…A Triangular Fuzzy Number (TFN) is represented as (Lo, Mi, Up). The equations(1)(2)(3) are used in changing the linguistic values into TFN[18] and denoted as (Loij, Miij, Upij) where, Loij is lowermost value, Miij is middle value and Upij is uppermost level values assigned to linguistic values. Further, TFN [ɳij] is recognized as the succeeding:…”

Malware Analysis in Web Application Security: An Investigation and Suggestion

“…In order to understand the scenario of malwares against web application security authors find the previous cyber-attack tends against we applications and then forecast the possible growth for future years in malware attacks through a forecasting tool called GMDH Shell DS [4]. [5][6][7]. The attack ratio shown by the authors in Fig.…”