Evaluating Performance of Web Application Security Through a Fuzzy Based Hybrid Multi-Criteria Decision-Making Approach: Design Tactics Perspective

Abstract

Design of software can have a major impact on the overall security of the software. Developing a secure website design is a challenge for architectures. It depends on different and tough decisions which determine the security of website. Increasing number of vulnerabilities increase the level of security requirements. Hence, security design tactics are to be adopted to satisfy these security requirements. Security design tactics are the mechanisms to define, detect and mitigate vulnerabilities and attacks. Therefore, faults in the application of security tactics or their weakening during website maintenance could be one of the key reasons behind the emergence of new and severe vulnerabilities that can be targeted by the hackers. There is a need for in-depth analysis of security tactics and its prioritization for the sake of determining the most prioritized factor. This will further help in gaining a more secure system. In this research study, the authors have used the hybrid method of Fuzzy AHP-TOPSIS (Analytic Hierarchy Process-Technique for Order Preference by Similarity Ideal Solution) for the evaluation of security design tactics and its attributes. The efficiency of this approach has been tested on a real time web application of Babasaheb Bhimrao Ambedkar University, Lucknow, India. Further, different web applications of the University have been used to validate the obtained results. This study's evaluation of the most impactful web application design for improving security will help the architects to secure systems by using security tactics.

Evaluating the Impact of Malware Analysis Techniques for Securing Web Applications through a Decision-Making Framework under Fuzzy Environment

“…Further, different variables were defined as the basis for the assessment, and the systems were chosen based on a collection of metric results that use the Integrated AHP and TOPSIS methodology. Alenezi et al [35] developed the Fuzzy AHP-TOPSIS based hybrid approach for evaluating security architecture tactics and their attributes. They tested the efficacy of this method on a case study of real-time web application of Babasaheb Bhimrao Ambedkar University, Lucknow, India.…”

Evaluating the Impact of Blockchain Models for Secure and Trustworthy Electronic Healthcare Records

“…The coefficient correlation demonstrates the effect of the two-value association. The scale ranges from -1 to + 1 [52]. The value close to -1 indicates the lower connection among values, and the value close to + 1 indicates the higher connection among values.…”

Software Security Estimation Using the Hybrid Fuzzy ANP-TOPSIS Approach: Design Tactics Perspective

“…The results of our study also show that the covered factors and their contribution to efficient security mechanisms in security tactics perspective are remarkable. Mamdouh Alenezi et al recently published an article in which they assessed the security of software in a tactics perspective [38]. This article contained Fuzzy AHP-TOPSIS only.…”

“…This article contained Fuzzy AHP-TOPSIS only. Due to network structure rather than tree structure, ANP methodology is better than the AHP methodology [37,38]. Therefore, in the current paper, the authors have taken design tactics as a contributor in the first level of the network, which improvises the results in the end.…”