Fuzzy Multi Criteria Decision Analysis Method for Assessing Security Design Tactics for Web Applications

Abstract

Security and design tactics estimation of web application for ensuring the security, efficiency and design tactics of web applications is necessary. A survey conducted by the security research team, Micro Focus, of the USA reveals that 80% of the vulnerability defects occur due to the coding defect, validation causes 60% of the errors, 70% errors are due to encapsulation and path traversal. Such statistics call for a more efficacious design to enhance software security. The primary research goal of this study is to compute or evaluate the security threats of the software and web applications from the perspective of design tactics. Towards this intent, we have employed the methodology of Fuzzy Analytic Hierarchy Process (F-AHP) to evaluate the security factors or obtain the weight of different factors. The different design tactics of web application have also been selected according to the factors that affect the security. In this article, researchers have used a crossbreed technique of fuzzy based Multi Criteria Decision Method (MCDM) technique, i.e., F-AHP and Fuzzy Technique for Order of Preferences by Similarity to Ideal Solutions (F-TOPSIS) Technique. The results of the assessment of security will be helpful for developers or experts in designing the security tactics of software or web applications. We have also compared the results of classical and Fuzzy approach to determine the weight of alternatives or attributes and rank of the factors. This process is an effective and conclusive methodology for the developers working for more enhanced secure design tactics of software and web application design.

Comparative analysis of fuzzy multi-criteria decision-making methods for quality of service-based web service selection

“…Author Year Applied on Techniques compared Similarity measure performed [6] 2019 Supplier selection Fuzzy analytic hierarchy process (FAHP), FT, and FV No [9] 2021 House selection problem FT, FV, FWASPAS, and fuzzy measure (FM) Yes [8] 2022 Dentistry biomaterial selection AHP, followed by the use of AHP-VIKOR, AHP-TOPSIS, AHP-MOORA, AHP-ELECTRE, and AHP-PROMTHEE Yes [11] 2022 Supplier selection TOPSIS, VIKOR, COMET, SPOTIS, and MARCOS Yes [7] 2023 Private tutor selection AHP-SAW, AHP-WP, and AHP-TOPSIS No [10] 2019 Web service selection SAW, AHP, TOPSIS VIKOR, and COPRAS Yes [12] 2023 Cloud service provider selection Hesitant intuitionistic FD-TOPSIS model No [13] 2021 Cloud environment AHP, PROMETHEE, TOPSIS, and VIKOR No [14] 2022 Clean energy evaluation SAW, TOPSIS, ELECTRE, VIKOR and COPRAS No [15] 2020 Web applications security design assessment…”

“…-Step 4: crisp values obtained via defuzzification. CFCS technique was proposed by Opricovic and Tzeng for getting total-influence matrix figures with the steps in (9)(10)(11)(12)(13)(14)(15).…”

“…Crisp values are produced using the CFCS algorithm. Total normalized crisp values are calculated as (15).…”

Analytic Review of Healthcare Software by Using Quantum Computing Security Techniques

“…Auditability [P4]: Appropriateness is a key safety component. For example, audit logs primarily record who accessed which electronic health record (EHR) (or particular personal health record), why they did so, and the timestamp of each life cycle operation [23].…”

Analyzing the Data of Software Security Life-Span: Quantum Computing Era

“…The basic difference between the classical computer and quantum computer are its operation on bit and qubits. Bits operates with 1 and 0 operation at two different time lines, while in quantum computer the qubits operate 1 and 0 at the same time by the use of superposition principle and entanglement [15]. Fig.…”