Analyzing Interrelationships Among Software Vulnerabilities Using Fuzzy DEMATEL Approach

Misbah Anjum (), P. K. Kapur (), Vernika Agarwal () and Vivek Kumar ()
Additional contact information
Misbah Anjum: Amity Institute of Information Technology, Amity University
P. K. Kapur: Amity University
Vernika Agarwal: Amity University
Vivek Kumar: University of Delhi

A chapter in Reliability and Maintainability Assessment of Industrial Systems, 2022, pp 291-300 from Springer

Abstract: Abstract The increasing data infringement is pressuring software organizations to create and maintain secure software. Although, not all assaults can be anticipated or prevented, many can be avoided by eliminating vulnerabilities in software. Security teams must discover a mechanism to understand the interdependence of vulnerabilities after their discovery to identify which security vulnerability pose the greatest risk and demand immediate attention. The limited revenue and the time taken by the software testers put additional pressure to select those with high severity and are being a cause for other severe flaws. Addressing such defects is the main step towards understanding the cause-effect relationship among the vulnerabilities. The present objective is to propose a framework for assessing these interrelationships of various software vulnerabilities by utilizing Fuzzy Decision-making Trial and Evaluation Laboratory (F-DEMATEL). The fuzzy theory assists in the decision mapping, whereas the DEMATEL technique is utilized to illustrate the contextual link between the kinds of vulnerability. The data is validated for software testing company placed in northern India.

Keywords: Vulnerabilities; Multi-Criteria Decision Making (MCDM); Prioritization; Fuzzy DEMATEL (search for similar items in EconPapers)
Date: 2022
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:ssrchp:978-3-030-93623-5_13

Ordering information: This item can be ordered from
http://www.springer.com/9783030936235

DOI: 10.1007/978-3-030-93623-5_13

Access Statistics for this chapter

More chapters in Springer Series in Reliability Engineering from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().