Network Threat Ratings in Conventional DREAD Model Using Fuzzy Logic
One of the most popular techniques to deal with ever growing risks associated with security threats is DREAD model. It is used for rating risk of network threats identified in the abuser stories. In this model network threats needs to be defined by sharp cutoffs. However, such precise distribution is not suitable for risk categorization as risks are vague in nature and deals with high level of uncertainty. In view of these risk factors, the paper proposes a novel fuzzy approach using DREAD model for computing risk level that ensures better evaluation of imprecise concepts. Thus, it provides the capacity to include subjectivity and uncertainty during risk ranking. These threat parameters need to be frequently updated based on feedback from implementation of previous parameters. These feedback are always stated in the form of ordinal ratings, e.g. "high speed", "average performance", "good condition". Different people can describe different values to these ordinal ratings without a clear-cut reason or scientific basis. There is need for a way or means to transform vague ordinal ratings to more appreciable and precise numerical estimates. The paper transforms the ordinal performance ratings of some system performance parameters to numerical ratings using Fuzzy Logic.
Keywords: Fuzzy logic, threat rating, Transformation, DREAD Model
Download Full-Text
ABOUT THE AUTHORS
Ak.Ashakumar Singh
Ak. Ashakumar Singh graduated in Mathematics from Manipur University, Imphal and passed MCA in the year 2000 from the same varsity. He was awarded Ph.D. in the area of Computer Science from the Dept. of Mathematics of the same varsity in the year 2008. Then produced eight M.Phil scholars in Computer Science and now supervising three scholars leading to Ph.D. in Computer Science. The area of research is on Soft computing and related applications of computer science.
K.Surchandra Singh
K.Surchandra Singh completed his Master of Computer Application (MCA) from Manipur University in the year 2000. Currently, he is a research scholar in the Department of Computer Science, CMJ University-India. He was working as faculty in the Institute of Cooperative Management, Imphal (India) since 2001 upto 2011, which has been conducting Post Graduate Diploma in Computer Application (PGDCA) affiliated to Manipur University, Canchipur (India). His research interest is in low cost network activities using Fuzzy logic principles.
Ak.Ashakumar Singh
Ak. Ashakumar Singh graduated in Mathematics from Manipur University, Imphal and passed MCA in the year 2000 from the same varsity. He was awarded Ph.D. in the area of Computer Science from the Dept. of Mathematics of the same varsity in the year 2008. Then produced eight M.Phil scholars in Computer Science and now supervising three scholars leading to Ph.D. in Computer Science. The area of research is on Soft computing and related applications of computer science.
K.Surchandra Singh
K.Surchandra Singh completed his Master of Computer Application (MCA) from Manipur University in the year 2000. Currently, he is a research scholar in the Department of Computer Science, CMJ University-India. He was working as faculty in the Institute of Cooperative Management, Imphal (India) since 2001 upto 2011, which has been conducting Post Graduate Diploma in Computer Application (PGDCA) affiliated to Manipur University, Canchipur (India). His research interest is in low cost network activities using Fuzzy logic principles.
