Fuzzy-Based Analysis of Information Security Situation

Abstract

As information technology has been a backbone of each sector today, security of information has also been a critical issue for every organization. Once we have decided to secure our organization by various means such as closed circuit camera, antivirus, firewalls, and biometric access controls, question comes before us how can we benchmark our security. Benchmarking of organizational security requires measurement of security situation through value of security situation (VSS) and quantitative model of information security situation (QMISS). Currently, a little amount of research has been done in organizational IT security metrics such as VSS. Most of the security parameters input to VSS can be measured only with inherent uncertainties. For example, “the existence of security policy” often has linguistic answers only (started or in progress). Fuzzy logic is known to better suit for uncertainties. In this paper, we worked on fuzzy-based analysis of QMISS model and VSS. This fuzzy-based analysis of the given model investigates model aspects in detail in the fuzzy environment. It is concluded that QMISS model based VSS computation can be implemented using fuzzy logic as mathematical tool. The analysis is done with help of MATLAB simulation of fuzzy Inference System (FIS).

Proposed QMISS model for security value VSS is as follows: [1].