A Framework for Prioritizing Software Vulnerabilities Using Fuzzy Best-Worst Method
Misbah Anjum, P. K. Kapur, Vernika Agarwal, Sunil Kumar Khatri · 2020
The vulnerabilities or bugs in the software pose serious threats to cybersecurity, which is a crucial task for software testing companies. To reduce the risk of the software being exposed to such threats the software testers need to identify appropriate controls to mitigate the vulnerabilities. Since there is a constraint on the revenues and the time that these testers can utilize for carrying out security checks, they need to prioritize the vulnerabilities and select those which have maximum severity. Thus, prioritizing the criticality and severity of vulnerabilities to fix such flaws is the primary step in this direction. Taking this into consideration, the purpose of this analysis is to develop a method for determining the relative vulnerability of sensitive network protection services to attacks. To integrate the decision-makers ambiguity and subjectivity, we used a hybrid Fuzzy Best-Worst Method (FBWM) to prioritize the vulnerabilities identified in the software. This system is validated using the case of an Indian software development firm situated in the Northern part of the country.