<p>The widespread adoption of microservice architectures has given rise to a new set of software security challenges. These challenges stem from the unique features inherent in microservices. It is important to systematically assess and address these software security issues through effective security risk assessments. However, existing risk assessment approaches, such as expert-based manual assessment, prove inefficient in accurately evaluating the security risks of microservices. Furthermore, the absence of security vulnerability metrics hampers the evaluation of these risks. To address these issues, we propose <i>CyberWise Predictor</i>, a framework designed for predicting and assessing security risks associated with microservice architectures. Our framework employs transformers, which are deep learning-based natural language processing models, to analyze descriptions of vulnerabilities for predicting vulnerability metrics to assess security risks. Our experimental evaluation shows the effectiveness of <i>CyberWise Predictor</i>, achieving an average accuracy of <b>92%</b> in automatically predicting vulnerability metrics for their risk assessment.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Towards deep learning enabled cybersecurity risk assessment for microservice architectures

  • Majid Abdulsatar,
  • Hussain Ahmad,
  • Diksha Goel,
  • Faheem Ullah

摘要

The widespread adoption of microservice architectures has given rise to a new set of software security challenges. These challenges stem from the unique features inherent in microservices. It is important to systematically assess and address these software security issues through effective security risk assessments. However, existing risk assessment approaches, such as expert-based manual assessment, prove inefficient in accurately evaluating the security risks of microservices. Furthermore, the absence of security vulnerability metrics hampers the evaluation of these risks. To address these issues, we propose CyberWise Predictor, a framework designed for predicting and assessing security risks associated with microservice architectures. Our framework employs transformers, which are deep learning-based natural language processing models, to analyze descriptions of vulnerabilities for predicting vulnerability metrics to assess security risks. Our experimental evaluation shows the effectiveness of CyberWise Predictor, achieving an average accuracy of 92% in automatically predicting vulnerability metrics for their risk assessment.