Enhancing Cybersecurity Metrics Evaluation Through the Application of Fuzzy Ahp Methodology

To successfully run an enterprise in this competitive era with new security threats emerging every day, a strong security system is the need of the hour. The objective of cybersecurity is to protect data and important information from unauthorized persons. They can be strangers or people working for the organization. Weakness in the existing system and potential threats from the attackers are important to build appropriate defense mechanism. The interaction between protection mechanism and potential risks leads to many situations. In the proposed paper, the hierarchy of security metrics is described. Security metrics evaluation depends upon various factors, and thus, multiple criteria decision-making methods can be applied. Various parameters defining cybersecurity need both qualitative and quantitative measurement and handling, and thus, concepts of fuzzy set theory can be incorporated to handle qualitative data successfully. Criteria priories are represented using fuzzy triangular scales. Fuzzy AHP techniques (Buckley’s method) are used in the proposed paper for calculating metrics defining cybersecurity.