journal article·2021Open access

Evaluating the Impact of Software Security Tactics: A Design Perspective

Mamdouh Alenezi, Abhishek Kumar Pandey, Richa Verma, Mohd Faizan, Shalini Chandra, Alka Agrawal, Rajeev Kumar, Raees Ahmad Khan

Computers, Materials & Continua· Volume 66· Issue 3

Abstract

Design architecture is the edifice that strengthens the functionalities as well as the security of web applications. In order to facilitate architectural security from the web application’s design phase itself, practitioners are now adopting the novel mechanism of security tactics. With the intent to conduct a research from the perspective of security tactics, the present study employs a hybrid multi-criteria decision-making approach named fuzzy analytic hierarchy process-technique for order preference by similarity ideal solution (AHP-TOPSIS) method for selecting and assessing multi-criteria decisions. The adopted methodology is a blend of fuzzy analytic hierarchy process (fuzzy AHP) and fuzzy technique for order preference by similarity ideal solution (fuzzy TOPSIS). To establish the efficacy of this methodology, the results are obtained after the evaluation have been tested on fifteen different web application projects (Online Quiz competition, Entrance Test, and others) of the Babasaheb Bhimrao Ambedkar University, Lucknow, India. The tabulated outcomes demonstrate that the methodology of the Multi-Level Fuzzy Hybrid system is highly effective in providing accurate estimation for strengthening the security of web applications. The proposed study will help experts and developers in developing and managing security from any web application design phase for better accuracy and higher security.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Web Application Security Vulnerabilities · Network Security and Intrusion Detection · Information and Cyber Security

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (27)

Show source-provided references
1. Revisiting software reliability
2. L.Lofgren, Website security guide. 2019. [Online]. Available: https://www.quicksprout.com/website-security/. (accessed 31 July 2020).
3. A knowledge based integrated system of hesitant fuzzy set, AHP and TOPSIS for evaluating security-durability of web applications10.1109/ACCESS.2020.2978038 ↗
4. Identifying availability tactics to support security architectural design of micro service-based systems10.1145/3344948.3344996 ↗
5. Evaluating performance of web application security through a fuzzy based hybrid multi-criteria decision-making approach: Design tactics perspective10.1109/ACCESS.2020.2970784 ↗
6. Security durability assessment through fuzzy analytic hierarchy process10.7717/peerj-cs.215 ↗
7. Ranking of performance measures of GSCM towards sustainability: Using analytic hierarchy process
8. B.Stack, Here’s how much your personal information selling for on the dark web. 2017. [Online]. Available: https://www.experian.com/blogs/ask-experian/heres-how-much-your-personal-information-is-selling-for-on-the-dark-web/. (Accessed 31 July 2020).
9. Web application security. 2018. [Online]. Available: https://www.techopedia.com/definition/24377/web-application-security. (Accessed 31 July 2020).
10. A methodological approach to apply security tactics in software architecture design
11. Revising a security tactics hierarchy through decomposition, reclassification, and derivation
12. A methodology for mining security tactics from security patterns
13. Information security and privacy in healthcare: Current state of research10.1504/IJIEM.2010.035624 ↗
14. Key issues in healthcare data integrity: Analysis and recommendations10.1109/ACCESS.2020.2976687 ↗
15. Measuring security durability of software through fuzzy-based decision-making process10.2991/ijcis.d.190513.001 ↗
16. B.SommardahlDurable Software, Awkward Coder Learning to Behave in Public 5–8. 2013. [Online]. Available: https://www.durable-north-america.com/service/duraprint-software.html(Accessed 31 July 2020).
17. Fuzzy-based symmetrical multi-criteria decision-making procedure for evaluating the impact of harmful factors of healthcare information security10.3390/sym12040664 ↗
18. Risk management perspective in SDLC
19. Revisiting software security risks10.9734/BJMCS/2015/19872 ↗
20. Usable-security assessment through a decision-making procedure
21. Multi-level fuzzy system for usable-security assessment
22. Measuring the sustainable-security of web applications through a fuzzy-based integrated approach of AHP and TOPSIS10.1109/ACCESS.2019.2946776 ↗
23. A performance evaluation model by integrating fuzzy AHP and fuzzy TOPSIS methods10.1016/j.eswa.2010.04.066 ↗
24. ‘A fuzzy multicriteria decision-making (MCDM) model for sustainable supplier evaluation and selection based on triple bottom line approaches in the garment industry10.3390/pr7070400 ↗
25. An integrated approach of fuzzy logic, AHP and TOPSIS for estimating usable-security of web applications10.1109/ACCESS.2020.2970245 ↗
26. Evaluating the security impact of healthcare web applications through fuzzy based hybrid approach of multi-criteria decision-making analysis10.1109/ACCESS.2020.3010729 ↗
27. Correlation (Pearson, Kendall, Spearman), Statistics Solutions, 2018. [Online]. Available: https://www.statisticssolutions.com/correlation-pearson-kendall-spearman/. (Accessed 4 August 2020).