journal article·2021Open access

Managing Security-Risks for Improving Security-Durability of Institutional Web-Applications: Design Perspective

Abdulaziz Attaallah, Abdullah Algarni, Raees Ahmad Khan

Computers, Materials & Continua· Volume 66· Issue 2

Abstract

The advanced technological need, exacerbated by the flexible time constraints, leads to several more design level unexplored vulnerabilities. Security is an extremely vital component in software development; we must take charge of security and therefore analysis of software security risk assumes utmost significance. In order to handle the cyber-security risk of the web application and protect individuals, information and properties effectively, one must consider what needs to be secured, what are the perceived threats and the protection of assets. Security preparation plans, implements, tracks, updates and consistently develops safety risk management activities. Risk management must be interpreted as the major component for tackling security efficiently. In particular, during application development, security is considered as an add-on but not the main issue. It is important for the researchers to stress on the consideration of protection right from the earlier developmental stages of the software. This approach will help in designing software which can itself combat threats and does not depend on external security programs. Therefore, it is essential to evaluate the impact of security risks during software design. In this paper the researchers have used the hybrid Fuzzy AHP-TOPSIS method to evaluate the risks for improving security durability of different Institutional Web Applications. In addition, the e-component of security risk is measured on software durability, and vice versa. The paper’s findings will prove to be valuable for enhancing the security durability of different web applications.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Information and Cyber Security · Software Engineering Research · Software Engineering Techniques and Practices

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (37)

Show source-provided references
1. STORE: Security threat oriented requirements engineering methodology
2. Fuzzy analytic hierarchy process for software durability: Security risks perspective10.1007/978-981-10-2750-5_49 ↗
3. Evaluating performance of software durability through an integrated fuzzy-based symmetrical method of ANP and TOPSIS10.3390/sym12040493 ↗
4. Security durability assessment through fuzzy analytic hierarchy process
5. A knowledge based integrated system of hesitant fuzzy set, AHP and TOPSIS for evaluating security-durability of web applications10.1109/ACCESS.2020.2978038 ↗
6. An integration of threat modeling with attack pattern and misuse case for effective security requirement elicitation
7. Measuring security-durability through fuzzy based decision-making process10.2991/ijcis.d.190513.001 ↗
8. Comparative literature analysis on security requirements engineering
9. Measuring the security attributes through fuzzy analytic hierarchy process: Durability perspective
10. Durability challenges in software engineering
11. Software security10.1109/MSECP.2004.1281254 ↗
12. Towards building secure software systems10.28945/920 ↗
13. A conceptual framework of info structure for information security risk assessment (ISRA)10.1016/j.jisa.2013.07.002 ↗
14. Proposed framework for security risk assessment10.4236/jis.2011.22008 ↗
15. Information security risk analysis methods and research trends: AHP and fuzzy comprehensive method10.5121/ijcsit.2014.6103 ↗
16. Incorporating a knowledge perspective into security risk assessments
17. Security as a new dimension in embedded system design
18. Risk management perspective in SDLC
19. Revisiting software security: durability perspective10.14257/ijhit.2015.8.2.29 ↗
20. Soft computing approach for prediction of software reliability
21. Software security durability
22. Stability: Abstract roadmap of security
23. Measuring the sustainable-security of web applications through a fuzzy-based integrated approach of AHP and TOPSIS10.1109/ACCESS.2019.2946776 ↗
24. Software engineering for security: A roadmap10.1145/336512.336559 ↗
25. Durable security in software development: Needs and importance
26. Needs and importance of reliability prediction: An industrial perspective10.18576/isl/090105 ↗
27. Effective software security management
28. Major software security risks at design phase
29. Software security: A risk taxonomy
30. Healthcare data breaches: Insights and implications10.3390/healthcare8020133 ↗
31. Helpful and defending actions in software risk management: A security viewpoint
32. Usable-security attribute evaluation using fuzzy analytic hierarchy process
33. Sahu · Data Management, Analytics and Innovation (Advances in Intelligent Systems and Computing) · 2019 · 808 · 221
34. Weaknesses introduced during design, Common Weakness Enumeration, 2008. [online]. Available: https://cwe.mitre.org/data/definitions/701.html.
35. CWE-767: Access to critical private variable via public method, Common Weakness Enumeration, 2009. [online]. Available: https://cwe.mitre.org/data/definitions/767.html.
36. CWE-915: Improperly controlled modification of dynamically-determined object attributes, Common Weakness Enumeration, 2013. Available: https://cwe.mitre.org/data/definitions/915.html, last visit Aug 20, 2020.
37. Kaur · Risk Management and Healthcare Policy · 2020 · 13 · 35510.2147/RMHP.S233706 ↗