Fuzzy STRIDE Model based on Werners Aggregation Operator for Computer Network Threat Modelling

Abstract

Security has become a significant concern in proper functioning of modern network systems. To prevent and mitigate a system from attacks, an important issue is realization of the possible damage that different threats could cause to a network system. Keeping this issue in view, this paper proposes modeling of threats and their risk assessment. The STRIDE threat assessment model covers numerous existing threats that are related to all security properties necessary for a secure network. A STRIDE based strategy has been proposed which takes the number and types of attacks as input and applies a fuzzy logic based threat assessment approach to assess the level of attack. The presented work uses a fuzzy operator, namely, Werners operator and a decision-making approach based on a fuzzy rule. KDD 99 dataset was used to evaluate the proposed fuzzy STRIDE model. Empirical results indicate that the proposed approach was able to identify the combined threat level of multiple types of attacks.