Scopus
🔓 Açık Erişim YÖKSİS DOI Eşleşti
SJR Q1
The fuzzy common vulnerability scoring system (F-CVSS) based on a least squares approach with fuzzy logistic regression
Egyptian Informatics Journal · Temmuz 2021
YÖKSİS Kayıtları
The fuzzy common vulnerability scoring system (F-CVSS) based on a least squares approach with fuzzy logistic regression
Egyptian Informatics Journal · 2021 SCI-Expanded
Prof. Dr. FATİH BAŞÇİFTÇİ →
YÖKSİS Kayıtları — ISSN Eşleşmesi
The fuzzy common vulnerability scoring system (F-CVSS) based on a least squares approach with fuzzy logistic regression
2021 ISSN: 1110-8665 SCI-Expanded Q2
Prof. Dr. FATİH BAŞÇİFTÇİ →
Makale Bilgileri
ISSN11108665
Yayın TarihiTemmuz 2021
Cilt / Sayfa22 · 145-153
Scopus ID2-s2.0-85088786623
Erişim🔓 Açık Erişim
Özet
This study presents a new approach for calculations within the Common Vulnerability Scoring System that scoring the effects of vulnerabilities in software on the security status. These calculations is the method that is most commonly used in scoring software vulnerabilities. The present model demonstrates how software security vulnerabilities can be calculated using linguistic terms. Therefore, the proposed method has a more flexible structure than this system. The current Common Vulnerability Scoring System formula and scores were used to assess and implement the presented model. The aim was to form a fuzzy model called the Fuzzy Common Vulnerability Scoring System based on the success probabilities which are defined using linguistic terms such as low, very low or high. Moreover, the Fuzzy Logistic Regression (FLR) method was used to define the relationship between the exact inputs and fuzzy multiple outputs, and the Least Squares Method was used to estimate the parameters of the presented model. The performance of the model was evaluated by a comparison using Mean Squared Error (MSE), Mean Absolute Error (MAE), and Kim and Bishu's criterion. Validity of the fuzzy regression model is demonstrated with different fitness functions. The expectation was that more practical estimations with better error tolerance can be achieved by using linguistic terms to assess common vulnerabilities.
Yazarlar (2)
1
Kerem Gencer
ORCID: 0000-0002-2914-1056
2
Fatih Başçiftçi
Anahtar Kelimeler
Common Vulnerability Scoring System
Fuzzy least squares
Fuzzy logistic regression
Probability rates
Kurumlar
Karamanoğlu Mehmetbey Üniversitesi
Karaman Turkey
Selçuk Üniversitesi
Selçuklu Turkey
Scimago Dergi (ISSN Eşleşmesi)
Egyptian Informatics Journal
Q1
OA
SJR Skoru0,985
H-Index56
YayıncıElsevier B.V.
ÜlkeNetherlands
Computer Science Applications (Q1)
Information Systems (Q1)
Management Science and Operations Research (Q1)
Metrikler
14
Atıf
2
Yazar
4
Anahtar Kelime