A New Fuzzy Risk Assessment Method for the Network Security Based on Fuzzy Similarity Measure

Network security risk analysis is a crucial technique in network and information security. Recently, Chen (2003) applied the COG-based similarity measures of generalized fuzzy numbers to deal with fuzzy risk analysis problems. However, when two different generalized fuzzy numbers have the same center-of-gravity (COG) points, the Chen´s method cannot correctly determine the fuzzy risk. To resolve the above shortcoming and enhance the applicability of risk analysis method to the network security problem, a new hierarchical fuzzy risk assessment method is proposed. In the proposed method, a fuzzy weighted average method is presented to calculate the fuzzy risk value on the basis of the hierarchical security structures, and the ROG-based similarity measure of generalized fuzzy numbers is used to create a complete linguistic approximation model for the network security risks. Finally, two examples demonstrate the feasibility and validity of the proposed method