English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

For a qualitative system sound security practices must be a crucial partthroughout the entire software lifecycle. Furthermore, agile softwaredevelopment has paved the way for overcoming the problems faced by developersduring traditional development process. In the given paper we are using anAgile Security Framework that is compatible with practices of agile processesand inherit in it the benefits of security engineering activities in the formof risk assessment and threat prioritization. One of the most populartechniques to deal with ever growing risks associated with security threats isDREAD model. It is used for rating risk of threats identified in the abuserstories. In this model threats needs to be defined by sharp cutoffs. However,such precise distribution is not suitable for risk categorization as risks arevague in nature and deals with high level of uncertainty. In view of these riskfactors, our paper proposes a novel fuzzy approach using DREAD model forcomputing risk level that ensures better evaluation of imprecise concepts. Thusit provides the capacity to include subjectivity and uncertainty during riskranking. A case study has been presented to illustrate and compare the proposedapproach with the existing one using Matlab.

Fuzzy Logic Approach for Threat Prioritization in Agile Security Framework using DREAD Model