Hierarchical Fuzzy-based Cybersecurity Risk Assessment Model

Abstract

With the rise of IT systems, cyberattacks are becoming more sophisticated, allowing for more intense and complex  attacks. According to the source of the threats, we can  distinguish between attacks based on hardware, software,  physical and human factors. In this study the human factor  is in the focus, because humans are the weakest link;  however, other factors affecting company security are also  taken into account. The authors propose a risk assessment  model that can predict the level of cybersecurity risk in a  company. In this hierarchical model, fuzzy-based  subsystems are applied, as in the field of cybersecurity, the  uncertainties and subjectivity that often arise in the data  and evaluation process, must also be addressed.