A step towards Secure Software System using fuzzy logic

With expanding interconnectivity and extensive use of software systems, risk management has come under heavy strain. The present day security environment demands security mechanisms that rarely fail. In this paper we have tried to take a step further towards foolproof security. The present security measures are based on binary principle. The security mechanisms and procedures adopted at present make the software system strong up to a point and then fail catastrophically. In this paper we have tried to explore some innovative measures and proposed a new approach which will henceforth be named as “Secure Software System (SSS)”. Here we have tried to avert the failed state of the system by induction of `Fuzzy Logic'. This will help us to evolve intermediate stages between the safe state and failed state for security goals and resultant security level to be constantly monitored by actors associated with this arrangement. These actors will be prompt in taking additional countermeasures to strengthen the since applied mitigation policies for different threats before the attacker is successful in his mission. These measures will break the jinx of brittleness in between the two states which has gone unattended so far.