Analysis of Information Security Situation Using Sugeno Fuzzy System

Today, IT has become the backbone of every organization. And this dependence is to such extent, that even a single day downtime of IT systems can lead to huge monetary as well as information loss. Due to this dependence, there is constant threat to IT system from intruders. So protecting the organization's IT system has become a major concern for the corporates. Many organizations are putting millions into security of their IT system. All this gives rise to very pertinent question, how to evaluate current security of organization's IT system and what suitable IT security level to be achieved under certain timelines.The evaluation of security situation is currently the qualitative analysis which is a prolong process. So we need some kind of quick and fairly accurate measurement of IT security situation. This paper is focussed on the same. This work proposes quantitative method of security estimation using fuzzy logic. This quantitative method of evaluation of security situation has few advantages over qualitative method. First advantage is transparency, less human intervention and possibility of benchmarking. The second one is quickness and possibility of computer automation. In this paper, we estimated Value of Security Situation (VSS) based on Quantitative Model for Information Security Situation (QMISS). Estimation of VSS is implemented by using Sugeno method of Fuzzy Inference System (FIS). Sugeno FIS is implemented in MATLAB.