{"id":"https://openalex.org/W2360146046","doi":"https://doi.org/10.4018/ijsse.2016040101","title":"Fuzzy Rule-Based Vulnerability Assessment Framework for Web Applications","display_name":"Fuzzy Rule-Based Vulnerability Assessment Framework for Web Applications","publication_year":2016,"publication_date":"2016-04-01","ids":{"openalex":"https://openalex.org/W2360146046","doi":"https://doi.org/10.4018/ijsse.2016040101","mag":"2360146046"},"language":"en","primary_location":{"id":"doi:10.4018/ijsse.2016040101","is_oa":false,"landing_page_url":"https://doi.org/10.4018/ijsse.2016040101","pdf_url":null,"source":{"id":"https://openalex.org/S43656255","display_name":"International Journal of Secure Software Engineering","issn_l":"1947-3036","issn":["1947-3036","1947-3044"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Secure Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052820694","display_name":"Hossain Shahriar","orcid":"https://orcid.org/0000-0003-1021-7986"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hossain Shahriar","raw_affiliation_strings":["Kennesaw State University, Marietta, Georgia, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kennesaw State University, Marietta, Georgia, USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033589500","display_name":"Hisham M. Haddad","orcid":null},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hisham Haddad","raw_affiliation_strings":["Kennesaw State University, Marietta, Georgia, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kennesaw State University, Marietta, Georgia, USA","institution_ids":["https://openalex.org/I172980758"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I172980758"],"apc_list":null,"apc_paid":null,"fwci":1.3533,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.85787768,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":96},"biblio":{"volume":"7","issue":"2","first_page":"1","last_page":"18"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8469264507293701},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5963130593299866},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5479367971420288},{"id":"https://openalex.org/keywords/fuzzy-rule","display_name":"Fuzzy rule","score":0.5439928770065308},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.538689374923706},{"id":"https://openalex.org/keywords/plan","display_name":"Plan (archaeology)","score":0.5224220752716064},{"id":"https://openalex.org/keywords/fuzzy-logic","display_name":"Fuzzy logic","score":0.511335551738739},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.4639904499053955},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.44195854663848877},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.4399517774581909},{"id":"https://openalex.org/keywords/fuzzy-set","display_name":"Fuzzy set","score":0.43092432618141174},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.21538734436035156},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1770704984664917},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.16305020451545715},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.0929701030254364}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8469264507293701},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5963130593299866},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5479367971420288},{"id":"https://openalex.org/C2780049643","wikidata":"https://www.wikidata.org/wiki/Q5511139","display_name":"Fuzzy rule","level":4,"score":0.5439928770065308},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.538689374923706},{"id":"https://openalex.org/C2776505523","wikidata":"https://www.wikidata.org/wiki/Q4785468","display_name":"Plan (archaeology)","level":2,"score":0.5224220752716064},{"id":"https://openalex.org/C58166","wikidata":"https://www.wikidata.org/wiki/Q224821","display_name":"Fuzzy logic","level":2,"score":0.511335551738739},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.4639904499053955},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.44195854663848877},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.4399517774581909},{"id":"https://openalex.org/C42011625","wikidata":"https://www.wikidata.org/wiki/Q1055058","display_name":"Fuzzy set","level":3,"score":0.43092432618141174},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.21538734436035156},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1770704984664917},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.16305020451545715},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0929701030254364},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.4018/ijsse.2016040101","is_oa":false,"landing_page_url":"https://doi.org/10.4018/ijsse.2016040101","pdf_url":null,"source":{"id":"https://openalex.org/S43656255","display_name":"International Journal of Secure Software Engineering","issn_l":"1947-3036","issn":["1947-3036","1947-3044"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Secure Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:igg:jsse00:v:7:y:2016:i:2:p:1-18","is_oa":false,"landing_page_url":"http://services.igi-global.com/resolvedoi/resolve.aspx?doi=10.4018/IJSSE.2016040101","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Partnerships for the goals","id":"https://metadata.un.org/sdg/17","score":0.5099999904632568}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W23242426","https://openalex.org/W117432202","https://openalex.org/W1510473424","https://openalex.org/W1970104171","https://openalex.org/W1972640883","https://openalex.org/W1981252920","https://openalex.org/W1994716071","https://openalex.org/W1995875735","https://openalex.org/W2008857097","https://openalex.org/W2024474165","https://openalex.org/W2067726273","https://openalex.org/W2076406307","https://openalex.org/W2076817253","https://openalex.org/W2097958165","https://openalex.org/W2109234412","https://openalex.org/W2112768365","https://openalex.org/W2118278564","https://openalex.org/W2122483144","https://openalex.org/W2140793146","https://openalex.org/W2147906352","https://openalex.org/W2150723842","https://openalex.org/W2155903751","https://openalex.org/W2156697706","https://openalex.org/W2171083853","https://openalex.org/W2394498699","https://openalex.org/W2496412756","https://openalex.org/W2963892614","https://openalex.org/W2997807758"],"related_works":["https://openalex.org/W2095999892","https://openalex.org/W2018764758","https://openalex.org/W2383689843","https://openalex.org/W1550668881","https://openalex.org/W617913288","https://openalex.org/W1977400398","https://openalex.org/W2951745010","https://openalex.org/W2347958299","https://openalex.org/W2062873522","https://openalex.org/W2083536291"],"abstract_inverted_index":{"This":[0],"paper":[1],"addresses":[2],"the":[3,18,21,32,48,54,82,102,140],"problem":[4],"of":[5,25,34,56,63,78,132],"assessing":[6],"risk":[7,49,83,103,148],"in":[8,124],"web":[9,121],"application":[10,95],"due":[11],"to":[12,30,46,52,69,80,93,100,129],"implementation":[13],"level":[14],"vulnerabilities.":[15,134],"In":[16],"particular,":[17],"authors":[19,59,113],"address":[20,53],"common":[22,133],"research":[23],"challenge":[24],"finding":[26],"enough":[27],"historical":[28],"data":[29],"compute":[31,47],"probability":[33],"vulnerabilities":[35],"and":[36,51,97,104,126],"exploitations.":[37],"They":[38,73],"develop":[39,75],"a":[40,61,76,90],"Fuzzy":[41],"Logic":[42],"based":[43],"System":[44],"(FLS)1":[45],"uniformly":[50],"diversity":[55],"risks.":[57],"The":[58,85,112,135],"propose":[60],"set":[62,77],"crisp":[64],"metrics":[65],"that":[66,139],"are":[67],"used":[68],"define":[70],"fuzzy":[71],"sets.":[72],"also":[74],"rule-bases":[79],"assess":[81,101],"level.":[84],"proposed":[86,116,141],"FLS":[87,142],"can":[88,144],"be":[89],"useful":[91],"tool":[92],"aid":[94],"developers":[96],"industry":[98],"practitioners":[99],"plan":[105],"ahead":[106],"for":[107],"employing":[108],"necessary":[109],"mitigation":[110],"approaches.":[111],"evaluate":[114],"their":[115],"approach":[117,143],"using":[118],"three":[119],"real-world":[120],"applications":[122],"implemented":[123],"PHP,":[125],"apply":[127],"it":[128],"four":[130],"types":[131],"initial":[136],"results":[137],"indicate":[138],"effectively":[145],"discover":[146],"high":[147],"applications.":[149]},"counts_by_year":[{"year":2018,"cited_by_count":2}],"updated_date":"2026-06-11T06:19:23.411458","created_date":"2025-10-10T00:00:00"}