Strict intuitionistic fuzzy entropy and application in network vulnerability evaluation

By analyzing existing construction methods of intuitionistic fuzzy entropy (IFE), the entropies of intuitionistic fuzzy numbers cannot be distinguished when membership function equals non-membership function. The generalization performance of traditional IFE is insufficient. To overcome the limitation of IFE definition, referencing classical mathematic strict comparison operation, an axiomatic definition of strict intuitionistic fuzzy entropy (SIFE) and four constraint requirements are proposed in this paper. Firstly, two SIFE construction methods are proposed and their constraint requirements are certified. Secondly, a general formula is extracted from the novel construction methods. Thirdly, combining vulnerability evaluation model and SIFE theory, IFE is applied in the network information security field. The proposed evaluation model is deployed in the common vulnerability scoring system to evaluate Apache Web Server chunked encoding remote overflow vulnerability. The experiment result shows that the proposed vulnerability evaluation method is a feasible multi-expert evaluation fusing model.