Modeling Software Vulnerability Injection-Discovery Process Incorporating Time-Delay and VIKOR Based Ranking

Researchers have widely focused on catering software quality attributes viz. reliability and maintainability. However, the reliance on software and software-based products have redirected the focus of researchers/ engineers towards security. The vulnerability in software can be due to design flaws, implementation errors, configuration errors, etc., making it prone to attacks and can be used for malicious activities. Timely detection and fixation of these loopholes can enhance the development of safe and secure software thereby minimizing the efforts and resources required to fix them afterwards. With the aim of modeling the discovery process of vulnerability, in this chapter time delay-based formulation for vulnerability injection and discovery has been proposed which has been modeled by considering the infinite server queuing theory. For the empirical validation two vulnerability discovery data has been used. Further VIKOR, a well-known Multi Criteria Decision Making (MCDM) technique has been used to rank the different proposed models.