System Health Monitoring Using a Novel Method: Security Unified Process

Algorithm 1

Risk assessment ().

Require: SGT = [𝐶,𝐼,𝐴]{Security-golden-triangle}

Require:  𝐸=[𝑒₁,𝑒₂,𝑒₃,…,𝑒_𝑛]{Experts}

 1: Cube = [Business, Logical, Physical] {Security Cube}

 2: Business = [Human]

 3: Logical = [Foreign, Country, Organization, Personal, Organizational, Platform, Application, Strategy, Protocol,

  Communication, Design]

 4: Physical = [Media, Storage, Where, Hardware Component]

 5: for  each 𝑑∈ Cube  do

 6:  for  each 𝑠∈𝑑  do

 7:   A = AssetIdentification(𝑑,𝑠) {𝑑: domains, 𝑠: sections}

 8:  end  for

 9: end  for

 10: 𝑇 = ThreatIdentification() {Threat Identification 𝑇=[𝑡₁,𝑡₁,…,𝑡_𝑛]}

 11: Evaluation(𝐸, SGT) {CIA Triad Evaluation}

 12: for each 𝑎∈𝐴  do

 13:  𝑉[𝑎] = VulnerabilityIdentification(𝑎) {Vulnerability Identification 𝑉=[𝑣₁,𝑣₂…,𝑣_𝑛]}

 14: end  for

 15: 𝑅 = RiskIdentification(𝐴,𝑉) {Risk Identification 𝑅=[𝑟₁,𝑟₂,…,𝑟_𝑛]}

 16: for  each  𝑎∈𝐴  do

 17:  AV[𝑎] = AssetValue(𝐸,𝑎) {Asset value}

 18: end  for

 19: for  each  𝑣∈𝑉  do

 20:  VE[𝑣] = VulnerabilityEffect(𝐸,𝑣) {Vulnerability Effect}

 21: end  for

 22: for  each  𝑡∈𝑇  do

 23:  TE[𝑡] = ThreatEffect(𝐸,𝑡) {Threat Effect}

 24: end  for

 25: for  each  𝑟∈𝑅  do

 26:  FRA = Fuzzification(𝑟⋅𝑎) {related asset}

 27:  FRV = Fuzzification(𝑟⋅𝑣) {related vulnerability}

 28:  FRT = Fuzzification(𝑟⋅𝑡) {related threat}

 29:  RE[𝑟] = defuzzification(FRA, FRV, FRT)

 30: end  for

 31: Return  SRE = Sort(RE)