Evaluation of security vulnerability severity based on CMAHP

Security vulnerabilities are a main cause of network security. Vulnerability severity assessment gives us the constructive suggestions on the priority of bug fixes, which help reduce the occurrence of the security incidents. To obtain the good assessment results, a method of evaluating vulnerability severity based on cloud model and analytic hierarchy process (CMAHP) was proposed. First, we utilize AHP to establish vulnerability severity multi-level index system. Then, the cloud theory is used to set up the remark set cloud, the scale set cloud and the membership function cloud to respectively confirm the quantification cloud graph of remark set, factor weights and membership fuzzy matrix. Combining with vulnerability ontology value and vulnerability correlation value, we can achieve the evaluation of vulnerability severity. Experiment shows that the method has a better assessment on vulnerability severity results.