A Model for Estimating the Security Level of Mobile Applications: a Fuzzy Logic Approach

Abstract

In this paper a model for solving the problem of estimating the secu-rity level of mobile applications was proposed. The estimation is performed based on a fuzzy inference system of the Mamdani type. The input criteria were defined as the most important security threats by applying the Analytic hierar-chy process method. The pairwise comparison matrix was constructed from mobile security research on OWASP Top 10 Mobile Risks. The proposed methodology can be applied for any kind of mobile applications available for modern platforms, except specific cases when security analyst does not have a sufficient amount of information about the chosen application for performing the security level testing. Mobile security analysts can easily make further deci-sions about comprehensive mobile application security based on the results ob-tained with the help of the introduced model.