Structure Refinement for Vulnerability Estimation Models using Genetic Algorithm Based Model Generators

Abstract

In this paper, a method for model structure refinement is proposed and applied in estimation of cumulative number of vulnerabilities according to time. Security as a quality characteristic is presented and defined. Vulnerabilities are defined and their importance is assessed. Existing models used for number of vulnerabilities estimation are enumerated, inspecting their structure. The principles of genetic model generators are inspected. Model structure refinement is defined in comparison with model refinement and a method for model structure refinement is proposed. A case study shows how the method is applied and the obtained results.

Keywords

• model structure refinement
• model generators
• gene expression programming
• software vulnerabilities
• performance criteria
• software metrics