Using fuzzy logic for vulnerability assessment in telecommunication network

Modern telecommunication networks include different software kinds and operation systems with a large number of vulnerabilities. It is very important to assess risk levels for them. We suggested a method for vulnerability risk assessment in telecommunication networks. It is based on the Common Vulnerability Scoring System (CVSS) V3, expert judgments and fuzzy logic. We used fuzzy production rules to describe expert's knowledge about risks. We suggested a fuzzy inference method for these fuzzy rules. The risk assessment method has some advantages over CVSS V3. It is able to work under uncertainty and providing there are gaps in the source information.