A Review and Analysis of Cybersecurity Threats and Vulnerabilities, by Development of a Fuzzy Rule-Based Expert System

Over the past decade, cybersecurity threats and vulnerabilities have significantly increased, primarily due to the widespread adoption of IoT and the expanding use of systems and networks. As technology advances, cyber attackers continually improve their attack methods. Cybersecurity professionals employ the same technologies as cyber attackers for defense purposes. Effectively addressing this challenge requires the development of reliable and comprehensive cybersecurity systems for detection and mitigation. To tackle this issue, a GNS3-Fuzzy Rule-Based Expert System was created, focusing on assessing the risk of each threat over time. The system involved simulating a Local Area Network in GNS3, where attacks were executed using Kali Linux. Throughout the attacks, key metrics such as PC to Server ping time, PC-to-PC ping time, and Download time were recorded and averaged. These metrics were then utilized as inputs and ranges in the fuzzy rule-based expert system. The fuzzy rule-based expert system was developed using the MATLAB software, the fuzzy logic toolbox, and the Simulink tool. The system's output was the risk level associated with different threats. Based on the collected data and the developed system, it was observed that as the PC-to-server time, PC-to-PC time, and download time increase, there is a corresponding elevation in the risk level of the system. Implementing this proposed system provides a dependable and precise solution for detecting the risk level of threats posed to systems.