A neutrosophic framework for evaluating security measures in information systems

This study introduces a neutrosophic framework combined with the multi-attribute decision-making methods TODIM and PROMETHEE to evaluate security measures in information systems. Addressing the inherent uncertainty and complexity of cybersecurity challenges, this research focuses on optimizing decision-making processes by leveraging the unique capabilities of neutrosophic logic. The study identifies a critical gap in existing literature, where comprehensive evaluations of cybersecurity measures often overlook the dynamic and uncertain nature of threats. By integrating expert assessments with neutrosophic numbers, the framework captures truth, indeterminacy, and falsity in decision-making, ensuring a more nuanced evaluation. The results reveal that access policies and privilege control are the most effective measures, followed by continuous monitoring and personnel training. This approach not only enhances the prioritization of security strategies but also demonstrates the applicability of neutrosophic methods in complex decision environments. The study contributes a replicable methodology for improving cybersecurity measures in other domains, thereby advancing data protection strategies and decision analysis under uncertainty.

A neutrosophic framework for evaluating security measures in information systems Keywords:

Cybersecurity , neutrosophic set , Decision-making , TODIM , PROMETHEE , information systems security