Integrated method for assessing expert competence (IMAEC) in state information security
Abstract
The relevance of this study is grounded in the need to improve methods for evaluating expert competence in the field of state information security. The increasing number of threats in cyberspace and the growing demands on specialist qualifications necessitate innovative decision-making approaches that can account for subjective factors and data uncertainty. This research aimed to develop and test an integrated approach combining the Analytic Hierarchy Process (AHP) with fuzzy logic for the assessment of candidates for expert positions in information security. The AHP enabled the problem to be structured as a hierarchical model encompassing the goal, criteria (experience, certifications, communication skills), and alternatives (candidates). The AHP methodology involved pairwise comparison of criteria, calculation of weights, and consistency checks of the matrices. Fuzzy logic complemented AHP by enabling the processing of imprecise data through fuzzification, the application of “If-Then" rules, and defuzzification. Practical validation of the method was carried out using the example of candidate evaluation based on the specified criteria. The research findings demonstrated that the proposed approach enabled the integration of both precise and imprecise elements of assessment, thereby improving the accuracy and justification of decisions. The Monte Carlo method was employed to verify the model’s reliability, ensuring result stability through repeated simulations of data variations. The results confirmed the method’s high adaptability to handling uncertain data. The practical value of the study lies in the application of the integrated approach to enhance the efficiency of personnel selection – an essential component in safeguarding information security within state institutions. The proposed method may also be applied to other multi-criteria decision-making problems under conditions of uncertainty
Keywords
analytic hierarchy process; fuzzy logic; decision-making; criteria; fuzzification; defuzzification; Monte Carlo
References
- Averkyna, M., & Prystupa, M. (2019). Expert systems in automated information systems. Market Infrastructure, 3, 801-807. doi: 10.32843/infrastruct37-116.
- Ayeni, A.F., Thompson, O.A., Alese, A.F., & Alese, B.K. (2020). Information security risk analysis using analytic hierarchy process and fuzzy comprehensive evaluation. International Journal of Computer Science and Information Security, 18(6), 36-45.
- Burenko, V.O. (2024). Group expert judgments of information processing in computer systems of the smart city. Visnyk of Kherson National Technical University, 2(89), 118-125. doi: 10.35546/kntu2078-4481.2024.2.16.
- Debela, І.М. (2021). Bayesian method of evaluating alternative solutions. Taurida Scientific Herald. Series: Economics, 8, 76-81. doi: 10.32851/2708-0366/2021.8.11.
- Domantsevych, N.I., & Shestopal, H.S. (2023). Expert research of heat-insulation materials when carrying out the declaration procedure. Herald of Lviv University of Trade and Economics. Technical Sciences, 32, 14-19. doi: 10.36477/2522-1221-2022-32-02.
- Fil, N., & Kudyrko, O. (2023). Method of assessing the quality of a website. Computer-Integrated Technologies: Education, Science, Production, 51, 101-110. doi: 10.36910/6775-2524-0560-2023-51-13.
- Hasiuk, I., & Ivanii, O. (2024). Collegial and expert methods of decision-making in public administration. Successes and Achievements in Science, 6(6), 333-349. doi: 10.52058/3041-1254-2024-6(6)-333-349.
- Havryliuk, V. (2021). Scoring model as a method of solvency assessment. Economy and Society, 27. doi: 10.32782/2524-0072/2021-27-22.
- IEC 31010:2019. (2019). Risk management – risk assessment techniques. Retrieved from https://www.iso.org/ standard/72140.html.
- Kisil, N. (2019). Proof of plagiation of scientific papers: Legal practice and expert technologies. Expert: Paradigm of Law and Public Administration, 2(4), 92-106. doi: 10.32689/2617-9660-2019-4-2-92-106.
- Landoll, D. (2021). The security risk assessment handbook: A complete guide for performing security risk assessments. London: Routledge. doi: 10.1201/9781003090441.
- Latysh, K., Demidova, Ye., Domashenko, O., & Kolesnikova, I. (2022). Forensic expert’s mistakes during conducting some types of criminalistics expertise in the field of information technologies. Law Herald, 2, 93-99. doi: 10.32837/yuv.v0i2.2326.
- Lee, M.-C. (2014). Information security risk analysis methods and research trends: AHP and Fuzzy Comprehensive Method. International Journal of Computer Science and Information Technology, 6(1), 29-45. doi: 10.5121/ ijcsit.2014.6103.
- Lukichov, V., Baryshev, Y., Kondratenko, N., & Malinovskyi, V. (2023). Method of the adaptive multilayer information protection on the basis of steganography and cryptography. Information Technologies and Computer Engineering, 20(3), 4-11. doi: 10.31649/1999-9941-2023-58-3-4-11.
- Markovic-Petrovic, J.D., Milinkovic, D., & Milinkovic, D.S. (2019). Risk evaluation of SCADA systems using fuzzy AHP method. International Journal of Electrical and Computer Engineering Systems, 10(2), 71-78.
- Petyk, L., & Kravchenko, B. (2024). Risk management in the banking sector. Economics and Region, 3(94), 122-132. doi: 10.26906/EiR.2024.3(94).3490.
- Smith, K., Fearnley, C.J., Dixon, D., Bird, D.K., & Kelman, I. (2023). Environmental hazards: Risk assessment and reduction of disasters. London: Routledge. doi: 10.4324/9781351261647.
- Wang, L., Wang, B., & Peng, Y. (2010). A new risk assessment quantitative method based on fuzzy AHP. In 2nd IEEE international conference on information and financial engineering (pp. 822-826). Chongqing: IEEE. doi: 10.1109/ ICIFE.2010.5609482.
- Wu, Q. (2011). Car assembly line fault diagnosis model based on triangular fuzzy Gaussian wavelet kernel support vector classifier machine and genetic algorithm. Expert Systems with Applications, 38(12), 14632-14639. doi: 10.1016/j.eswa.2011.05.068.
- Yemelyanov, V., Kovalenko, I., & Honcharova, N. (2021). Expert evaluations in the tasks of public administration in the sphere of higher education. Public Administration and Regional Development, 11, 166-189. doi: 10.34132/ pard2021.11.08.
- Zadeh, L.A. (1965) Fuzzy sets. Information and Control, 8(3), 338-353. doi: 10.1016/S0019-9958(65)90241-X.