Vulnerability Analysis of Sustainable Software Systems Incorporating Environmental Factor-Based Uncertainty

• Divya Department of Operational Research, University of Delhi, Delhi, India https://orcid.org/0009-0003-8116-5017
• J.N.P. Singh Indira Gandhi National Open University, Delhi, India https://orcid.org/0000-0001-5395-5861
• A. Anand Department of Operational Research, University of Delhi, Delhi, India https://orcid.org/0000-0003-2733-3967
• V.S.S. Yadavalli Department of Industrial and Systems Engineering, University of Pretoria, Pretoria, South Africa https://orcid.org/0000-0002-3035-8906

DOI:

https://doi.org/10.7166/37-2-3310

Abstract

Maintaining software’s integrity and reliability throughout its lifecycle depends on effective vulnerability detection and patching, especially during the operational phase when systems face dynamic and often unpredictable environments. The complexity of real-world software patching is studied to estimate metrics such as residual vulnerabilities, detection rates, and overall system dependability. However, environmental factors, including system heterogeneity, third-party software dependencies, and variations in deployment settings, can affect the success of remedial efforts. This study presents a modelling framework that considers the influence of environmental factors on overall system performance and patching rates. The proposed approach provides a more comprehensive method for evaluating software vulnerabilities during the operational period by integrating these components. The model’s descriptive and predictive capabilities are demonstrated using real-world patching data, providing valuable insights into metrics such as patching failure rates, residual vulnerabilities, and the impact of environmental uncertainty on security outcomes.