In this work, fuzzy based system was designed to evaluate
the threat level of identified threats, because it is
impossible to provide assurance for the system and justify
security measures incorporated unless the system is
analyzed during the designing state of computer based
systems. With this system designed, risk analysis has
been made easier to perform.