| Video private network is a very important type of infrastructure for public security departments.In the continuous construction of the video private network,a device internet network has been formed,generating massive amounts of data.The security of the private video network is related to the privacy of citizens and the security of police infrastructure.At present,the security risk analysis and assessment for video private network is still in its infancy.Attacks on private video networks have the characteristics of strong concealment and wide influence.However,due to the large number of video private network devices with different characteristics,it is difficult for many management departments to perceive,analyze,and evaluate the security risks of video private network in their jurisdictions.The risk assessment and decision support framework for video private networks helps management departments to perceive and assess risks in a timely manner,improve response speed,and optimize decision-making processes.Therefore,based on massive multi-source data,this paper uses expert knowledge,Bayesian network,game theory,knowledge graph and other technologies to realize the identification,analysis,evaluation,storage and display of video private network security risks.This paper proposes a closed-loop framework of risk perception,cognition,and decision-making to provide decision support for the management department’s defense deployment and emergency response.The work of this paper is as follows:1.Firstly,this paper conducts a comprehensive risk factor identification and risk analysis on the video private network.This paper proposes a more comprehensive video private network security risk factors,such as network security threat index,system vulnerability index,operation security index,security protection level,content security risk,application security risk,etc.Taking the risk of forgery and replacement of the front-end camera of the video private network as an example,this paper refines the risk identification method.Based on risk factors,this paper constructs a modular Bayesian network for risk analysis,uses expert experience and D-S theory to obtain Bayesian network structure,and uses D-S theory and EM algorithm to learn Bayesian network parameters.Scenario analysis,sensitivity analysis,partial verification and case study are carried out to verify the rationality of the Bayesian network.2.Secondly,on the basis of completing the risk analysis,a risk assessment method of video private network based on game theory and probabilistic risk assessment theory is proposed.Bayesian network is used to obtain the node probability distribution,security protection level,comprehensive threat index and other node expectations.Then,this paper uses game theory and the importance level of private network to obtain the target loss probability,and uses the event tree method to simulate the possible consequences of security events.Finally,the target risk value is obtained with the PRA probability model,which can quantify the expected accident consequences.With the help of scenario analysis,the management department can simulate and obtain the potential risk value of the video private network in real time.3.Thirdly,based on Bayesian network and risk value,this paper constructs a risk knowledge graph and decision support framework for video private network.With the help of knowledge graph,which can store and visualize multi-source risk knowledge,this paper maps Bayesian network nodes and knowledge graph nodes to each other,enriches risk instance knowledge,and obtains risk knowledge graph.With the help of Bayesian network,the framework has the ability of forward and backward reasoning.The risk knowledge graph is convenient for security personnel to update risk knowledge in real time,dynamically respond to security requirements,quickly assess risk levels,and can provide visual decisionmaking guidance for security departments.4.Fourth,this paper takes a representative video private network security attack and defense actual combat exercise as an example to verify the effectiveness of the proposed risk index system,risk analysis method,risk assessment method,and risk decision framework.At the same time,based on the reasoning mechanism of Bayesian network,the rectification suggestion of video private network is put forward. |