CN117556429B

CN117556429B - Safety protection capability evaluation method and system for public safety video image system

Info

Publication number: CN117556429B
Application number: CN202410040637.7A
Authority: CN
Inventors: 佟晖; 林尚伟; 郗蕊; 吴春生; 武鸿浩; 唐卫中; 王丹琳; 彭天; 姜翔耀
Original assignee: Beijing Police College
Current assignee: Beijing Police College
Priority date: 2024-01-11
Filing date: 2024-01-11
Publication date: 2024-04-19
Anticipated expiration: 2044-01-11
Also published as: CN117556429A

Abstract

The application relates to a security protection capability evaluation method, a security protection capability evaluation system, a security protection capability evaluation device, computer equipment and a security protection capability evaluation storage medium of a public security video image system. The method comprises the following steps: determining a target public safety video image system among a plurality of public safety video image systems in response to a system selection operation; issuing an evaluation data acquisition message to a target public safety video image system; receiving evaluation data of each evaluation item, determining state data of each evaluation item according to evaluation rules corresponding to each evaluation item and the evaluation data of each evaluation item, and determining the security protection capability level of the target public security video image system according to the state data of each evaluation item; and under the condition that the security protection capability level is determined, determining adjustment suggestion information, and transmitting the adjustment suggestion information to the target public security video image system. The method can improve the safety protection capability of the target public safety video image system.

Description

Safety protection capability evaluation method and system for public safety video image system

Technical Field

The present application relates to the field of information security technologies, and in particular, to a method, a system, an apparatus, a computer device, a storage medium, and a computer program product for evaluating security protection capability of a public security video image system.

Background

With the continuous development of the field of public safety video images, video image safety standards such as GB/T28181 public safety video monitoring networking system information transmission, exchange and control technical requirements, GB 35114 public safety video monitoring networking information safety technical requirements, and the like appear. However, most of the system construction applications fail to effectively implement the content in the security standard due to the diversity of public security video image system construction operations, the complexity of networking applications and the imbalance of ecological development in various industries in various places at present. The requirements in the safety distance video safety technical standard of the public safety video image system are quite different.

The network security level protection evaluation work widely developed in China at present mainly aims at security evaluation of a general information system or a common part in the information system, and cannot comprehensively and effectively evaluate the front-end equipment such as public security video images, which has various types, huge quantity and complex networking sharing requirement.

Disclosure of Invention

In view of the foregoing, it would be desirable to provide a method, system, apparatus, computer device, computer readable storage medium, and computer program product that enable evaluation of the security capabilities of a public safety video image system.

In a first aspect, the present application provides a method for evaluating security protection capability of a public security video image system, applied to a public security video management system, including:

Determining a target public safety video image system among a plurality of public safety video image systems in response to a system selection operation;

Issuing an evaluation data acquisition message to the target public safety video image system, wherein the evaluation data acquisition message is used for indicating the target public safety video image system to trigger evaluation data acquisition tasks corresponding to all evaluation items so as to obtain evaluation data corresponding to all the evaluation items, and sending the evaluation data corresponding to all the evaluation items to the public safety video management system, the evaluation items comprise static evaluation items and dynamic evaluation items, the static evaluation items are used for determining the safety compliance state of the target public safety video image system, and the dynamic evaluation items comprise system safety states used for determining the target public safety video image system;

receiving evaluation data of each evaluation item, determining state data of each evaluation item according to an evaluation rule corresponding to each evaluation item and the evaluation data of each evaluation item, and determining the security protection capability level of the target public security video image system according to the state data of each evaluation item;

And determining adjustment suggestion information aiming at the target public safety video image system, and issuing the safety protection capability level and the adjustment suggestion information to the target public safety video image system, wherein the adjustment suggestion information is used for indicating the target public safety video image system to determine a to-be-adjusted item.

In one embodiment, the static evaluation items include a management evaluation item and a technology evaluation item, the management evaluation item includes an organization management evaluation item, a system management evaluation item, a running management evaluation item, and the technology evaluation item includes a front-end security evaluation item, a boundary security evaluation item, a system security evaluation item, a data security evaluation item, and an overall security evaluation item; the dynamic evaluation items comprise a security detection evaluation item, a security defense evaluation item, a security response evaluation item and a security recovery evaluation item.

In one embodiment, the determining the security protection capability level of the target public security video image system according to the state data of each evaluation item includes:

Determining comprehensive protection capability data and core protection capability data of the target public safety video image system according to the state data of each evaluation item;

And determining the security protection capability level of the target public security video image system according to the comprehensive protection capability data and the core protection capability data.

In one embodiment, the determining the comprehensive protection capability data and the core protection capability data of the target public safety video image system according to the state data of each evaluation item includes:

Determining comprehensive protection capability data of the target public safety video image system according to the weight of each static evaluation item, the state data of each static evaluation item, the weight of each dynamic evaluation item and the state data of each dynamic evaluation item;

And determining a core evaluation item of the target public safety video image system in a plurality of evaluation items, and determining core protection capability data of the target public safety video image system according to the state data of the core evaluation item.

In one embodiment, the determining the comprehensive protection capability data of the target public safety video image system according to the weight of each static evaluation item, the state data of each static evaluation item, the weight of each dynamic evaluation item, and the state data of each dynamic evaluation item includes:

Weighting and summing calculation is carried out on the weight of each static evaluation item, the state data of each static evaluation item, the weight of each dynamic evaluation item and the state data of each dynamic evaluation item, so that comprehensive protection capability data of the target public safety video image system is obtained;

The determining the core protection capability data of the target public safety video image system according to the state data of the core evaluation item comprises the following steps:

And carrying out weighted summation calculation on the weight of each core evaluation item and the state data of each core evaluation item to obtain the core protection capability data of the target public safety video image system.

In one embodiment, the determining the security protection capability level of the target public security video image system according to the comprehensive protection capability data and the core protection capability data includes:

determining that the security protection capability level of the target public security video image system is a high level under the condition that the comprehensive protection capability data is higher than or equal to a first comprehensive protection capability threshold value;

determining that the security protection capability level of the target public security video image system is a middle level when the comprehensive protection capability data is lower than the first comprehensive protection capability threshold, higher than or equal to a second comprehensive protection capability threshold, and the core protection capability data is higher than or equal to a target core protection capability threshold;

Determining that the security protection capability level of the target public security video image system is a low level if the integrated protection capability data is below the first integrated protection capability threshold, above or equal to the second integrated protection capability threshold, and the core protection capability data is below the target core protection capability threshold, and the integrated protection capability data is below the second integrated protection capability threshold;

The system safety protection capacity of the safety protection capacity level, which is characterized by the high level, is higher than the medium level, and the system safety protection capacity of the safety protection capacity level, which is characterized by the medium level, is higher than the low level.

In one embodiment, the determining adjustment recommendation information for the target public safety video image system includes:

determining an evaluation item to be adjusted in each evaluation item according to standard state data corresponding to each evaluation item;

and determining adjustment suggestion information of the target public safety video image system based on the difference value of the evaluation item to be adjusted and the standard state data corresponding to the evaluation item to be adjusted.

In one embodiment, the determining the state data of each evaluation item according to the evaluation rule corresponding to each evaluation item and the evaluation data of each evaluation item includes:

for each evaluation item, carrying out data matching on evaluation data corresponding to the evaluation item and evaluation rules corresponding to the evaluation item to obtain a matching result;

And determining state data of the evaluation item according to the matching result.

In a second aspect, the present application provides a method for evaluating security protection capability of a public security video image system, applied to the public security video image system, including:

responding to a data acquisition instruction, triggering an evaluation data acquisition task corresponding to each evaluation item, wherein the evaluation items comprise static evaluation items and dynamic evaluation items, the static evaluation items are used for determining the safety compliance state of the target public safety video image system, and the dynamic evaluation items comprise system safety states used for determining the target public safety video image system;

According to each evaluation data acquisition task, determining evaluation data corresponding to each evaluation item;

Determining safety protection capability data of the target public safety video image system according to the evaluation data of each evaluation item;

and determining the security protection capability level of the target public security video image system according to the security protection capability data.

In a third aspect, the present application provides a security protection capability evaluation system for a public safety video image system, the system comprising a public safety video management system and a target public safety video image system, wherein:

the public safety video management system is used for issuing an evaluation data acquisition message to the target public safety video image system;

The target public safety video image system is used for triggering an evaluation data acquisition task aiming at each evaluation item after receiving the evaluation data acquisition message so as to obtain evaluation data corresponding to each evaluation item, and sending the evaluation data corresponding to each evaluation item to the public safety video management system; the evaluation items comprise a static evaluation item for determining a security compliance state of the target public safety video image system and a dynamic evaluation item for determining a system security state of the target public safety video image system;

The public safety video management system is further used for receiving evaluation data of all the evaluation items, determining state data of all the evaluation items according to evaluation rules corresponding to all the evaluation items and the evaluation data of all the evaluation items, and determining the safety protection capability level of the target public safety video image system according to the state data of all the evaluation items; and determining adjustment suggestion information for the target public safety video image system, and issuing the safety protection capability level and the adjustment suggestion information to the target public safety video image system.

In a fourth aspect, the present application also provides a security protection capability evaluation device of a public security video image system, including:

A first determining module for determining a target public safety video image system among a plurality of public safety video image systems in response to a system selection operation;

The first sending module is used for sending an evaluation data acquisition message to the target public safety video image system, wherein the evaluation data acquisition message is used for indicating the target public safety video image system to trigger an evaluation data acquisition task corresponding to each evaluation item so as to obtain evaluation data corresponding to each evaluation item, and sending the evaluation data corresponding to each evaluation item to the public safety video management system, the evaluation item comprises a static evaluation item and a dynamic evaluation item, the static evaluation item is used for determining the safety compliance state of the target public safety video image system, and the dynamic evaluation item comprises a system safety state used for determining the target public safety video image system;

The second determining module is used for receiving the evaluation data of each evaluation item, determining the state data of each evaluation item according to the evaluation rule corresponding to each evaluation item and the evaluation data of each evaluation item, and determining the security protection capability level of the target public security video image system according to the state data of each evaluation item;

And the second sending module is used for determining adjustment suggestion information aiming at the target public safety video image system and sending the safety protection capability level and the adjustment suggestion information to the target public safety video image system, wherein the adjustment suggestion information is used for indicating the target public safety video image system to determine a to-be-adjusted item.

In one embodiment, the second determining module is specifically configured to:

In one embodiment, the second sending module is specifically configured to:

In one embodiment, the second determining module is specifically configured to:

In a fifth aspect, the present application further provides a security protection capability evaluation device of a public security video image system, including:

The triggering module is used for responding to the data acquisition instruction, triggering the evaluation data acquisition task corresponding to each evaluation item, wherein the evaluation items comprise static evaluation items and dynamic evaluation items, the static evaluation items are used for determining the safety compliance state of the target public safety video image system, and the dynamic evaluation items comprise system safety states for determining the target public safety video image system;

the first determining module is used for determining the evaluation data corresponding to each evaluation item according to each evaluation data acquisition task;

the second determining module is used for determining the safety protection capability data of the target public safety video image system according to the evaluation data of each evaluation item;

and the third determining module is used for determining the security protection capability level of the target public security video image system according to the security protection capability data.

In a sixth aspect, the present application further provides a computer device, including a memory and a processor, where the memory stores a computer program, and the processor implements the steps of the security protection capability evaluation method of each public security video image system when the processor executes the computer program.

In a seventh aspect, the present application also provides a computer-readable storage medium having stored thereon a computer program which, when executed by a processor, implements the steps of the security protection capability evaluation method of each public safety video image system described above.

In an eighth aspect, the present application also provides a computer program product comprising a computer program which, when executed by a processor, implements the steps of the security protection capability assessment method of each public safety video image system described above.

The above-described security protection capability evaluation method, system, apparatus, computer device, storage medium, and computer program product for a public safety video image system, in response to a system selection operation, determining a target public safety video image system among a plurality of public safety video image systems; issuing an evaluation data acquisition message to the target public safety video image system, wherein the evaluation data acquisition message is used for indicating the target public safety video image system to trigger evaluation data acquisition tasks corresponding to all evaluation items so as to obtain evaluation data corresponding to all the evaluation items, and sending the evaluation data corresponding to all the evaluation items to the public safety video management system, the evaluation items comprise static evaluation items and dynamic evaluation items, the static evaluation items are used for determining the safety compliance state of the target public safety video image system, and the dynamic evaluation items comprise system safety states used for determining the target public safety video image system; receiving evaluation data of each evaluation item, determining state data of each evaluation item according to an evaluation rule corresponding to each evaluation item and the evaluation data of each evaluation item, and determining the security protection capability level of the target public security video image system according to the state data of each evaluation item; and determining adjustment suggestion information aiming at the target public safety video image system, and issuing the safety protection capability level and the adjustment suggestion information to the target public safety video image system, wherein the adjustment suggestion information is used for indicating the target public safety video image system to determine a to-be-adjusted item. By adopting the method, the safety protection capability of the target public safety video image system can be comprehensively and effectively judged based on a plurality of evaluation items, and the adjustment suggestion information for the target public safety video image system is determined under the condition of determining the safety protection capability level of the target public safety video image system. So that the manager of the target public safety video image system can efficiently adjust the target public safety video image system based on the adjustment suggestion information, and the safety protection capability of the target public safety video image system can be improved.

Drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the related art, the drawings that are required to be used in the embodiments or the related technical descriptions will be briefly described, and it is apparent that the drawings in the following description are only some embodiments of the present application, and other drawings may be obtained according to the drawings without inventive effort for those skilled in the art.

FIG. 1 is an application environment diagram of a security capability assessment method for a public safety video image system in one embodiment;

FIG. 2 is a flow chart of a method of evaluating security capabilities of a public safety video image system in one embodiment;

FIG. 3 is an overall architecture diagram of various evaluation items in one embodiment;

FIG. 4 is a flow diagram of determining a security capability level of a target public safety video image system in one embodiment;

FIG. 5 is a flow diagram of determining comprehensive protection capability data and core protection capability data for a target public safety video image system in one embodiment;

FIG. 6 is a flow chart of determining comprehensive protection capability data and core protection capability data for a target public safety video image system in accordance with another embodiment;

FIG. 7 is a flow diagram of determining a security capability level of a target public safety video image system in one embodiment;

FIG. 8 is a flow diagram of determining adjustment recommendation information for a target public safety video image system in one embodiment;

FIG. 9 is a flow diagram of determining state data for an evaluation item in one embodiment;

FIG. 10 is a flow chart of a method for evaluating security capabilities of a public safety video image system according to another embodiment;

FIG. 11 is a block diagram of a security capability assessment apparatus of a public safety video image system in one embodiment;

FIG. 12 is a block diagram of a security capability assessment apparatus of a public safety video image system in one embodiment;

fig. 13 is an internal structural view of a computer device in one embodiment.

Detailed Description

The present application will be described in further detail with reference to the drawings and examples, in order to make the objects, technical solutions and advantages of the present application more apparent. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the scope of the application.

The security of the public security video image system relates to the technical fields of information security, network security, video security, the Internet of things and the like, and the public security video image system safely and stably runs in relation to the important social industry fields of city management, public security, emergency management and the like.

At present, a public safety video image system is in a cross-domain networking application stage, different industries and management and use subjects hope to realize resource multiplexing through inter-system butt joint, and the application range is enlarged while the cost is reduced. Therefore, the situation that the number of the devices at the lower end of the current system is huge, the types are various, and the butt joint between the systems is complex is formed, and a series of unique safety problems of the public safety video image system are generated. In combination with matching security requirements such as network security standard, data security standard, password standard and the like of the subsequent outbound, the data security of the public security video image system needs to be emphasized in consideration besides the software and hardware of the system and network security.

For the current state of security development of public security video image systems, no security evaluation system which is suitable for the characteristics of the current state of security development of public security video image systems is capable of effectively evaluating the overall security of the system, so that the problem of poor security protection capability of the public security video image systems exists.

The security protection capability evaluation method of the public security video image system provided by the embodiment of the application can be applied to an application environment shown in figure 1. The public safety video management system 102 communicates with the target public safety video image system 104 through a network, and the target public safety video image system 104 can be any public safety video image system. The data storage system may store data that the public safety video management system 102 needs to process. The data storage system may be integrated on public safety video management system 102 or may be located on the cloud or other network server. The target public safety video image system 104 comprises a plurality of cameras and at least one terminal for receiving the data transmitted by the cameras. At least one terminal is included in the public safety video management system 102.

Public safety video management system 102 is deployed in public safety authorities in upper management areas of a plurality of public safety video image systems, such as upper management areas of provinces, cities, etc., and target public safety video image system 104 is deployed in public safety authorities in base management areas of public safety video management systems, such as base management areas of regions, counties, etc.

In an exemplary embodiment, as shown in fig. 2, a method for evaluating security protection capability of a public safety video image system is provided, and the method is applied to the public safety video management system in fig. 1, for example, and includes the following steps 202 to 208. Wherein:

In response to the system selection operation, a target public safety video image system is determined among the plurality of public safety video image systems, step 202.

In each public safety video image system, a plurality of cameras are usually arranged outdoors and used for recording the area within the visible range of the cameras.

In the embodiment of the present application, the public safety video management system may store in advance system information of a plurality of public safety video image systems, for example, a base management area number to which the public safety video image system belongs, etc., where each public safety video image system corresponds to a different public safety video image system, and illustratively, the public safety video management system a stores in advance system information of n public safety video image systems A1 to An, and the public safety video management system B stores in advance system information of m public safety video image systems B1 to Bm.

The manager of the public safety video management system can perform system selection operation on the terminal of the public safety video management system. The terminal of the public safety video management system determines a target public safety video image system among a plurality of public safety video image systems in response to the system selection operation.

Step 204, issuing an evaluation data acquisition message to the target public safety video image system.

The evaluation data acquisition message is used for indicating the target public security video image system to trigger the evaluation data acquisition task corresponding to each evaluation item so as to obtain the evaluation data corresponding to each evaluation item, and sending the evaluation data corresponding to each evaluation item to the public security video management system.

The evaluation item comprises three layers of asset security, system security, network security and data security. Asset security includes asset management system, daily management implementation, front-end equipment security management, online rate, unified coding and other contents. The system and the network are safe, on one hand, the system and the network are safe for external protection, including measures such as intrusion protection and virus protection, and on the other hand, the system and the network are safe for internal protection, including contents such as access control and log audit. The data security comprises identity authentication, data signature, data encryption, leakage prevention, data tracing and the like.

The evaluation items include a static evaluation item for determining a security compliance state of the target public safety video image system and a dynamic evaluation item for determining a system security state of the target public safety video image system.

In the embodiment of the application, the terminal of the public safety video management system can generate the evaluation data acquisition message aiming at the target public safety video image system according to the system information of the target public safety video image system, and send the evaluation data acquisition message to the terminal of the target public safety video image system.

After receiving the evaluation data acquisition message, the terminal of the target public safety video image system can trigger an evaluation data acquisition task aiming at each evaluation item.

Specifically, the evaluation data collection task of each evaluation item may be provided with a data collection time limit, and an evaluation data collection list. Illustratively, the evaluation data acquisition task corresponding to the static evaluation item J01 is [ data acquisition time limit: 3 days; evaluating a data acquisition list: please collect the related information of the responsible person of the system ]; the evaluation data acquisition task corresponding to the dynamic evaluation item D01 is [ data acquisition time limit: 3 days; evaluating a data acquisition list: please collect the data recovery speed and system recovery mode of the system ].

The evaluation data corresponding to the static evaluation items are manually acquired by technicians, and the dynamic evaluation items are acquired after the system is tested based on a testing tool.

After triggering the evaluation data acquisition tasks aiming at all evaluation items, the terminal of the target public safety video image system can display all the evaluation data acquisition tasks on a display interface of the terminal of the target public safety video image system. After knowing each evaluation data acquisition task, a technician can acquire the evaluation data of each evaluation item and input the evaluation data to a terminal of the target public safety video image system.

Preferably, the terminal of the target public security video image system may further store in advance acquisition terminal information corresponding to each evaluation item, and distribute each evaluation data acquisition task to each acquisition terminal according to the acquisition terminal information corresponding to each evaluation item. After receiving the evaluation data acquisition task, technicians of all acquisition terminals can acquire the evaluation data and submit the evaluation data to the terminal of the target public safety video image system based on the respective acquisition terminal so as to realize automatic collection of the evaluation data.

After the terminal of the target public safety video image system completes the evaluation data acquisition task corresponding to each evaluation item, the terminal can send the evaluation data corresponding to each evaluation item to the terminal of the public safety video management system.

Step 206, receiving the evaluation data of each evaluation item, determining the state data of each evaluation item according to the evaluation rule corresponding to each evaluation item and the evaluation data of each evaluation item, and determining the security protection capability level of the target public security video image system according to the state data of each evaluation item.

In the embodiment of the application, the terminal of the public safety video management system stores the evaluation rules corresponding to each evaluation item, and the evaluation rules corresponding to each evaluation item can be configured in advance by a technician.

The terminal of the public safety video management system receives the evaluation data of each evaluation item, and for each evaluation item, the evaluation data of the evaluation item and the evaluation rule corresponding to the evaluation item are subjected to matching processing to determine the matching condition of the evaluation data of the evaluation item and the evaluation rule corresponding to the evaluation item. And then, the terminal of the public safety video management system determines the state data of the evaluation item according to the matching condition of the evaluation data of the evaluation item and the evaluation rule corresponding to the evaluation item.

And the terminal of the public safety video management system calculates and obtains the safety protection capability level of the target public safety video image system according to the state data of each evaluation item.

The safety protection capability level includes a high level, a medium level and a low level. The safety protection capability level is high, so that the safety protection capability of the characterization system is good, and the optimization can be continued; the safety protection capability level is high and represents the general safety protection capability of the system, and the adjustment is needed; the safety protection capability level is low, and the safety protection capability of the system is poor and needs to be modified.

Step 208, determining adjustment suggestion information for the target public safety video image system, and issuing the security protection capability level and the adjustment suggestion information to the target public safety video image system.

Wherein the adjustment recommendation information is used to instruct the target public safety video image system to determine the backlog. The security protection capability level meets security adjustment conditions for characterizing the target public security video image system to be adjusted.

Under the condition that the security protection capability level is determined, the terminal of the public security video management system determines adjustment suggestion information aiming at the target public security video image system according to the state data of each evaluation item of the target public security video image system, and issues the security protection capability level and the adjustment suggestion information to the terminal of the target public security video image system.

After receiving the security protection capability level and the adjustment suggestion information, the terminal of the target public security video image system can determine the items to be adjusted of the target public security video image system according to the adjustment suggestion information. Then, the terminal of the target public safety video image system reminds a technician of the target public safety video image system, so that the technician can know the safety protection capability level of the target public safety video image system, and the items to be adjusted of the target public safety video image system are adjusted in a targeted mode.

According to the security protection capability evaluation method of the public security video image system, the security protection capability of the target public security video image system can be comprehensively and effectively judged based on the plurality of evaluation items, and the adjustment suggestion information aiming at the target public security video image system is determined under the condition that the security protection capability level of the target public security video image system meets the security adjustment condition. So that the manager of the target public safety video image system can efficiently adjust the target public safety video image system based on the adjustment suggestion information, and the safety protection capability of the target public safety video image system can be improved.

And moreover, the upper management area of the public safety video image systems can acquire the safety protection capability of the public safety video image systems at the lower layer, so that a manager of the public safety video management system can manage the public safety video image systems conveniently.

In one exemplary embodiment, the static evaluation items include a management evaluation item and a technology evaluation item.

The management evaluation items comprise organization management evaluation items, system management evaluation items and operation management evaluation items; the technical evaluation items comprise a front-end security evaluation item, a boundary security evaluation item, a system security evaluation item, a data security evaluation item and an overall security evaluation item; the dynamic evaluation items include a security detection evaluation item, a security defense evaluation item, a security response evaluation item, and a security recovery evaluation item.

In the embodiment of the present application, referring to table 1 below, the organization management evaluation items include a plurality of evaluation items.

TABLE 1

The content corresponding to the evaluation items is an evaluation data acquisition task corresponding to the evaluation items.

Referring to table 2 below, the system management evaluation items include a plurality of evaluation items.

TABLE 2

As shown in table 3 below, the operation management evaluation items include a plurality of evaluation items.

TABLE 3 Table 3

Referring to table 4 below, the front-end security evaluation items include a plurality of evaluation items.

TABLE 4 Table 4

Referring to table 5 below, the boundary security evaluation items include a plurality of evaluation items.

TABLE 5

Referring to table 6 below, the system security evaluation items include a plurality of evaluation items.

TABLE 6

As shown in table 7 below, the data security evaluation items include a plurality of evaluation items.

TABLE 7

/>

Referring to table 8 below, the overall security evaluation items include a plurality of evaluation items.

TABLE 8

In tables 1 to 8, the static evaluation items are designed according to the system function structure, and are divided into management evaluation items and technical evaluation items, including 64 items, wherein the management part 19 items, the technical part 45 items, and the evaluation data of each static evaluation item are obtained by manually collecting by technicians. Such as by document viewing, interview, field viewing, questionnaire, etc.

As shown in table 9 below, the security detection evaluation items include a plurality of evaluation items.

TABLE 9

/>

As shown in table 10 below, the security defense evaluation items include a plurality of evaluation items.

Table 10

Referring to table 11 below, the safety response evaluation items include a plurality of evaluation items.

TABLE 11

Referring to table 12 below, the security recovery evaluation items include a plurality of evaluation items.

Table 12

In tables 9 to 12, for the content of the dynamic evaluation items, the dynamic evaluation items are designed according to the risk prevention mechanism, including 24 items, and the evaluation data of each dynamic evaluation item is mainly obtained by testing through a system testing tool, and for example, the data acquisition of the dynamic evaluation items can be performed by using a technical tool for detection or a manual verification mode. The overall architecture diagram of the individual evaluation items can be seen with reference to fig. 3.

The terminal of the public safety video management system can determine the state data corresponding to the evaluation items of the institutions and responsible persons according to the evaluation rules corresponding to the evaluation items and the evaluation data corresponding to the evaluation items.

In the embodiment, the method and the device can combine the security development situation of the public security video image system and the actual use situation of the system, select important and key evaluation items for evaluation, abandon general evaluation items and highlight the criticality and actual combat of evaluation. For example, if the front-end equipment (i.e. the camera in the system) is located outdoors, the physical security of the front-end equipment is an important index (i.e. the evaluation item) in the system, while the physical security of the server in the machine room is relatively minor, and there is almost no physical security risk in the machine room, so that the physical security risk is not considered. And the evaluation is performed through dynamic and static dimensions, so that the evaluation is more comprehensive and accurate.

In an exemplary embodiment, as shown in FIG. 4, step 206 includes steps 402 through 404. Wherein:

step 402, determining comprehensive protection capability data and core protection capability data of the target public safety video image system according to the state data of each evaluation item.

According to the embodiment of the application, the terminal of the public safety video management system can calculate and obtain the comprehensive protection capability data of the target public safety video image system according to the state data of each evaluation item, and calculate and obtain the core protection capability data of the target public safety video image system according to the state data of the core evaluation item.

The core evaluation items are data safety series indexes in each evaluation item, and the importance degree of the core evaluation item representation is higher than that of other evaluation items.

Step 404, determining the security protection capability level of the target public security video image system according to the comprehensive protection capability data and the core protection capability data.

In the embodiment of the application, the terminal of the public safety video management system can pre-store the mapping relation between the safety protection capability data (namely the comprehensive protection capability data and the core protection capability data) and the safety protection capability level. And the terminal of the public safety video management system determines the safety protection capability level of the target public safety video image system according to the mapping relation, the comprehensive protection capability data and the core protection capability data of the target public safety video image system.

In this embodiment, since the comprehensive protection capability data is obtained based on each evaluation item and the core protection capability data is obtained based on the core evaluation item with higher importance, the security protection capability level of the target public security video image system is determined according to the comprehensive protection capability data and the core protection capability data, so that the security protection capability of the target public security video image system can be measured more accurately.

In an exemplary embodiment, as shown in FIG. 5, step 402 includes steps 502 through 504. Wherein:

step 502, determining comprehensive protection capability data of the target public safety video image system according to the weight of each static evaluation item, the state data of each static evaluation item, the weight of each dynamic evaluation item and the state data of each dynamic evaluation item.

The comprehensive protection capability data is positively correlated with the state data of each evaluation item and the weight of each evaluation item.

In the embodiment of the application, the weight of each evaluation item is pre-stored in the terminal of the public safety video management system, for example, the total weight of the static evaluation item is 0.7, the total weight of the dynamic evaluation item is 0.3, the weight of each evaluation item can be set in practical application based on technicians, and the embodiment of the application does not limit the specific weight of each evaluation item.

Illustratively, referring to FIG. 3 above, the static evaluation term is 8 items in total, and the weights are assigned as follows: organization management 10%, system management 10%, operation management 10%, front end security 15%, boundary security 15%, system security 15%, data security 10% and overall security 15%. Dynamic evaluation items total 4 items, and the weight distribution is as follows: 30% of safety detection, 30% of safety defense, 20% of safety response and 20% of safety recovery.

And the terminal of the public safety video management system calculates and obtains the comprehensive protection capability data of the target public safety video image system according to the weight of each static evaluation item, the state data of each static evaluation item, the weight of each dynamic evaluation item and the state data of each dynamic evaluation item.

Step 504, determining a core evaluation item of the target public safety video image system in a plurality of evaluation items, and determining core protection capability data of the target public safety video image system according to the state data of the core evaluation item.

The core evaluation item of the target public security video image system is used for determining the data security of the system in the aspects of identity authentication, data signature, data encryption, leakage prevention, data tracing and the like. The core protection capability data is positively correlated with the state data of each core evaluation item, and the weight of each core evaluation item.

In the embodiment of the application, a terminal of the public safety video management system determines a core evaluation item of a target public safety video image system in a plurality of evaluation items.

The core evaluation items include 23 static evaluation items such as a security backup recovery system, a data management system, a data security management system, a backup management system, a cryptographic module protection system, identity authentication, video data signature, video data encryption, signaling security, media security, signaling content filtering, media content filtering, authentication control, signaling security service, user identity authentication, terminal identity authentication, video data security, non-video data security, data hierarchical access, data audit, data backup and recovery, data sharing security, secret evaluation condition and 9 dynamic evaluation items such as front end authentication, identity authentication, data signature, data encryption, signaling security, data tracing, sensitive data protection, data backup and data recovery.

And then, the terminal of the public safety video management system calculates and obtains the core protection capability data of the target public safety video image system according to the state data of the core evaluation item.

Wherein, referring to Table 13, the overall weight of the core protection capability data is about 40% of the sum of the state data corresponding to all the evaluation items

TABLE 13

In this embodiment, the comprehensive protection capability data and the core protection capability data of the target public security video image system can be determined based on the state data corresponding to the evaluation item, so that the security protection capability level can be determined based on the comprehensive protection capability data and the core protection capability data.

In one exemplary embodiment, as shown in FIG. 6, step 502 includes step 602, wherein:

Step 602, performing weighted summation calculation on the weight of each static evaluation item, the state data of each static evaluation item, the weight of each dynamic evaluation item and the state data of each dynamic evaluation item, and obtaining comprehensive protection capability data of the target public safety video image system.

In the embodiment of the application, the terminal of the public safety video management system performs weighted summation calculation on the weight of each static evaluation item, the state data of each static evaluation item, the weight of each dynamic evaluation item and the state data of each dynamic evaluation item to obtain the comprehensive protection capability data of the target public safety video image system. The method for calculating the comprehensive protection capability data of the target public safety video image system can refer to the following formula (one), and the specific process is as follows:

Z=j1×wj1+ … +jn× WJn +d1×wd1+ … +dn×wdn equation (one)

Z is used for representing comprehensive protection capability data of a target public safety video image system; j1 is used for representing the state data of the static evaluation item 1; WJ1 is used to characterize the weight of static evaluation item 1; jn is used for representing state data of the static evaluation item n; WJn are used to characterize the weights of the static evaluation term n; d1 is used to characterize the state data of dynamic evaluation item 1; WD1 is used to characterize the weights of dynamic assessment item 1; dn is used for representing state data of the dynamic evaluation item n; WDn is used to characterize the weights of dynamic evaluation term n.

Step 504 includes step 604, wherein:

And step 604, carrying out weighted summation calculation on the weight of each core evaluation item and the state data of each core evaluation item to obtain the core protection capability data of the target public safety video image system.

In the embodiment of the application, the terminal of the public safety video management system performs weighted summation calculation on the weight of each core evaluation item and the state data of each core evaluation item to obtain the core protection capability data of the target public safety video image system. The method for calculating the core protection capability data of the target public security video image system can refer to the following formula (II), and the specific process is as follows:

h=h1×wh1+ … +hn× WHn formula (two)

Wherein Z is used for representing the core protection capability data of the target public safety video image system; h1 is used to characterize the state data of core evaluation item 1; WH1 is used to characterize the weight of core estimate 1; hn is used for representing the state data of the core evaluation item n; WHn are used to characterize the weight of the core evaluation item n.

In one exemplary embodiment, as shown in FIG. 7, step 404 includes steps 702 through 706, wherein:

Step 702, determining that the security protection capability level of the target public security video image system is high in the case that the integrated protection capability data is higher than or equal to the first integrated protection capability threshold.

The system safety protection capacity with the safety protection capacity grade being the high-grade representation is higher than the medium-grade representation, and the system safety protection capacity with the safety protection capacity grade being the medium-grade representation is higher than the low-grade representation.

In the embodiment of the application, a first comprehensive protection capacity threshold, a second comprehensive protection capacity threshold and a target core protection capacity threshold are stored in a terminal of a public safety video management system in advance. Illustratively, the first comprehensive protection capability threshold may be 90, the second comprehensive protection capability threshold may be 70, and the target core protection capability threshold may be 20.

And under the condition that the comprehensive protection capability data is higher than or equal to the first comprehensive protection capability threshold value, the terminal of the public safety video management system determines that the safety protection capability level of the target public safety video image system is high.

Step 704, determining that the security protection capability level of the target public security video image system is a middle level in the case that the integrated protection capability data is lower than the first integrated protection capability threshold, higher than or equal to the second integrated protection capability threshold, and the core protection capability data is higher than or equal to the target core protection capability threshold.

In the embodiment of the application, the terminal of the public safety video management system determines the safety protection capability level of the target public safety video image system to be a middle level under the condition that the comprehensive protection capability data is lower than the first comprehensive protection capability threshold value, higher than or equal to the second comprehensive protection capability threshold value and the core protection capability data is higher than or equal to the target core protection capability threshold value.

Illustratively, the terminal of the public safety video management system determines that the safety protection capability level of the target public safety video image system is a middle level in the case that the value of the comprehensive protection capability data of the target public safety video image system is 78 and the value of the core protection capability data is 25.

Step 706, determining that the security protection capability level of the target public security video image system is a low level if the integrated protection capability data is below the first integrated protection capability threshold, above or equal to the second integrated protection capability threshold, and the core protection capability data is below the target core protection capability threshold, and the integrated protection capability data is below the second integrated protection capability threshold.

In the embodiment of the application, the terminal of the public safety video management system determines that the safety protection capability level of the target public safety video image system is a low level under the condition that the comprehensive protection capability data is lower than the first comprehensive protection capability threshold value, higher than or equal to the second comprehensive protection capability threshold value and the core protection capability data is lower than the target core protection capability threshold value.

Illustratively, the terminal of the public safety video management system determines that the security protection capability level of the target public safety video image system is a low level in the case where the value of the comprehensive protection capability data of the target public safety video image system is 70 and the value of the core protection capability data is 15.

And the terminal of the public safety video management system determines that the safety protection capability level of the target public safety video image system is a low level under the condition that the comprehensive protection capability data is lower than a second comprehensive protection capability threshold value.

Illustratively, the terminal of the public safety video management system determines that the security protection capability level of the target public safety video image system is a low level in the case where the value of the comprehensive protection capability data of the target public safety video image system is 60 and the value of the core protection capability data is 25.

In this embodiment, it is possible to determine the security protection capability level of the target public security video image system, and determine whether the security protection capability of the target public security video image system has a defect.

In one exemplary embodiment, as shown in FIG. 8, step 208 includes steps 802 through 804, wherein:

step 802, determining the evaluation items to be adjusted in each evaluation item according to the standard evaluation item data corresponding to each evaluation item.

In the embodiment of the application, the terminal of the public safety video management system compares the state data corresponding to each evaluation item with the standard evaluation item data corresponding to each evaluation item, so that the evaluation item to be adjusted is determined in each evaluation item.

For example, taking an evaluation item as an example of a data recovery evaluation item, where the value of standard evaluation item data corresponding to the data recovery evaluation item is 2, and the state data of the target public safety video image system for the data recovery evaluation item is 0, the terminal of the public safety video management system determines that the data recovery evaluation item is an evaluation item to be adjusted.

Step 804, determining adjustment suggestion information of the target public safety video image system based on the difference value of the evaluation item to be adjusted and the standard state data corresponding to the evaluation item to be adjusted.

In the embodiment of the application, a technician can pre-configure the adjustment suggestion information corresponding to the difference value between the state data corresponding to each evaluation item to be adjusted and the standard state data, and store the adjustment suggestion information to the terminal of the public safety video management system.

And the terminal of the public safety video management system determines the adjustment proposal information of the target public safety video image system based on the difference value between the state data of the evaluation item to be adjusted and the standard state data.

For example, taking an evaluation item to be adjusted as an institution and a responsible person evaluation item as an example, when a difference between a value (for example, a value of 0) of state data corresponding to the evaluation item and a value (for example, a value of 2) of standard state data is 2, the adjustment advice information for the institution and responsible person evaluation item is determined as: the organization and responsible person information needs to be perfected as soon as possible: the number of people is at least 2, and the staff class is at least class A.

Similarly, the terminal of the public safety video management system can determine the adjustment suggestion information of each evaluation item to be adjusted for the target public safety video image system.

In this embodiment, the adjustment suggestion information of the target public safety video image system can be determined by the difference value of the to-be-adjusted evaluation item and the standard state data corresponding to the to-be-adjusted evaluation item, so that a manager of a subsequent target public safety video image system can adjust the target public safety video image system in a targeted manner, and the safety protection capability of the target public safety video image system can be improved.

In one exemplary embodiment, as shown in fig. 9, step 206 includes steps 902 through 904, wherein:

step 902, for each evaluation item, performing data matching on the evaluation data corresponding to the evaluation item and the evaluation rule corresponding to the evaluation item to obtain a matching result.

Taking the evaluation items of the institutions and responsible persons as an example, the evaluation data acquisition tasks corresponding to the evaluation items of the institutions and responsible persons are [ data acquisition time limit: 3 days; evaluating a data acquisition list: please collect relevant information of the institution responsible person (management and technology). The evaluation rules corresponding to the evaluation items of the institutions and responsible persons are as follows: the number of people in the evaluation data corresponding to the evaluation items of the institutions and responsible persons is at least two, and the job level of the people is at least level A.

The terminal of the public safety video management system can determine the state data corresponding to the evaluation items of the institutions and the responsible persons according to the evaluation rules corresponding to the evaluation items of the institutions and the responsible persons. Under the condition that the number of people in the evaluation data corresponding to the evaluation items of the institutions and the responsible persons is 1 person and the job level of the people is level A, the terminal of the public safety video management system determines that the evaluation data corresponding to the evaluation items of the institutions and the responsible persons are not completely matched with the evaluation rules corresponding to the evaluation items of the institutions and the responsible persons.

Taking a system recovery evaluation item as an example, the evaluation data acquisition task corresponding to the system recovery evaluation item is [ data acquisition time limit: 3 days; evaluating a data acquisition list: please collect the system recovery mode and recovery speed data ]. The corresponding evaluation rule of the system recovery is as follows: the system recovery mode is a preset recovery mode, and the system recovery speed is higher than a preset recovery speed threshold. The present embodiment is not particularly limited as to the preset restoration mode and the preset restoration speed threshold.

The terminal of the public safety video management system can determine state data corresponding to the system recovery evaluation items according to the evaluation rules corresponding to the system recovery evaluation items. And under the condition that the system recovery mode in the evaluation data corresponding to the system recovery evaluation item is a preset recovery mode and the system recovery speed is higher than a preset recovery speed threshold, the terminal of the public safety video management system determines that the evaluation data corresponding to the system recovery evaluation item is completely matched with the evaluation rule corresponding to the system recovery evaluation item.

Step 904, determining state data of the evaluation item according to the matching result.

In the embodiment of the application, the state data corresponding to each evaluation item is provided with a full score value in advance, and the terminal of the public safety video management system is provided with the full score value of the state data corresponding to the evaluation item under the condition that the evaluation data corresponding to the evaluation item is completely matched with the evaluation rule corresponding to the evaluation item; under the condition that the evaluation data corresponding to the evaluation items are not matched with the evaluation rules corresponding to the evaluation items, the numerical value of the state data corresponding to the evaluation items is 0; and under the condition that the evaluation data corresponding to the evaluation items are not completely matched with the evaluation rules corresponding to the evaluation items, determining the numerical value of the state data corresponding to the evaluation items according to the matching degree.

For example, in the case that the terminal of the public safety video management system determines that the evaluation data corresponding to the evaluation items of the organization and the responsible person are not completely matched with the evaluation rules corresponding to the evaluation items of the organization and the responsible person, the numerical value (i.e., score) of the state data corresponding to the evaluation items of the organization and the responsible person is 1 point.

For example, when the terminal of the public safety video management system determines that the evaluation data corresponding to the system recovery evaluation item completely matches the evaluation rule corresponding to the system recovery evaluation item, the value (i.e., score) of the state data corresponding to the system recovery evaluation item is determined to be 2 points.

For determining other specific evaluation items in the above tables 1 to 12, the method for determining the state data corresponding to the evaluation items according to the corresponding evaluation rules may be set with reference to the content corresponding to each evaluation item in the tables 1 to 12, or may perform the numerical determination of the state data with reference to the third-gear evaluation method in the following table 14 or the fifth-gear evaluation method in the following table 15, and the embodiment of the present application is not limited specifically.

TABLE 14

TABLE 15

In this embodiment, the state data corresponding to the evaluation items can be determined through the evaluation rules corresponding to the evaluation items, so that the subsequent terminal can calculate and obtain the security protection capability level and the items to be adjusted of the target public security video image system according to the state data corresponding to each evaluation item.

In an exemplary embodiment, as shown in fig. 10, there is further provided a security protection capability evaluation method of the public safety video image system, which is described by taking the application of the method to the public safety video image system in fig. 1 as an example, and includes the following steps 1002 to 1008. Wherein:

step 1002, in response to the data acquisition instruction, triggering an evaluation data acquisition task corresponding to each evaluation item.

Wherein the evaluation items include static evaluation items and dynamic evaluation items. The static evaluation item is used for determining the security compliance state of the target public safety video image system, and the dynamic evaluation item comprises a system security state used for determining the target public safety video image system.

In the embodiment of the application, the terminal of the public safety video image system can collect data operation based on confirmation by a user to generate a data acquisition instruction. And the terminal of the public safety video image system responds to the data acquisition instruction and triggers the evaluation data acquisition task corresponding to each evaluation item.

Optionally, the terminal of the public safety video image system can also receive an evaluation data acquisition message sent by the terminal of the public safety video management system, and generate a data acquisition instruction.

Step 1004, determining the evaluation data corresponding to each evaluation item according to each evaluation data acquisition task.

In the embodiment of the application, the terminal of the public safety video image system can determine the evaluation data corresponding to each evaluation item according to each evaluation data acquisition task.

The method for determining the evaluation data corresponding to each evaluation item has been described in the foregoing embodiments, and will not be described herein.

Step 1006, determining security protection capability data of the target public security video image system according to the evaluation data of each evaluation item.

The safety protection capability data comprises comprehensive protection capability data and core protection capability data.

In the embodiment of the application, the terminal of the public safety video image system can prestore the evaluation rules corresponding to each evaluation item, and the evaluation rules corresponding to each evaluation item can be preconfigured by a technician.

In the case where the data acquisition instructions are generated based on a confirmation of the collection of data operations, the terminal of the public safety video image system can perform locally: and determining the security protection capability data of the target public security video image system according to the evaluation data of each evaluation item.

In the case where the data acquisition instruction is generated based on the evaluation data acquisition message, the terminal of the public safety video image system is capable of transmitting the evaluation data of each evaluation item to the terminal of the public safety video management system, by the terminal of the public safety video management system: and determining the security protection capability data of the target public security video image system according to the evaluation data of each evaluation item.

The specific process of determining the security protection capability data (i.e. the integrated security capability data and the core security capability data) of the target public security video image system according to the evaluation data of each evaluation item has been described in the foregoing embodiments, and will not be described herein.

Optionally, the terminal of the public safety video image system performs locally: when the security protection capability data of the target public security video image system are determined according to the evaluation data of each evaluation item, manual evaluation can be directly performed on each static evaluation item by a technician to obtain the state data of each static evaluation item, and then the security protection capability data is determined according to the state data of each evaluation item.

Step 1008, determining a security protection capability level of the target public security video image system according to the security protection capability data.

In the embodiment of the application, the terminal of the public safety video image system can determine the safety protection capability level of the target public safety video image system according to the safety protection capability data.

The specific process of determining the security capability level of the target public security video image system according to the security capability data has been described in the foregoing embodiments, and will not be described herein.

According to the method for evaluating the safety protection capability of the public safety video image system, the safety protection capability of the public safety video image system can be comprehensively and effectively judged based on a plurality of evaluation items, and the safety problem of the system can be effectively refined through evaluation result analysis and comparison. And moreover, the general network security risk in the public security video image system can be measured, meanwhile, the unique video data security of the public security video image system is also measured, and the public security video image system is guided to further realize the relevant security standard while the security of the public security video image system is effectively evaluated.

In one exemplary embodiment, as shown in fig. 1, there is also provided a security protection capability evaluation system of a public safety video image system, the system including a public safety video management system and a target public safety video image system, wherein:

The public safety video management system is further used for receiving evaluation data of all the evaluation items, determining state data of all the evaluation items according to evaluation rules corresponding to all the evaluation items and the evaluation data of all the evaluation items, and determining the safety protection capability level of the target public safety video image system according to the state data of all the evaluation items; and determining adjustment suggestion information for the target public safety video image system, and transmitting the adjustment suggestion information to the target public safety video image system.

By adopting the security protection capability evaluation system of the public security video image system provided by the embodiment of the application, the security protection capability of the target public security video image system can be comprehensively and effectively judged based on a plurality of evaluation items, and the adjustment suggestion information aiming at the target public security video image system is determined under the condition that the security protection capability level of the target public security video image system is determined. So that the manager of the target public safety video image system can efficiently adjust the target public safety video image system based on the adjustment suggestion information, and the safety protection capability of the target public safety video image system can be improved.

It should be understood that, although the steps in the flowcharts related to the embodiments described above are sequentially shown as indicated by arrows, these steps are not necessarily sequentially performed in the order indicated by the arrows. The steps are not strictly limited to the order of execution unless explicitly recited herein, and the steps may be executed in other orders. Moreover, at least some of the steps in the flowcharts described in the above embodiments may include a plurality of steps or a plurality of stages, which are not necessarily performed at the same time, but may be performed at different times, and the order of the steps or stages is not necessarily performed sequentially, but may be performed alternately or alternately with at least some of the other steps or stages.

Based on the same inventive concept, the embodiment of the application also provides a safety protection capability evaluation device of the public safety video image system for realizing the safety protection capability evaluation method of the public safety video image system. The implementation scheme of the solution provided by the device is similar to the implementation scheme described in the above method, so the specific limitation in the embodiments of the safety protection capability evaluation device of one or more public safety video image systems provided below can be referred to the limitation of the safety protection capability evaluation method of the public safety video image system hereinabove, and will not be repeated here.

In one exemplary embodiment, as shown in fig. 11, there is provided a security capability assessment apparatus 1100 of a public safety video image system, comprising: a first determining module 1101, a first transmitting module 1102, a second determining module 1103 and a second transmitting module 1104, wherein:

A first determination module 1101 is configured to determine a target public safety video image system among a plurality of public safety video image systems in response to a system selection operation.

The first sending module 1102 is configured to send an evaluation data acquisition message to the target public security video image system, where the evaluation data acquisition message is used to instruct the target public security video image system to trigger an evaluation data acquisition task corresponding to each evaluation item, so as to obtain evaluation data corresponding to each evaluation item, and send the evaluation data corresponding to each evaluation item to the public security video management system, where the evaluation item includes a static evaluation item and a dynamic evaluation item, where the static evaluation item is used to determine a security compliance state of the target public security video image system, and the dynamic evaluation item includes a system security state used to determine the target public security video image system.

A second determining module 1103, configured to receive evaluation data of each evaluation item, determine status data of each evaluation item according to an evaluation rule corresponding to each evaluation item and the evaluation data of each evaluation item, and determine a security protection capability level of the target public security video image system according to the status data of each evaluation item.

A second sending module 1104, configured to determine adjustment suggestion information for the target public safety video image system, and send the security protection capability level and the adjustment suggestion information to the target public safety video image system, where the adjustment suggestion information is used to instruct the target public safety video image system to determine a to-be-adjusted item.

By adopting the safety protection capability evaluation device of the public safety video image system, provided by the embodiment of the application, the safety protection capability of the target public safety video image system can be comprehensively and effectively judged based on a plurality of evaluation items, and the adjustment suggestion information aiming at the target public safety video image system is determined under the condition that the safety protection capability level of the target public safety video image system is determined. So that the manager of the target public safety video image system can efficiently adjust the target public safety video image system based on the adjustment suggestion information, and the safety protection capability of the target public safety video image system can be improved.

In one embodiment, the static evaluation items include a management evaluation item including an organization management evaluation item, a system management evaluation item, a running management evaluation item, and a technology evaluation item including a front-end security evaluation item, a boundary security evaluation item, a system security evaluation item, a data security evaluation item, and an overall security evaluation item; the dynamic evaluation items comprise a security detection evaluation item, a security defense evaluation item, a security response evaluation item and a security recovery evaluation item.

In one embodiment, the second determining module 1103 is specifically configured to:

In one embodiment, the second sending module 1104 is specifically configured to:

In an exemplary embodiment, as shown in fig. 12, there is provided a security capability assessment apparatus 1200 of a public safety video image system, comprising: a triggering module 1201, a first determining module 1202, a second determining module 1203 and a third determining module 1204, wherein:

The triggering module 1201 is configured to trigger, in response to a data acquisition instruction, an evaluation data acquisition task corresponding to each evaluation item, where the evaluation item includes a static evaluation item and a dynamic evaluation item, the static evaluation item is used to determine a security compliance state of the target public security video image system, and the dynamic evaluation item includes a system security state used to determine the target public security video image system.

The first determining module 1202 is configured to determine, according to each evaluation data acquisition task, evaluation data corresponding to each evaluation item.

A second determining module 1203 is configured to determine security protection capability data of the target public security video image system according to the evaluation data of each of the evaluation items.

And a third determining module 1204, configured to determine a security protection capability level of the target public security video image system according to the security protection capability data.

By adopting the safety protection capability evaluation device of the public safety video image system, provided by the embodiment of the application, the safety protection capability of the public safety video image system can be comprehensively and effectively judged based on a plurality of evaluation items, and the safety problem of the system can be effectively refined through evaluation result analysis and comparison. And moreover, the general network security risk in the public security video image system can be measured, meanwhile, the unique video data security of the public security video image system is also measured, and the public security video image system is guided to further realize the relevant standard while the security of the public security video image system is effectively evaluated.

The above-mentioned each module in the safety protection ability evaluation device of the public safety video image system may be implemented in whole or in part by software, hardware, and combinations thereof. The above modules may be embedded in hardware or may be independent of a processor in the computer device, or may be stored in software in a memory in the computer device, so that the processor may call and execute operations corresponding to the above modules.

In an exemplary embodiment, a computer device, which may be a terminal, is provided, and an internal structure thereof may be as shown in fig. 13. The computer device includes a processor, a memory, an input/output interface, a communication interface, a display unit, and an input means. The processor, the memory and the input/output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input/output interface. Wherein the processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The input/output interface of the computer device is used to exchange information between the processor and the external device. The communication interface of the computer device is used for carrying out wired communication with an external terminal. The computer program, when executed by a processor, implements a method for evaluating security capabilities of a public safety video image system. The display unit of the computer device is used for forming a visual picture, and can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer equipment can be a touch layer covered on the display screen, can also be a key, a track ball or a touch pad arranged on the shell of the computer equipment, and can also be an external keyboard, a touch pad or a mouse and the like.

It will be appreciated by those skilled in the art that the structure shown in FIG. 13 is merely a block diagram of some of the structures associated with the present inventive arrangements and is not limiting of the computer device to which the present inventive arrangements may be applied, and that a particular computer device may include more or fewer components than shown, or may combine some of the components, or have a different arrangement of components.

In an exemplary embodiment, a computer device is provided, comprising a memory and a processor, the memory having stored therein a computer program, the processor performing the steps of the method embodiments described above when the computer program is executed.

In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored which, when executed by a processor, implements the steps of the method embodiments described above.

In an embodiment, a computer program product is provided, comprising a computer program which, when executed by a processor, implements the steps of the method embodiments described above.

It should be noted that, the user information (including but not limited to user equipment information, user personal information, etc.) and the data (including but not limited to data for analysis, stored data, presented data, etc.) related to the present application are both information and data authorized by the user or sufficiently authorized by each party, and the collection, use and processing of the related data are required to meet the related regulations.

Those skilled in the art will appreciate that implementing all or part of the above described methods may be accomplished by way of a computer program stored on a non-transitory computer readable storage medium, which when executed, may comprise the steps of the embodiments of the methods described above. Any reference to memory, database, or other medium used in embodiments provided herein may include at least one of non-volatile and volatile memory. The nonvolatile memory may include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high density embedded nonvolatile memory, resistive random access memory (ReRAM), magneto-resistive random access memory (Magnetoresistive Random Access Memory, MRAM), ferroelectric memory (Ferroelectric Random Access Memory, FRAM), phase change memory (PHASE CHANGE memory, PCM), graphene memory, and the like. Volatile memory can include random access memory (Random Access Memory, RAM) or external cache memory, and the like. By way of illustration, and not limitation, RAM can be in various forms such as static random access memory (Static Random Access Memory, SRAM) or dynamic random access memory (Dynamic Random Access Memory, DRAM), etc. The databases referred to in the embodiments provided herein may include at least one of a relational database and a non-relational database. The non-relational database may include, but is not limited to, a blockchain-based distributed database, and the like. The processor referred to in the embodiments provided in the present application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic unit, a data processing logic unit based on quantum computing, or the like, but is not limited thereto.

The technical features of the above embodiments may be arbitrarily combined, and all possible combinations of the technical features in the above embodiments are not described for brevity of description, however, as long as there is no contradiction between the combinations of the technical features, they should be considered as the scope of the description.

The foregoing examples illustrate only a few embodiments of the application and are described in detail herein without thereby limiting the scope of the application. It should be noted that it will be apparent to those skilled in the art that several variations and modifications can be made without departing from the spirit of the application, which are all within the scope of the application. Accordingly, the scope of the application should be assessed as that of the appended claims.

Claims

1. A method for evaluating security protection capability of a public safety video image system, applied to a public safety video management system, wherein the public safety video management system is deployed in an upper management area of a plurality of public safety video image systems, the method comprising:

In response to a system selection operation, determining a target public safety video image system in a plurality of public safety video image systems, wherein each public safety video image system comprises a plurality of cameras and at least one terminal for receiving data transmitted by the cameras; the public safety video management system is communicated with the target public safety video image system through a network;

Issuing an evaluation data acquisition message to the target public safety video image system, wherein the evaluation data acquisition message is used for indicating the target public safety video image system to trigger evaluation data acquisition tasks corresponding to all evaluation items, distributing all the evaluation data acquisition tasks to all the acquisition terminals according to acquisition terminal information corresponding to all the evaluation items so as to obtain evaluation data corresponding to all the evaluation items, and sending the evaluation data corresponding to all the evaluation items to the public safety video management system, wherein the evaluation items comprise static evaluation items and dynamic evaluation items, the static evaluation items are used for determining the safety compliance state of the target public safety video image system, the static evaluation items comprise management evaluation items and technical evaluation items, and the management evaluation items comprise organization management evaluation items, system management evaluation items and operation management evaluation items, and the technical evaluation items comprise front-end safety evaluation items, boundary safety evaluation items, system safety evaluation items, data safety evaluation items and overall safety evaluation items; the dynamic evaluation items include a system security state for determining the target public safety video image system, and the dynamic evaluation items include a security detection evaluation item, a security defense evaluation item, a security response evaluation item, and a security recovery evaluation item; the evaluation item comprises three layers of asset security, system and network security and data security, wherein the asset security comprises asset management system, daily management implementation, front-end equipment security management, online rate and unified coding, the system and network security comprises intrusion protection, virus protection, access control and log audit, and the data security comprises identity authentication, data signature, data encryption, leakage prevention and data tracing;

receiving evaluation data of each evaluation item, and determining state data of each evaluation item according to an evaluation rule corresponding to each evaluation item and the evaluation data of each evaluation item;

Determining that the security protection capability level of the target public security video image system is a low level if the integrated protection capability data is below the first integrated protection capability threshold, above or equal to the second integrated protection capability threshold, and the core protection capability data is below the target core protection capability threshold, and the integrated protection capability data is below the second integrated protection capability threshold; the system safety protection capability of the high-level representation is higher than the medium-level representation, and the system safety protection capability of the medium-level representation is higher than the low-level representation;

2. The method of claim 1, wherein determining the composite protective capability data and the core protective capability data of the target public safety video image system based on the status data of each of the assessment items comprises:

3. The method of claim 2, wherein determining the comprehensive protective capability data of the target public safety video image system based on the weight of each of the static evaluation items, the status data of each of the static evaluation items, the weight of each of the dynamic evaluation items, and the status data of each of the dynamic evaluation items comprises:

4. The method of claim 1, wherein the determining adjustment recommendation information for the target public safety video image system comprises:

5. The method according to claim 1, wherein determining the status data of each of the evaluation items according to the evaluation rule corresponding to each of the evaluation items and the evaluation data of each of the evaluation items comprises:

6. The utility model provides a security protection ability evaluation method of public safety video image system, which is characterized in that the utility model is applied to public safety video image system, the public safety video image system communicates with public safety video management system through the network, the public safety video management system is disposed in the upper management district of a plurality of public safety video image systems, the public safety video image system contains a plurality of cameras, and at least one terminal for receiving the camera transmission data, the method includes:

In response to a data acquisition instruction, triggering an evaluation data acquisition task corresponding to each evaluation item, wherein the evaluation items comprise a static evaluation item and a dynamic evaluation item, the static evaluation item is used for determining the safety compliance state of the public safety video image system, the static evaluation item comprises a management evaluation item and a technical evaluation item, the management evaluation item comprises an organization management evaluation item, a system management evaluation item and a running management evaluation item, and the technical evaluation item comprises a front-end safety evaluation item, a boundary safety evaluation item, a system safety evaluation item, a data safety evaluation item and an overall safety evaluation item; the dynamic evaluation items include a system security state for determining the public safety video image system, and the dynamic evaluation items include a security detection evaluation item, a security defense evaluation item, a security response evaluation item, and a security recovery evaluation item; the evaluation item comprises three layers of asset security, system and network security and data security, wherein the asset security comprises asset management system, daily management implementation, front-end equipment security management, online rate and unified coding, the system and network security comprises intrusion protection, virus protection, access control and log audit, and the data security comprises identity authentication, data signature, data encryption, leakage prevention and data tracing;

According to each evaluation data acquisition task, determining evaluation data corresponding to each evaluation item, wherein the evaluation data corresponding to each evaluation item is obtained based on each acquisition terminal of the public safety video image system;

Determining comprehensive protection capability data and core protection capability data of the public safety video image system according to the state data of each evaluation item;

Determining that the security protection capability level of the public security video image system is a high level if the comprehensive protection capability data is higher than or equal to a first comprehensive protection capability threshold;

Determining that the security protection capability level of the public security video image system is a middle level when the comprehensive protection capability data is lower than the first comprehensive protection capability threshold, higher than or equal to a second comprehensive protection capability threshold, and the core protection capability data is higher than or equal to a target core protection capability threshold;

Determining that the security protection capability level of the public security video image system is a low level if the integrated protection capability data is below the first integrated protection capability threshold, above or equal to the second integrated protection capability threshold, and the core protection capability data is below the target core protection capability threshold, and the integrated protection capability data is below the second integrated protection capability threshold; the system safety protection capacity of the safety protection capacity level, which is characterized by the high level, is higher than the medium level, and the system safety protection capacity of the safety protection capacity level, which is characterized by the medium level, is higher than the low level.

7. The utility model provides a security protection ability evaluation system of public safety video image system, its characterized in that, system includes public safety video management system and target public safety video image system, and public safety video management system disposes in the upper management district of a plurality of public safety video image systems, public safety video management system communicates with target public safety video image system through the network, contains a plurality of cameras in the target public safety video image system, and at least one terminal that is used for receiving the camera transmission data, wherein:

The target public safety video image system is used for triggering an evaluation data acquisition task for each evaluation item after receiving the evaluation data acquisition message, distributing each evaluation data acquisition task to each acquisition terminal according to the acquisition terminal information corresponding to each evaluation item so as to obtain evaluation data corresponding to each evaluation item, and sending the evaluation data corresponding to each evaluation item to the public safety video management system; the evaluation items comprise a static evaluation item and a dynamic evaluation item, the static evaluation item is used for determining the safety compliance state of the target public safety video image system, the static evaluation item comprises a management evaluation item and a technical evaluation item, the management evaluation item comprises an organization management evaluation item, a system management evaluation item and a running management evaluation item, and the technical evaluation item comprises a front-end safety evaluation item, a boundary safety evaluation item, a system safety evaluation item, a data safety evaluation item and an overall safety evaluation item; the dynamic evaluation items include a system security state for determining the target public safety video image system, and the dynamic evaluation items include a security detection evaluation item, a security defense evaluation item, a security response evaluation item, and a security recovery evaluation item; the evaluation item comprises three layers of asset security, system and network security and data security, wherein the asset security comprises asset management system, daily management implementation, front-end equipment security management, online rate and unified coding, the system and network security comprises intrusion protection, virus protection, access control and log audit, and the data security comprises identity authentication, data signature, data encryption, leakage prevention and data tracing;

the public safety video management system is further used for receiving evaluation data of all the evaluation items and determining comprehensive protection capability data and core protection capability data of the target public safety video image system according to state data of all the evaluation items; determining that the security protection capability level of the target public security video image system is a high level under the condition that the comprehensive protection capability data is higher than or equal to a first comprehensive protection capability threshold value; determining that the security protection capability level of the target public security video image system is a middle level when the comprehensive protection capability data is lower than the first comprehensive protection capability threshold, higher than or equal to a second comprehensive protection capability threshold, and the core protection capability data is higher than or equal to a target core protection capability threshold; determining that the security protection capability level of the target public security video image system is a low level if the integrated protection capability data is below the first integrated protection capability threshold, above or equal to the second integrated protection capability threshold, and the core protection capability data is below the target core protection capability threshold, and the integrated protection capability data is below the second integrated protection capability threshold; the system safety protection capability of the high-level representation is higher than the medium-level representation, and the system safety protection capability of the medium-level representation is higher than the low-level representation; and determining adjustment suggestion information for the target public safety video image system, and issuing the safety protection capability level and the adjustment suggestion information to the target public safety video image system.