一种多媒体社交网络安全风险评估方法

A SECURITY RISK ASSESSMENT METHOD FOR MULTIMEDIA SOCIAL NETWORKS

新兴的多媒体社交网络MSN(Multimedia Social Networks)为多媒体内容的传播与分享提供了便利,然而用户之间随意的分享与传播受版权保护的数字内容使得数字版权管理DRM(Digital Rights Management)问题日益严重,该开放式网络场景面临数字内容的损害和版权侵犯等安全风险。基于传统的风险评估方法,并引入信任风险、用户需求等风险影响因子,采用定量和定性相结合的方法来评估MSN中用户之间数字内容传播中的风险,其中定量方法采用金融领域广泛使用的风险计算方法——VAR方法,定性方法是采用专家评分方式对非量化因素的评估。最后通过仿真实验验证了提出的风险评估方法的有效性,并揭示了风险损失与风险平均发生率、内容提供商的风险偏好态度之间的关系,即风险平均发生率偏大时(泊松分布图趋于正态分布),内容提供商厌恶风险时面临损失最小,其次是风险追求,而风险中立时面临损失最大。

Although the emerging multimedia social networks （MSN）provide convenience for disseminating and sharing the multimedia digital contents,but to share and spread the copyrighted digital contents between users at will causes the digital rights management （DRM） problem to be increasingly serious.In addition,the open internet scene also faces the security risks in digital contents detriment and copy-rights infringements.Based on conventional risks assessment approaches,we introduce the risk impact factors such as trust risk and user de-mands,and adopt an approach combining both the quantitative and qualitative analysis to assess the transmission risks of copyrighted digital contents among MSN users.Specifically,the value at risk （VAR）,a risk calculation method widely used in financial field,is employed as the quantitative analysis approach.While the expert scoring,as a qualitative approach,is used to evaluate the non-quantifiable factors.Fi-nally,the effectiveness of the security risk assessment method proposed in the paper is verified by Ucinet-based social network simulation ex-periments.The relationships of risk loss with average rate of risk occurrence and risk preference of content providers are revealed.It is found that,when the average rate of risk occurrence is higher （with Poisson distribution tending to be normal distribution）and the content providers are risk-averse,the loss is lowest.The circumstance as to the content providers are risk-seeking leads to lower loss,while if the content pro-viders are risk-neutral,the loss will be the maximum.