# Efficient Detection of Large-Scale Multimedia Network Information Data Anomalies Based on the Rule-Extracting Matrix Algorithm

Authors: Jie Zhao
Journal: Advances in Multimedia
 (2021)

---

## Abstract

With the continuous development of multimedia social networks, online public opinion information is becoming more and more popular. The rule extraction matrix algorithm can effectively improve the probability of information data to be tested. The network information data abnormality detection is realized through the probability calculation, and the prior probability is calculated, to realize the detection of abnormally high network data. Practical results show that the rule-extracting matrix algorithm can effectively control the false positive rate of sample data, the detection accuracy is improved, and it has efficient detection performance.


---

## Body

## 1. Introduction

With the continuous development of multimedia social networks, online public opinion information has become increasingly popular. The dissemination of information has become a new trend with the rapid increase of hot topics among the general public, such as Baidu Hot Search and Weibo Hot Search [1–3]. As we all know, this kind of multimedia network is a double-edged sword. It can convey both positive and negative information. It can guide the public to judge something and also affect the harmonious and stable development of society seriously. Therefore, how to effectively detect such abnormal network information has become an urgent problem to be solved. There have been many explorations in the industry, such as the use of the KNN method for network abnormal information data detection, the confidence method for training, and the comparison of abnormal samples to detect abnormal information data in the network. However, there are certain limitations in terms of this method, and the missed detection rate is relatively high [4, 5]. Therefore, this is still one of the important research directions, and a variety of detection operators have appeared one after another, such as Forstner operator, SUSAN operator, Harris operator, and so on. In addition, some scholars used singular value decomposition methods for analysis, but they produced visual and auditory errors, and the effect is not obvious [6].The rule-extracting matrix algorithm extracts implicit and useful related knowledge and rules, such as corresponding rules, knowledge, and so on, from the data warehouse. However, due to different complexities of the data, it is difficult to ensure complete mining of the data [7, 8]. The detection of network format data is realized through filtering, and the detection of network information data anomaly is realized through probability calculation based on the rule-extracting matrix algorithm. The value of the prior probability is calculated in an attempt, and the network data abnormality is detected, aiming to explore the detection of abnormal network data performance.


## 2. Rule-Extracting Matrix Algorithm

In multimedia network information detection, the most obvious distinction is words with emotional color. Therefore, it is effective to identify, extract, and detect network abnormal information based on emotional words. Therefore, during the whole process, firstly the multimedia network information is grabbed, secondly, the corresponding data samples are analyzed and processed through Chinese word segmentation technology, and finally, the word segmentation results are matched with the existing abnormal information database, and abnormal data are detected in the multimedia network according to the corresponding abnormal information threshold [9].(1)At=e⋅BHt⋅xn,(2)HBz=1+sinϑ2cosϑ2⋅cosϑ1⋅z−1sinϑ2⋅Gz⋅At,where A(t) represents the network information data traffic oscillation attenuation estimated value obtained after interference filtering and represents the variance coefficient in multimedia network data, and BHt represents the negative information feature detection-related function in the network information data traffic.According to the abnormal information data provided by the multimedia network information database as a benchmark, the normal information and abnormal information in the subdatabase are separately counted, and the frequency of normal information and abnormal information of a single word is calculated. The specific calculation formulas are shown in formulas (3) and (4).(3)Aci=fPci∑mfPci,(4)Bci=fNci∑nfNci,where w1 is the data weight of the character or word segmentation; w2 is the normal word frequency of w3; B=bi,j is the weight of the word segmentation in the abnormal data; and 1≤i,j≤m is the frequency of the abnormal words of Si,j. In addition, m and n are the corresponding numbers of different characters in the normal information database and the abnormal information database.From formulas (3) and (4), it can be seen that the abnormal information data in the word segmentation and word database are relatively similar, and the specific calculation formulas are shown in formulas (5) and (6):(5)Gz=1−sinϑ22⋅1−z−1sinϑ11+sinϑ2,(6)Sci=Aci−Bci,where Aai,j is the threshold for measuring whether the word is normal or abnormal information. Assuming Sci≥0 is the abnormal frequency corresponding to the correct information data, Sci<0 represents the abnormal frequency in the network information data.According to formula (3), the threshold of normal and abnormal information is calculated, and the emotional tendency of words can be expressed by the following formula:(7)Sw=1n⋅∑Sci.Among them, the calculated result is the detection result of the abnormal information data of the multimedia network.During the process of detecting abnormal data in multimedia networks, in addition to a lot of effective information, there are also many kinds of redundant interference information. These kinds of interference information will affect the information detection results of abnormal data and cause a certain missed detection rate [10–14].


## 3. Model Construction and Problem Description

### 3.1. Large-Scale Visual Multimedia Network Model

As we all know, the current multimedia network model uses a topological network to serve the Internet for service integration. This text builds the network structure of the large-scale visual multimedia network simulation based on the computer graphics and image processing by constructing the multimedia visual network model, as shown in Figure1.Figure 1
Large-scale visual multimedia network simulation platform.As shown in Figure1, the request for each multimedia storing at the same time may be different, but only one storage can be performed. Set |LFN| to the size of the data file request, as shown in the following formula:(8)RCr=β×∑LFN,where β is a constant used to express the degree of parallelism and the copy of the abnormal data of the multimedia network can be calculated by formula (2), as shown in the following formula:(9)RV=w1×1S+w2×NA+w3×1CT−LA,where the values of w1, w2, and w3 can be set by themselves and K is the output set of the multiplexer, and the details are shown in the following formula:(10)k=1,2,3,…K.For large-scale visual multimedia network topology network, there are abnormal data mutation data, such as error codes, and there are mutation abnormal data in custom data [15]. For the inspection of the abnormal data of the large-scale visual multimedia network, the abnormal information of the large-scale visual multimedia network is required, as shown in formulas (11) and (12):(11)T=T1+T2,(12)Fx,y=w1×T×w2×Dx,y.This function can be tailored because it is defined as a weighted combination of three indicators. Predict the parallel computing time required for calculation of the same chain length on different numbers of cores and obtain the numerical simulation of the CPU running time of the attack data captured by web firewalls of different chain lengths. This realizes the construction of a large-scale visual multimedia network model to provide a model basis for efficient detection of big data.


### 3.2. Feature Extraction of Big Data in Large-Scale Visual Multimedia Network

If the watermark image in the large-scale visual multimedia network information is represented byB=bi,j, 1≤i,j≤m, and m is the dimension of the matrix, the singular value is obtained as shown in formula (10) by solving the singular value of the matrix:(13)Aai,j=Ui,j∗Si,j∗Vi,j.On the basis of formula (13), a small matrix unit Aai,j is obtained. According to a certain decomposition of singular values, a matrix of singular values is obtained, as shown in the following formula:(14)Aai,j=Ui,j∗Si,j∗Vi,jT.The undirected graph analysis method is used to design the network model. The finite queuing model of each channel NAV task is used to represent the state space, as shown in the following formula:(15)S=k,n,0≤k≤K,0≤n≤N.Suppose that in the multimedia network database, the predictive performance of data packet information isλi:1≤i≤S, and the criterion is Rj:1≤j≤L. Among them, S represents the amount of input data and L represents the total bandwidth ratio used in the channel. The channel allocation packet conversion waiting time is(16)Wq=W−X¯=1γ∑k=1K∑n=1Nkpk,n−N−1μ+rμr.In the D-dimensional search space established during the mobile learning process, the population size is set toN, the current position of the particle is Xi = (xi1, xi2, …, xiD), the speed is Vi = (vi1, vi2, …, viD), the power consumption of the data stream is C received from all adjacent nodes, and the accurate prediction of the results is BHt, and the semisupervised control prediction result of mobile learning is obtained as(17)q^=arcminq=1∑q=1qq|e−∑q=q¯qqq|e.In order to realize learning from other particles in the evolution, the linear superposition detail capture algorithm is used to perform the optimal configuration of the search ability balance state, and the objective function of supervised learning is obtained as(18)Lq¯,q=1q¯−q>δ2,0q¯−q≤δ2.In the formula,BHt refers to the related parameters of the scheduling task instruction in the M-learning process, and the computer vision features can be effectively extracted, which can be explained by the following formula:(19)DC1,C2=true,ifDifC1,C2>MIntC1,C2,false,otherwise,(20)MIntC1,C2=minIntC1+τC1,IntC2+τC2,where the Canny edge detection function HBz is a constant and |C| is the size of the area C, which realizes the feature extraction of big data in a large-scale visual multimedia network.The stability of multimedia networks and the quality of video and audio transmission are improved through the efficient detection of abnormal data. According to the above description, the implementation process of the improved algorithm is described as shown in Figure2.Figure 2
Efficient detection of big data in large visual multimedia networks.


## 3.1. Large-Scale Visual Multimedia Network Model

As we all know, the current multimedia network model uses a topological network to serve the Internet for service integration. This text builds the network structure of the large-scale visual multimedia network simulation based on the computer graphics and image processing by constructing the multimedia visual network model, as shown in Figure1.Figure 1
Large-scale visual multimedia network simulation platform.As shown in Figure1, the request for each multimedia storing at the same time may be different, but only one storage can be performed. Set |LFN| to the size of the data file request, as shown in the following formula:(8)RCr=β×∑LFN,where β is a constant used to express the degree of parallelism and the copy of the abnormal data of the multimedia network can be calculated by formula (2), as shown in the following formula:(9)RV=w1×1S+w2×NA+w3×1CT−LA,where the values of w1, w2, and w3 can be set by themselves and K is the output set of the multiplexer, and the details are shown in the following formula:(10)k=1,2,3,…K.For large-scale visual multimedia network topology network, there are abnormal data mutation data, such as error codes, and there are mutation abnormal data in custom data [15]. For the inspection of the abnormal data of the large-scale visual multimedia network, the abnormal information of the large-scale visual multimedia network is required, as shown in formulas (11) and (12):(11)T=T1+T2,(12)Fx,y=w1×T×w2×Dx,y.This function can be tailored because it is defined as a weighted combination of three indicators. Predict the parallel computing time required for calculation of the same chain length on different numbers of cores and obtain the numerical simulation of the CPU running time of the attack data captured by web firewalls of different chain lengths. This realizes the construction of a large-scale visual multimedia network model to provide a model basis for efficient detection of big data.


## 3.2. Feature Extraction of Big Data in Large-Scale Visual Multimedia Network

If the watermark image in the large-scale visual multimedia network information is represented byB=bi,j, 1≤i,j≤m, and m is the dimension of the matrix, the singular value is obtained as shown in formula (10) by solving the singular value of the matrix:(13)Aai,j=Ui,j∗Si,j∗Vi,j.On the basis of formula (13), a small matrix unit Aai,j is obtained. According to a certain decomposition of singular values, a matrix of singular values is obtained, as shown in the following formula:(14)Aai,j=Ui,j∗Si,j∗Vi,jT.The undirected graph analysis method is used to design the network model. The finite queuing model of each channel NAV task is used to represent the state space, as shown in the following formula:(15)S=k,n,0≤k≤K,0≤n≤N.Suppose that in the multimedia network database, the predictive performance of data packet information isλi:1≤i≤S, and the criterion is Rj:1≤j≤L. Among them, S represents the amount of input data and L represents the total bandwidth ratio used in the channel. The channel allocation packet conversion waiting time is(16)Wq=W−X¯=1γ∑k=1K∑n=1Nkpk,n−N−1μ+rμr.In the D-dimensional search space established during the mobile learning process, the population size is set toN, the current position of the particle is Xi = (xi1, xi2, …, xiD), the speed is Vi = (vi1, vi2, …, viD), the power consumption of the data stream is C received from all adjacent nodes, and the accurate prediction of the results is BHt, and the semisupervised control prediction result of mobile learning is obtained as(17)q^=arcminq=1∑q=1qq|e−∑q=q¯qqq|e.In order to realize learning from other particles in the evolution, the linear superposition detail capture algorithm is used to perform the optimal configuration of the search ability balance state, and the objective function of supervised learning is obtained as(18)Lq¯,q=1q¯−q>δ2,0q¯−q≤δ2.In the formula,BHt refers to the related parameters of the scheduling task instruction in the M-learning process, and the computer vision features can be effectively extracted, which can be explained by the following formula:(19)DC1,C2=true,ifDifC1,C2>MIntC1,C2,false,otherwise,(20)MIntC1,C2=minIntC1+τC1,IntC2+τC2,where the Canny edge detection function HBz is a constant and |C| is the size of the area C, which realizes the feature extraction of big data in a large-scale visual multimedia network.The stability of multimedia networks and the quality of video and audio transmission are improved through the efficient detection of abnormal data. According to the above description, the implementation process of the improved algorithm is described as shown in Figure2.Figure 2
Efficient detection of big data in large visual multimedia networks.


## 4. Detection Method of the Abnormal Information Data of the Multimedia Network

### 4.1. Multimedia Network Information Data Interference Filtering Processing

For multimedia network information data, the anti-jamming filtering algorithm is detected for network abnormal information detection to improve the accuracy of information data detection and reduce the rate of missed detection. For the collected multimedia network information data center, the filtered input vector is obtained through Fourier transformation, and the input vector is set as a stable vector input to achieve multimedia network interference filtering.If the data of the multimedia network information are constructed based on linearly correlated time series, interference suppression is achieved through the following filtering model, as shown in the following formula:(21)xn=a0+∑a0xn−i+∑bj,where the initial sample used to represent the flow of the multimedia network information data center is a0, the multimedia scalar time series is represented by xn−i, and the central flow fluctuation is represented by bj.Based on the above analysis, the obtained FIR cascade filter can be expressed as shown in Figure3.Figure 3
FIR filter.Among them, the sparse iterative expression of the filter can be expressed by the following formula:(22)ϑ1k+1=ϑ2k+1=ϑk−yk⋅Gz.According to FIR anti-interference filtering, the flow output of multimedia network information data center can be expressed by the following formula:(23)zt=xt+yt=at+ϑ1k+1+nt.


### 4.2. Anomaly Information Data Detection Method Based on Rule-Extracting Matrix Algorithm

Based on the various public opinion topics of the sample, the corresponding probability expression is built, and the record to be detected can be expressed by the following formula:(24)PCategory|zt=PCategory⋅Pzt|CategoryPzt,where P(Category|z(t)) is used to represent a certain probability to be detected. For each data record to be detected, the data vector can be converted into a content vector.(25)PCategory|zt=PCategory⋅Pxi1,…,xinPxi1,…,xin,where Pxi1,…,xin is a constant sequence. According to the quantitative calculation of formula (25), the corresponding objective function Fn can be constructed, as shown in the following formula:(26)Fn=argmaxPCategory|zt=argmaxPCategory⋅Pxi1,…xin.Based on the assumption of the rule-extracting matrix algorithm, each record has an independent relationship between the component vector values, and the joint probability is the product of the component probabilities. In summary, using the maximum value formula, the final objective function expression constructed is(27)Fn=argmaxPCategory∏Pxin|Category.


## 4.1. Multimedia Network Information Data Interference Filtering Processing

For multimedia network information data, the anti-jamming filtering algorithm is detected for network abnormal information detection to improve the accuracy of information data detection and reduce the rate of missed detection. For the collected multimedia network information data center, the filtered input vector is obtained through Fourier transformation, and the input vector is set as a stable vector input to achieve multimedia network interference filtering.If the data of the multimedia network information are constructed based on linearly correlated time series, interference suppression is achieved through the following filtering model, as shown in the following formula:(21)xn=a0+∑a0xn−i+∑bj,where the initial sample used to represent the flow of the multimedia network information data center is a0, the multimedia scalar time series is represented by xn−i, and the central flow fluctuation is represented by bj.Based on the above analysis, the obtained FIR cascade filter can be expressed as shown in Figure3.Figure 3
FIR filter.Among them, the sparse iterative expression of the filter can be expressed by the following formula:(22)ϑ1k+1=ϑ2k+1=ϑk−yk⋅Gz.According to FIR anti-interference filtering, the flow output of multimedia network information data center can be expressed by the following formula:(23)zt=xt+yt=at+ϑ1k+1+nt.


## 4.2. Anomaly Information Data Detection Method Based on Rule-Extracting Matrix Algorithm

Based on the various public opinion topics of the sample, the corresponding probability expression is built, and the record to be detected can be expressed by the following formula:(24)PCategory|zt=PCategory⋅Pzt|CategoryPzt,where P(Category|z(t)) is used to represent a certain probability to be detected. For each data record to be detected, the data vector can be converted into a content vector.(25)PCategory|zt=PCategory⋅Pxi1,…,xinPxi1,…,xin,where Pxi1,…,xin is a constant sequence. According to the quantitative calculation of formula (25), the corresponding objective function Fn can be constructed, as shown in the following formula:(26)Fn=argmaxPCategory|zt=argmaxPCategory⋅Pxi1,…xin.Based on the assumption of the rule-extracting matrix algorithm, each record has an independent relationship between the component vector values, and the joint probability is the product of the component probabilities. In summary, using the maximum value formula, the final objective function expression constructed is(27)Fn=argmaxPCategory∏Pxin|Category.


## 5. Experimental Results and Analysis

In order to effectively detect and simulate the abnormal data of the multimedia network, the data required for the experiment are collected through the collection of the corresponding 5000 pieces of information through the hot search on Weibo (October-November 19) for 2 months. The content involves current affairs politics, sports content, science and technology, literary content, etc. These data are vectorized, including normal information and abnormal information at the same time, to form the final experimental dataset.(1)
The false positive rate of rule-extracting matrix algorithm is tested.(2)
The missed detection rate of the rule-extracting matrix algorithm is tested.The corresponding results are obtained through two simulation experiments, as follows.


### 5.1. Experiment 1

In Figure4, the so-called false positive rate is the probability that normal data are judged as abnormal data. Through the analysis of the results, the false positive rates of the detection results of three different detection algorithms under the same number of experimental iterations are quite different. Among them, for the extraction based on rules under the matrix algorithm’s multimedia network negative information data detection method, the false positive rate of the detection result is overall low, with the highest one of not more than 5%, and for other information gain network anomaly detection methods, migration technology, and D-S theory data detection methods, the relative false positive rate is more than 25%.Figure 4
Comparison of false positive rates in different methods. (a) False positive rate of network anomaly detection based on information gain. (b) False positive rate of data detection based on migration technology and D-S theory. (c) False positive rate of data detection based on rule-extracting matrix algorithm.
(a)(b)(c)


### 5.2. Experiment 2

In Figure5, U represents the number of abnormal data in the experimental data subset; 0 represents the number of missed detections of network anomaly detection methods based on data mining and information extraction; and J represents the number of missed detections of the multimedia network negative information data detection method based on the rule-extracting matrix algorithm.Figure 5
Comparison of missed detection by different methods.Analyzing Figure5, the missed detection rate of the network anomaly detection method based on data mining and information extraction is about 23.6%. The missed detection rate of the multimedia network negative information data detection method based on the rule-extracting matrix algorithm is about 0.67%. The comparison of the above data shows that the proposed method has a low probability of missed detection and is practical.


## 5.1. Experiment 1

In Figure4, the so-called false positive rate is the probability that normal data are judged as abnormal data. Through the analysis of the results, the false positive rates of the detection results of three different detection algorithms under the same number of experimental iterations are quite different. Among them, for the extraction based on rules under the matrix algorithm’s multimedia network negative information data detection method, the false positive rate of the detection result is overall low, with the highest one of not more than 5%, and for other information gain network anomaly detection methods, migration technology, and D-S theory data detection methods, the relative false positive rate is more than 25%.Figure 4
Comparison of false positive rates in different methods. (a) False positive rate of network anomaly detection based on information gain. (b) False positive rate of data detection based on migration technology and D-S theory. (c) False positive rate of data detection based on rule-extracting matrix algorithm.
(a)(b)(c)


## 5.2. Experiment 2

In Figure5, U represents the number of abnormal data in the experimental data subset; 0 represents the number of missed detections of network anomaly detection methods based on data mining and information extraction; and J represents the number of missed detections of the multimedia network negative information data detection method based on the rule-extracting matrix algorithm.Figure 5
Comparison of missed detection by different methods.Analyzing Figure5, the missed detection rate of the network anomaly detection method based on data mining and information extraction is about 23.6%. The missed detection rate of the multimedia network negative information data detection method based on the rule-extracting matrix algorithm is about 0.67%. The comparison of the above data shows that the proposed method has a low probability of missed detection and is practical.


## 6. Conclusions

Multimedia network is a double-edged sword. It can convey both positive and negative information. It can guide the public to judge something and also greatly affect the harmonious and stable development of society. Data detection network is used to remove the interference of the network’s bad factors, which can improve the detection efficiency and reduce the missed detection rate. Experimental comparison shows that the rule matrix algorithm proposed in this paper is highly reliable and scientific.



---

*Source: 3299891-2021-11-30.xml*