# The Innovation of Mongolian Folk Song Music Cultural Inheritance Path Based on Intelligent Computing Analysis of Communication Big Data

Authors: Jiayu Wu; Cheong Jan Chan; Julia Chin Yee Chieng
Journal: Security and Communication Networks
 (2022)

---

## Abstract

Cultural inheritance and innovation is an important measure to enhance the vitality of traditional culture and realize the sharing of national culture. Mongolian folk music, as an important part of Chinese cultural resources, plays an irreplaceable role in inheriting Mongolian culture. How to better inherit the music culture of ethnic minorities has been a hot topic in the music education circle in recent years. However, when we focus on the campus inheritance of ethnic minority music, we have to pay attention to the original living space of ethnic minority music and its unique local inheritance method. What is the relationship between them? What are the similarities and differences? The investigation of the relationship between the two is an indispensable content for exploring the inheritance of minority music. This paper aims to study the innovation of the inheritance path of Mongolian folk song music culture, endow Mongolian folk song music with a new era connotation in the new era, and let the folk song music culture be inherited and revitalized in the in-depth contact with the masses. This paper proposes a method to study user needs with the help of dissemination big data, identify malicious traffic with the help of the Internet of Things, find the most touching music and cultural elements of users, innovate and integrate the Mongolian nation, avoid malicious traffic from invading Mongolian folk songs, and enhance the attractiveness of Mongolian folk songs. Experiments have shown that Mongolian folk songs have a strong appeal, and the participation rate of young people in Mongolian folk songs has increased by 20%.


---

## Body

## 1. Introduction

China is a multiethnic unified country, and each ethnic group has its own unique language, customs, costumes, and other splendid cultures. The Mongolian traditional culture is rich in content, broad, and profound. However, with the flood of mainstream culture and the influence of the baton of the college entrance examination, the traditional Mongolian culture has gradually been marginalized or even ignored. On one side, modern culture is blooming, and traditional culture is declining. On the other side, the inheritors are difficult to survive, and many excellent Mongolian cultures are facing loss, and there is vitality in the crisis. At present, more and more people have noticed the dilemma of traditional culture, and more and more people have begun to pay attention to the inheritance and development of national music culture. The protection and inheritance of national music culture highlight its collective consciousness compared to any historical period. How to let the Mongolian culture inherit and develop and how to realize the Mongolian folk song music in the new era will be reborn as the test of the times that musicians must answer.For the inheritance and innovation of traditional culture, experts and scholars at home and abroad have already had certain achievements and experience. Zhao proposes a new way of inheriting traditional culture by injecting traditional culture into the art classroom. Schools should grasp the correct value orientation of art teaching according to the requirements of core literacy. He proposed to organically graft art teaching materials with students’ cultivation and implement colorful and innovative teaching. He pays attention to the internalization of students’ knowledge and skills and improves the core quality of students’ art. He wants students to find unique traditional cultural symbols and establish a sense of national belonging and self-worth [1]. Pan et al.’s research on Xin’an Medical College is the development history, looking for the law of its inheritance and development. As a medical school with distinctive regional characteristics, it has contributed to the development of Chinese medicine in terms of literature resources, medical theories, clinical applications, and spiritual culture and has had a profound impact. His article discusses its academic characteristics and contribution to the development of Chinese medicine, focusing on its formation, academic inheritance and innovation, overseas popularization, and the integration of Confucianism and Buddhism in medicine [2]. The source of Pedeliento et al.’s research on cultural innovation is to learn from the theory of cultural innovation. He provided a case study on a recently established consumer startup company that stood out on the local competitive arena due to the cultural positioning it pursued. The results of the two-year longitudinal case study combine longitudinal case analysis with active research, revealing how consumers recognize the existence of cultural opportunities. It develops cultural strategies and builds companies to take advantage of this opportunity commercially. His research provides a theoretical and empirical explanation for linking the literature of consumer entrepreneurship with the theory of cultural innovation [3]. Lin et al. strive to build a biscuit knowledge-based teaching tourism factory, combining local handmade biscuit experience and evaluation. He aims to disseminate biscuit making techniques and the experience of biscuit manufacturers to the public. In addition, he looks forward to sharing with the public what the concept of nonadditives and nature is. He provides knowledge about food safety and conveys local characteristics and cultural spirit [4]. Wang studies digital cultural innovation, and under the background of the all-round development of Internet big data, he uses digital art technology to help transform scientific and technological innovation capabilities into real productivity. Digital media disciplines in colleges and universities should seize opportunities, respond to challenges, develop cultural and creative industries, and better realize the transformation of results [5]. Jiao et al.’s research explores how the social networks of senior management team members of Chinese cultural and creative industries influence corporate innovation performance through organizational learning. Based on the cultural and creative industries, their article focuses on how the social networks of senior management team members influence innovation through organizational learning. They used upper echelon theory and social capital theory to put forward the relationship between the social network, organizational learning, and innovation performance of the senior management team. Based on the analysis of the internal mechanism between the senior management team network, organizational learning, and innovation performance, they finally drew the influence mechanism framework of the social network of the cultural and creative industry senior management team on corporate innovation. This provides a theoretical basis for enterprise innovation, as well as guidance and practical operation path for enterprise management innovation [6]. The cultural diversity among Elia et al. research alliance partners can have a negative impact on their innovation performance. They believe that innovation is more challenging in alliances involving subsidiaries of multinational corporations (MNCs), because they embody the dual background of the culture of the host country and the home country. They proposed that the impact of cultural diversity depends on the content of the alliance, which is positive in exploratory alliances and negative in exploitative alliances. Their findings confirm that subsidiaries often lack innovation in alliances involving partners from other cultures. However, when these alliances focus on exploratory activities, the impact of this cultural diversity becomes positive, because the challenge of cultural diversity is offset by the benefits of exposure to new cognitive programs [7]. Kostis et al. study the impact of cultural changes on innovation performance. They explored the relationship between cultural change and innovation performance using an imbalanced panel of tenth grade data from 34 OECD countries from 1980 to 2010. Their analysis using fixed effect estimates, different intercepts in different countries, and ten-year time dummy variables showed that culture and innovation are positively correlated. In addition, their exploration of the influence of the civic cultural dimension on innovation shows that the positive effect of culture on innovation stems from the positive effect of trust, control, professional ethics, and honesty, while the negative effect of obedience is on innovation [8]. MapReduce believes that big data classification has become a popular research topic in various fields such as medical care, e-commerce, and finance. The addition of the feature selection process helps to improve the big data classification process [9]. Zhao et al. believe that the electronics market is able to handle all aspects of quality planning by effectively deploying the IoT-Assisted Identification Management (IIDM) model. As a result it enables electronic marketplaces to handle all aspects of quality planning by effectively deploying available IIDM models [10].This article analyzes the inheritance path of Mongolian folk song music culture innovation and finds the way of Mongolian traditional culture. It finds obstacles that affect the inheritance of Mongolian folk song culture and proposes targeted measures to remove the obstacles. It uses big data to mine information, compares the excellent experience of cultural inheritance and innovation at home and abroad, and finds a new method of cultural inheritance of Mongolian folk songs. Folk inheritance or campus inheritance has its own relatively perfect practice exploration, but with the change of social ecological environment, the reform of music education, and the change of educational environment, the inheritance of minority music needs to be studied in depth from a new perspective. First, scholars have looked for an inheritance method based on school inheritance in terms of curriculum setting, current situation analysis, teaching material implementation, and teaching evaluation, ignoring the study of the original living space of minority music; second, they have studied minority music. Most of the articles on the inheritance mechanism are in the field of ethnomusicology, and there are few articles analyzing the connotation of ethnic music inheritance from the perspective of music pedagogy; thirdly, the inheritance of ethnic minority music in basic education is still relatively weak, and most of them are introductions to teaching experience and a description of the current state of inheritance. From the review of literature, there are still contradictions in how to find a balance between traditional and modern, mainstream and nonmainstream, and local and foreign in the inheritance of minority music.


## 2. Mongolian Folk Song Music Inheritance and Big Data Mining

### 2.1. Inheritance Methods of Mongolian Folk Songs

The geographical environment where the Mongols live is vast grassland. Over the years, the Mongols have not only created their own glorious history, but also created a beautiful grassland culture. Music and dance are an important part of grassland culture. Mongolian folk music, whether it is folk songs, rap, folk songs and dances, or musical instruments, has a distinctive ethnic style. The melody is beautiful, the breath is broad, the feeling is deep, and the breath of grassland is strong.The Mongolian beauty is mainly the product of a long-term nomadic life and the resulting practical activities to create beauty. It is the objective relationship between Mongolian long-term nomadic work and nature and its objective activities. It is not only the cause of beauty, but also the fundamental basis for the artistic practice of creating beauty. Therefore, the essence of Mongolian beauty and artistic beauty lies in the perfect unity of man and nature. This is the essential feature of the Mongolian unique aesthetic style and aesthetic thought. Like Mongolian long-tuned pastoral songs, its long melody and grand phrase style are one of the few development peaks in the field of human music melody thinking. Long tone is the art of nature, and it has the breath of freedom and the romantic charm of freedom, which embodies the harmonious coexistence between man and the grassland, and is closely related, an art of life. Just like the Mongolian heroic epic, emotions and imagination usually thrive in the vast universe, and the music is beautiful and magnificent. The ancient British aesthetic consciousness of the Mongolian nationality is the product of the objective relationship between the Mongolian nomadic life and the natural world. It is also a product of the social relationship between Mongolian nomadic life and the struggle for survival of the nation or tribe. Therefore, Mongolian music aesthetic consciousness is the most concentrated and typical manifestation of the essential characteristics of Mongolian aesthetic consciousness. It is also the most essential form of Mongolian aesthetic consciousness.The inheritance mechanism of Mongolian folk music is a kind of music inheritance system formed naturally by the Mongolian nationality. Although there is no standard support system, in the long-term historical development process, it can adapt to the needs of society and maintain a stable state of development. Due to the special nomadic lifestyle, people need singers to sing at weddings and funerals. It needs storytellers to use Sihu music to tell various historical stories after getting off work, and it also needs to use the low tide to vent their inner distress and sadness. Music is an indispensable content in Mongolian life. Due to a wide range of social needs, folk artists have been recognized by the society as a profession, and more and more members of society choose to become artists. This is the driving force behind the music inheritance mechanism of Mongolian folklore. Figure1 shows the three main music inheritance types of Mongolian folk songs [11].Figure 1
Inheritance of Mongolian folk songs.


#### 2.1.1. Family Inheritance

Family inheritance is a kind of inheritance method passed down from generation to generation, and it is the most natural inheritance mechanism. Folk artists who grew up in the singing of their grandparents listened to the singing and performances of their families and villagers at home, at work, and at weddings and funerals. They learned the skills of their grandparents without knowing it and grew up in the footsteps of their grandparents, so these skills are often better than their grandparents. Inheritance includes passing and inheriting, that is, the relationship between teaching and learning, mission and teaching. The teacher-student relationship under the family inheritance model is often unclear, and there is no clear contract, and the learner’s childhood is just an unconscious legacy. Over time, the ancestors hope that future generations can inherit their skills, and future generations will naturally take on this important task. In the family inheritance model, there is often more than one teacher. In ordinary family life, many elders can influence learners. The biggest feature of the family inheritance mechanism is that the learning method is very natural, and there is music and music as a way of life. Musicians formed by the mechanism of family inheritance usually show extraordinary musical talents. They continue to climb along the mark of their ancestors, elevating this family skill to a glorious pinnacle.


#### 2.1.2. Inheritance of Master and Apprentice

In the inheritance of Mongolian music, the relationship between teacher and student is first of all the relationship between teaching and learning. Secondly, if the teaching is successful, an oral contract relationship is formed. The master has the responsibility to impart skills, and the apprentice has the obligation to take care of the master’s life. After apprenticeship, the young disciple went to the master to study, and while helping the master with housework, he consulted the master at the same time. Or he may receive the master in his own home for a period of time, take care of his life, perform his duties, and learn art from the master. In the relationship between teacher and apprentice, the division of labor between teaching and reception and the distinction between the roles of teacher and apprentice are very obvious. According to the requirements of roles and division of labor, a certain relationship mode is formed between the two. This teaching method is a bit like the professional small classes of our professional music schools today, but the contact between teachers and students in modern music schools is often limited to the classroom. In the Mongolian teacher-student inheritance mechanism, the coexistence of teachers and students is its advantage. Teachers and students live together for a period of time, which is very similar to family inheritance. This allows teaching to be carried out at any time without time and space constraints. Education is not only about teaching skills, teachers’ attitudes towards music and life continue to influence students, and teaching activities have a rich extension. It can be said that the inheritance of teachers and students in modern education has the dual characteristics of family education and school education. In addition, the mentor-to-apprentice inheritance is often open. Learners can choose whom to study with, often more than one teachers so that learners have the opportunity to gain insight into a hundred masters, to be inclusive and to develop their skills.


#### 2.1.3. Inheritance of Social Customs

The inheritors of social folklore are the products of the environment. The development and distribution of human activities are strictly restricted by the environment. For thousands of years, the Mongols have been engaged in animal husbandry production, living on aquatic plants, and living a relatively closed life for a long period of time. This allows the Mongolian unique folk activities to be well protected. However, human beings are emotional animals and need to exchange feelings. Therefore, people have great enthusiasm for the folk activities organized on a regular basis. The folk music heritage of Mongolian civil society is an activity based on certain folk customs and entertainment activities. For example: nadam, weddings, festivals, sacrificial obo, reception sheep blankets, and other occasions must carry out certain sacrificial activities. According to traditional customs, Mongolians must sing different folk songs in folk activities on different occasions. Entertainment is the main way for the masses to participate, and artists compete with each other, communicate, learn, expand their artistic vision, and accumulate singing experience. Folk activities have the characteristics of sociality, collectiveness, periodicity, and stability and provide a social platform for the inheritance of folk music. The social needs of folk activities mean that folk music always maintains its own vitality. But the inheritance of art by civil society is usually a form of word of mouth. The form of word of mouth means that art and knowledge are constantly changing and cannot be passed on in a solidified and normalized form. However, the inheritance process of social folklore, due to its social, collective, openness, and other factors, naturally produced many aspects such as integration, innovation, and transformation.These three delivery mechanisms combine with each other and promote each other. Family inheritance often plays an important role in the artist’s youth, laying a solid foundation for him and providing him with the possibility of further development. When they grow up to a certain age, they will look out, they will feel the need to expand their games and singing, and they will naturally look for better teachers to learn art. Nongovernmental activities and other exchange platforms allow artists to understand the strengths of a family. This often plays a decisive role in the promotion of folk artists and the formation of talents and artistic styles. Mongolian folk music combines and promotes each other through family inheritance, master and apprentice inheritance, and social custom inheritance, forming a virtuous cycle of inheritance mechanism. It plays an irreplaceable role in the inheritance of folk music and has vigorous vitality [12].


### 2.2. Big Data

As a recent hot word, big data mainly describes large-scale, diverse, and rich data sets [13]. It is a product of the development of computer networks to a certain extent. Compared with data in the traditional sense, big data has characteristics that traditional data does not have, as shown in Table 1.Table 1
Characteristics of big data.
FeaturesMeaningRich varietyThere are many types, states, and formats of big dataGreat valueBig data has multidimensional characteristics such as time and space and contains rich valueFast processing speedBig data update time is short; computer processing time is fastThe data is trueReflect the universal law of time through big data, and the data is trueData securityNot easily tampered withData visualizationBig data needs software visualizationBig amount of dataMultiple data sources, long data storage timeThe data volume of big data continues to increase rapidly and requires high-speed data input and output requirements. And the data sources and types are diverse, but the value of the data is huge. Data mining is mainly the process of interpreting hidden, unknown, and potentially valuable information from a large amount of data in the database. Data mining includes 5 steps, which are data extraction, cleaning, transformation, mining, interpretation, and evaluation [14]. Antivirus software runs malicious code programs and exposes the program behavior of malicious code and then detects them to achieve the purpose of antivirus. If the virus really runs in the user’s computer, sometimes it will inevitably cause damage to the user's computer, which will go against the original intention of antivirus. The detailed process is shown in Figure 2.Figure 2
Data mining flowchart.


#### 2.2.1. Association Rule Algorithm

Association rules are rules based on different items. They are generally used to mine the deep information association of data in the field of big data. Today, the value of data mining is further highlighted. Focus on this field at home and abroad to promote the in-depth development of data mining.Items can be represented as properties in the database. The basic concepts of association rules are items and transactions. An itemset is a collection of multiple items.Itemset, as the name suggests, is a collection of multiple items. If the itemset isN=N1,N2,N3,…,NX, then n is called the X itemset. A transaction is a database column relative to an item. It is a database row.Support is a basic measure in association rules. If the total number of rule transactions isg and the total number of database transactions is h, the support of the two is the quotient of the two [15]. The frequency set is an itemset greater than the minimum support Smin, and the support can be expressed as(1)SN=GH.Another basic measure of association rules can be expressed as confidence. It represents the probability of B appearing in the overall database a in the ruleA⇒B [16], and its calculation rule is(2)CA⇒B=SA∩BSA.The definition of frequent itemsets is as follows. When the frequency of itemsets appearing in the database is greater thanSmin, that is, if there are itemsets N and SN≥Smin, then itemsets N is frequent itemsets.Candidate itemset is a candidate option for mining frequency set [17], which is generated by connection pruning process, and there is a very high frequency set. In addition, it also has many nonfrequency sets, but these data will affect the mining efficiency. Therefore, the candidate set should be selected for data mining.The association rule is an implicit formula likeA⇒B, expressed as(3)E⊆N,F⊆N,E∩F=Φ.This is our final goal, which is used to guide users to make decisions with the help of data association. The premise to achieve this goal is to generate association rules. According to the general support confidence standard, association rules are generated on the basis of frequency set, expressed as(4)CA⇒B≥Cmin.Breadth-first searches the entire itemset space, starting fromk = 0 and iteratively produces a set Ck + 1 of candidate itemsets of length k + 1. A candidate itemset is an itemset whose subsets are frequent itemsets. C1 is composed of all items in I0, and all itemsets of length k + 1 are generated at the kth level. Layer-by-layer recursion is the basis of Apriori algorithm [18], as shown in Figure 3. The process is as follows:(1)
It first scans the database to get the candidate 1-itemset setD1 and at the same time records the number of occurrences of the corresponding item. It filters the sets of items in D1 according to the user-specified Smin and obtains the frequent 1-itemset set K1.(2)
It uses the apriori_gen function to connect and prune members inKm−1 to generate candidate frequency set Km. It scans the database to calculate the support degree of the candidate itemset and compares it with Smin to obtain Km.(3)
It repeats the above steps until 2 is empty.Figure 3
Apriori algorithm mining process.In order to get the connection of transactions, the first step of Apriori algorithm is to use the connection pruning to turn the frequency set into candidate sets and rules. The process is as follows.(1) Connection Operation. It is self-connected from Km to generate Km+1, and the precondition for the two sets of Km to be connected is that the first m-1 items of the two are the same. Let Km be as follows:(5)Km=K1,K2,…,Km.It is assumed that there are two itemsetsKp,Kq in Km, as shown in the formula(6)Kp=Kp1,Kp2,…,Kpm1≤p≤n,Kq=Kq1,Kq2,…,Kqm1≤q≤n.If the above situation exists, the two itemsets can be connected.(7)Kp1=Kq1∧Kp2=Kq2∧…∧Kpm−1=Kqm−1∧Kpm=Kqm.The connection can get a candidate (m + 1)-itemset, and the specific itemset formula is shown in(8)Km=Kp1,Kp2,…,Kpm,Kqm,Km⊆Dm+1.(2) Trim Operation. We build candidate sets to exclude invalid nonfrequency sets, determine the attributes of frequency sets, filter data inconsistent with the attributes, and realize pruning operation. The attribute criteria are as follows:All nonempty subsets of the frequency set are frequency sets. IfNm is a frequent m-itemset, then the number of (m − 1) item subsets that include Dm−1 in Nm must be m. Any superset of the nonfrequency set must also be the nonfrequency set. If Dm can produce frequent (m + 1) itemsets, then the number of itemsets in Dm must be greater than m.


#### 2.2.2. Theoretical Basis of Rough Set

Rough set theory [19]: an algorithm that uses attribute reduction algorithms to process data expression systems to obtain decision rules. The object to be studied is expressed in the form of a set, which represents a nonempty finite set. It is represented by W, axx=1,2,…,m represents the element object in W, and for any subset, A⊆W is called a concept or category.In the universe of discourse,W/T represents the set of all equivalence classes of T, and aT represents the equivalence class of T containing element a∈W.Let B be a subset ofT, namely,(9)B⊆T,P≠Φ.Then the intersection of all equivalence relations, denoted by∩B, is an equivalence relation called an indistinguishable relation on B, denoted as indB, and there are(10)aindB=∩T∈BaT.W/indB means knowledge related to B, and W/T replaces W/indB.Upper approximation and lower approximation: knowledge systemZ=W,T, subset a⊆W in the universe of discourse, and an equivalence relation T∈indZ. The upper and lower approximate expressions of A for T are shown in (11) and (12):(11)T¯A=∪L∈WT|L∩A≠Φ,(12)T¯A=∪L∈WT|L⊆A,(13)bnTA=T¯A−T¯A,posTA=T¯A,negTA=W−T¯A.SetbnTA is called the T boundary domain of A, posTA is the T positive domain of A, and negTA is the T negative domain of A. W is a finite set of universe, set function X:2W⟶0,1 is a probability measure, and we know(14)XW=1,C∩D=Φ,XC∪D=XC+XD.Then the information source V can be expressed as(15)V=v1,v2,…,vix1,x2,…,xi.The probability measure P on the universe W,V,Y⊆W,PY>0; when Y occurs, the probability of V occurring can be expressed as(16)PV|Y=PV∩YPY.The Bayesian formula provides an effective means to use the collected information to revise the original judgment. Before sampling, the economic subject has a judgment (prior probability) for various assumptions. The distribution of the prior probability can usually be determined according to the economic subject's empirical judgment (when there is no information, it is generally assumed that each prior probability is the same); the more complex and accurate methods including maximum entropy technique or marginal distribution density and mutual information principle can be used to determine the prior probability distribution. The domain W is divided intoV1,V2,…,VmM subset. From the multiplication formula and the total probability formula, the Bayes formula can be derived:(17)PVX|Y=PVxPV|Vx∑i=1mPViPV|Vi.


### 2.3. Malicious Traffic Monitoring Technology

The network generates a large amount of data every day. The data is huge and messy. Is there any malicious data that disrupts the network environment? Therefore, it is particularly important to find a way to identify malicious data. With the development of computer network technology, the port-based application protocol identification technology and the data packet load-based protocol identification technology can no longer meet the requirements of current protocol identification. The detection and identification method based on session statistical behavior was born. In addition, the knowledge of machine learning is needed for statistics, so it can also be called a protocol identification and detection technology based on machine learning. Since there are not many tools for monitoring malicious code under Linux system, and each tool has different monitoring purposes, it cannot fully satisfy us to obtain more monitoring information from the kernel. The design of this idea is mainly to monitor the malicious process at the kernel layer and record the behavior of accessing files to provide more useful information, so that the malicious code can be analyzed in detail. Computational attribute reduction is a key part of inductive learning under the rough set framework. The attribute reduction algorithm based on difference matrix is one of the commonly used attribute reduction algorithms. Given an information system, all attributes of the information system can be obtained by using this reduction algorithm. However, the algorithm requires a large storage space and takes a long time to execute, especially for large databases.The current mainstream technology is a real-time monitoring and detection method based on network data packets, but the extraction and optimization of network data features and real-time detection efficiency are not particularly high.The application protocol identification method based on the statistical behavior of the transport layer packet session is generally divided into three stages: the extraction stage of statistical features, the creation stage of the statistical model, and the specific classification detection and identification stage. At present, model statistics mainly use machine learning algorithms. According to the nature of training data, machine learning is divided into three categories: supervised, unsupervised, and semisupervised. The classification of machine learning mainly includes learning strategies, learning methods, and data forms, learning goals, etc. Supervised algorithms include decision trees such as ID3 and C4.5, support vector machine algorithms, naive Bayes, and neural networks. Unsupervised machine learning is mainly some clustering algorithms, such as DBSCAN algorithm, EM algorithm, and K-means algorithm. There are many semisupervised learning algorithms, but the main representative ones are as follows: self-training algorithms, cotraining algorithms, and graph-based representations semisupervised learning methods, etc.


### 2.4. Distributed System and MapReduce

With the rapid development of computer network, in order to seek better computer performance, researchers have studied from two aspects of hardware and software. Among them, the hardware focuses on the computing speed of a single computer, and the software proposes to use multiple computers to process data to improve the computing speed, which is the origin of distributed system [18]. The most important part of the distributed system is MapReduce. MapReduce has received extensive attention since it was proposed. At present, the widely used Hadoop distributed system is based on MapReduce architecture.Hadoop is an open source software architecture, mainly centered on Hadoop distributed file system and MapReduce. Hadoop can provide users with a seamless distributed infrastructure and provide low-level details. The high fault tolerance and high scalability of HDFS enable users to deploy Hadoop on low-cost hardware to form a distributed system. MapReduce distributed programming model allows users to develop parallel applications without understanding the underlying details of the distributed system, so users can create a simple programming model. When it is applied to large-scale clusters, applications can be easily written and run. It makes full use of the computing and storage capacity of the cluster to process large-scale data information easily and efficiently. How to more effectively monitor the processes in the system (process monitoring: refers to analyzing the behavior of file operations to achieve the purpose of protecting system security), especially the research on behavioral security monitoring of operating systems, is a solution to domestic computer users, because ensuring the security of files is the focus of system security protection.The Hadoop distributed file system mainly implements the storage distributed by HDFS to implement the underlying Hadoop support. HDFS adopts a master/slave template structure, and an HDFS Cluster is mainly composed of a master node, NameNode, and many data nodes. The monitoring module runs in the kernel and can capture the operations of the processes that need to be monitored in the kernel on files in real time. Users can use the system to output the operation information of the processes that need to be monitored on important files to judge and analyze whether the submitted process is malicious. . The function interface provided by the system can be convenient for users to carry out secondary development and has strong expansibility. It can also dynamically load or unload monitoring modules according to specific needs to improve the execution efficiency of the system. The NameNode manages the namespace of the file system. It maintains the filesystem tree and all files and directories within the entire tree. This information is persisted on the local disk in two files: the namespace mirror file and the edit log file. The NameNode also records the data node information of each block in each file, but it does not permanently store the location information of the block, because this information is reconstructed by the data node when the system starts. Figure4 is a schematic diagram of the structure of HDFS.Figure 4
Schematic diagram of HDFS structure.MapReduce’s data processing requires that the data set to be processed can be divided into many small data sets that cannot be processed in parallel. The complete data flow of a Map and Reduce task is shown in Figure5. A dashed frame represents a data node, the dashed arrow in the dashed frame represents the data transmission process within the node, and the solid arrow represents the data transmission process between data nodes.Figure 5
MapReduce data flow diagram.From the perspective of the entire Hadoop system, the specific process of parallel computing includes distributed parallel computing, data distributed storage, data merging, reduce, task pipeline, and task granularity. The execution flow of the MapReduce program is shown in Figure6.Figure 6
MapReduce program execution flowchart.


## 2.1. Inheritance Methods of Mongolian Folk Songs

The geographical environment where the Mongols live is vast grassland. Over the years, the Mongols have not only created their own glorious history, but also created a beautiful grassland culture. Music and dance are an important part of grassland culture. Mongolian folk music, whether it is folk songs, rap, folk songs and dances, or musical instruments, has a distinctive ethnic style. The melody is beautiful, the breath is broad, the feeling is deep, and the breath of grassland is strong.The Mongolian beauty is mainly the product of a long-term nomadic life and the resulting practical activities to create beauty. It is the objective relationship between Mongolian long-term nomadic work and nature and its objective activities. It is not only the cause of beauty, but also the fundamental basis for the artistic practice of creating beauty. Therefore, the essence of Mongolian beauty and artistic beauty lies in the perfect unity of man and nature. This is the essential feature of the Mongolian unique aesthetic style and aesthetic thought. Like Mongolian long-tuned pastoral songs, its long melody and grand phrase style are one of the few development peaks in the field of human music melody thinking. Long tone is the art of nature, and it has the breath of freedom and the romantic charm of freedom, which embodies the harmonious coexistence between man and the grassland, and is closely related, an art of life. Just like the Mongolian heroic epic, emotions and imagination usually thrive in the vast universe, and the music is beautiful and magnificent. The ancient British aesthetic consciousness of the Mongolian nationality is the product of the objective relationship between the Mongolian nomadic life and the natural world. It is also a product of the social relationship between Mongolian nomadic life and the struggle for survival of the nation or tribe. Therefore, Mongolian music aesthetic consciousness is the most concentrated and typical manifestation of the essential characteristics of Mongolian aesthetic consciousness. It is also the most essential form of Mongolian aesthetic consciousness.The inheritance mechanism of Mongolian folk music is a kind of music inheritance system formed naturally by the Mongolian nationality. Although there is no standard support system, in the long-term historical development process, it can adapt to the needs of society and maintain a stable state of development. Due to the special nomadic lifestyle, people need singers to sing at weddings and funerals. It needs storytellers to use Sihu music to tell various historical stories after getting off work, and it also needs to use the low tide to vent their inner distress and sadness. Music is an indispensable content in Mongolian life. Due to a wide range of social needs, folk artists have been recognized by the society as a profession, and more and more members of society choose to become artists. This is the driving force behind the music inheritance mechanism of Mongolian folklore. Figure1 shows the three main music inheritance types of Mongolian folk songs [11].Figure 1
Inheritance of Mongolian folk songs.


### 2.1.1. Family Inheritance

Family inheritance is a kind of inheritance method passed down from generation to generation, and it is the most natural inheritance mechanism. Folk artists who grew up in the singing of their grandparents listened to the singing and performances of their families and villagers at home, at work, and at weddings and funerals. They learned the skills of their grandparents without knowing it and grew up in the footsteps of their grandparents, so these skills are often better than their grandparents. Inheritance includes passing and inheriting, that is, the relationship between teaching and learning, mission and teaching. The teacher-student relationship under the family inheritance model is often unclear, and there is no clear contract, and the learner’s childhood is just an unconscious legacy. Over time, the ancestors hope that future generations can inherit their skills, and future generations will naturally take on this important task. In the family inheritance model, there is often more than one teacher. In ordinary family life, many elders can influence learners. The biggest feature of the family inheritance mechanism is that the learning method is very natural, and there is music and music as a way of life. Musicians formed by the mechanism of family inheritance usually show extraordinary musical talents. They continue to climb along the mark of their ancestors, elevating this family skill to a glorious pinnacle.


### 2.1.2. Inheritance of Master and Apprentice

In the inheritance of Mongolian music, the relationship between teacher and student is first of all the relationship between teaching and learning. Secondly, if the teaching is successful, an oral contract relationship is formed. The master has the responsibility to impart skills, and the apprentice has the obligation to take care of the master’s life. After apprenticeship, the young disciple went to the master to study, and while helping the master with housework, he consulted the master at the same time. Or he may receive the master in his own home for a period of time, take care of his life, perform his duties, and learn art from the master. In the relationship between teacher and apprentice, the division of labor between teaching and reception and the distinction between the roles of teacher and apprentice are very obvious. According to the requirements of roles and division of labor, a certain relationship mode is formed between the two. This teaching method is a bit like the professional small classes of our professional music schools today, but the contact between teachers and students in modern music schools is often limited to the classroom. In the Mongolian teacher-student inheritance mechanism, the coexistence of teachers and students is its advantage. Teachers and students live together for a period of time, which is very similar to family inheritance. This allows teaching to be carried out at any time without time and space constraints. Education is not only about teaching skills, teachers’ attitudes towards music and life continue to influence students, and teaching activities have a rich extension. It can be said that the inheritance of teachers and students in modern education has the dual characteristics of family education and school education. In addition, the mentor-to-apprentice inheritance is often open. Learners can choose whom to study with, often more than one teachers so that learners have the opportunity to gain insight into a hundred masters, to be inclusive and to develop their skills.


### 2.1.3. Inheritance of Social Customs

The inheritors of social folklore are the products of the environment. The development and distribution of human activities are strictly restricted by the environment. For thousands of years, the Mongols have been engaged in animal husbandry production, living on aquatic plants, and living a relatively closed life for a long period of time. This allows the Mongolian unique folk activities to be well protected. However, human beings are emotional animals and need to exchange feelings. Therefore, people have great enthusiasm for the folk activities organized on a regular basis. The folk music heritage of Mongolian civil society is an activity based on certain folk customs and entertainment activities. For example: nadam, weddings, festivals, sacrificial obo, reception sheep blankets, and other occasions must carry out certain sacrificial activities. According to traditional customs, Mongolians must sing different folk songs in folk activities on different occasions. Entertainment is the main way for the masses to participate, and artists compete with each other, communicate, learn, expand their artistic vision, and accumulate singing experience. Folk activities have the characteristics of sociality, collectiveness, periodicity, and stability and provide a social platform for the inheritance of folk music. The social needs of folk activities mean that folk music always maintains its own vitality. But the inheritance of art by civil society is usually a form of word of mouth. The form of word of mouth means that art and knowledge are constantly changing and cannot be passed on in a solidified and normalized form. However, the inheritance process of social folklore, due to its social, collective, openness, and other factors, naturally produced many aspects such as integration, innovation, and transformation.These three delivery mechanisms combine with each other and promote each other. Family inheritance often plays an important role in the artist’s youth, laying a solid foundation for him and providing him with the possibility of further development. When they grow up to a certain age, they will look out, they will feel the need to expand their games and singing, and they will naturally look for better teachers to learn art. Nongovernmental activities and other exchange platforms allow artists to understand the strengths of a family. This often plays a decisive role in the promotion of folk artists and the formation of talents and artistic styles. Mongolian folk music combines and promotes each other through family inheritance, master and apprentice inheritance, and social custom inheritance, forming a virtuous cycle of inheritance mechanism. It plays an irreplaceable role in the inheritance of folk music and has vigorous vitality [12].


## 2.1.1. Family Inheritance

Family inheritance is a kind of inheritance method passed down from generation to generation, and it is the most natural inheritance mechanism. Folk artists who grew up in the singing of their grandparents listened to the singing and performances of their families and villagers at home, at work, and at weddings and funerals. They learned the skills of their grandparents without knowing it and grew up in the footsteps of their grandparents, so these skills are often better than their grandparents. Inheritance includes passing and inheriting, that is, the relationship between teaching and learning, mission and teaching. The teacher-student relationship under the family inheritance model is often unclear, and there is no clear contract, and the learner’s childhood is just an unconscious legacy. Over time, the ancestors hope that future generations can inherit their skills, and future generations will naturally take on this important task. In the family inheritance model, there is often more than one teacher. In ordinary family life, many elders can influence learners. The biggest feature of the family inheritance mechanism is that the learning method is very natural, and there is music and music as a way of life. Musicians formed by the mechanism of family inheritance usually show extraordinary musical talents. They continue to climb along the mark of their ancestors, elevating this family skill to a glorious pinnacle.


## 2.1.2. Inheritance of Master and Apprentice

In the inheritance of Mongolian music, the relationship between teacher and student is first of all the relationship between teaching and learning. Secondly, if the teaching is successful, an oral contract relationship is formed. The master has the responsibility to impart skills, and the apprentice has the obligation to take care of the master’s life. After apprenticeship, the young disciple went to the master to study, and while helping the master with housework, he consulted the master at the same time. Or he may receive the master in his own home for a period of time, take care of his life, perform his duties, and learn art from the master. In the relationship between teacher and apprentice, the division of labor between teaching and reception and the distinction between the roles of teacher and apprentice are very obvious. According to the requirements of roles and division of labor, a certain relationship mode is formed between the two. This teaching method is a bit like the professional small classes of our professional music schools today, but the contact between teachers and students in modern music schools is often limited to the classroom. In the Mongolian teacher-student inheritance mechanism, the coexistence of teachers and students is its advantage. Teachers and students live together for a period of time, which is very similar to family inheritance. This allows teaching to be carried out at any time without time and space constraints. Education is not only about teaching skills, teachers’ attitudes towards music and life continue to influence students, and teaching activities have a rich extension. It can be said that the inheritance of teachers and students in modern education has the dual characteristics of family education and school education. In addition, the mentor-to-apprentice inheritance is often open. Learners can choose whom to study with, often more than one teachers so that learners have the opportunity to gain insight into a hundred masters, to be inclusive and to develop their skills.


## 2.1.3. Inheritance of Social Customs

The inheritors of social folklore are the products of the environment. The development and distribution of human activities are strictly restricted by the environment. For thousands of years, the Mongols have been engaged in animal husbandry production, living on aquatic plants, and living a relatively closed life for a long period of time. This allows the Mongolian unique folk activities to be well protected. However, human beings are emotional animals and need to exchange feelings. Therefore, people have great enthusiasm for the folk activities organized on a regular basis. The folk music heritage of Mongolian civil society is an activity based on certain folk customs and entertainment activities. For example: nadam, weddings, festivals, sacrificial obo, reception sheep blankets, and other occasions must carry out certain sacrificial activities. According to traditional customs, Mongolians must sing different folk songs in folk activities on different occasions. Entertainment is the main way for the masses to participate, and artists compete with each other, communicate, learn, expand their artistic vision, and accumulate singing experience. Folk activities have the characteristics of sociality, collectiveness, periodicity, and stability and provide a social platform for the inheritance of folk music. The social needs of folk activities mean that folk music always maintains its own vitality. But the inheritance of art by civil society is usually a form of word of mouth. The form of word of mouth means that art and knowledge are constantly changing and cannot be passed on in a solidified and normalized form. However, the inheritance process of social folklore, due to its social, collective, openness, and other factors, naturally produced many aspects such as integration, innovation, and transformation.These three delivery mechanisms combine with each other and promote each other. Family inheritance often plays an important role in the artist’s youth, laying a solid foundation for him and providing him with the possibility of further development. When they grow up to a certain age, they will look out, they will feel the need to expand their games and singing, and they will naturally look for better teachers to learn art. Nongovernmental activities and other exchange platforms allow artists to understand the strengths of a family. This often plays a decisive role in the promotion of folk artists and the formation of talents and artistic styles. Mongolian folk music combines and promotes each other through family inheritance, master and apprentice inheritance, and social custom inheritance, forming a virtuous cycle of inheritance mechanism. It plays an irreplaceable role in the inheritance of folk music and has vigorous vitality [12].


## 2.2. Big Data

As a recent hot word, big data mainly describes large-scale, diverse, and rich data sets [13]. It is a product of the development of computer networks to a certain extent. Compared with data in the traditional sense, big data has characteristics that traditional data does not have, as shown in Table 1.Table 1
Characteristics of big data.
FeaturesMeaningRich varietyThere are many types, states, and formats of big dataGreat valueBig data has multidimensional characteristics such as time and space and contains rich valueFast processing speedBig data update time is short; computer processing time is fastThe data is trueReflect the universal law of time through big data, and the data is trueData securityNot easily tampered withData visualizationBig data needs software visualizationBig amount of dataMultiple data sources, long data storage timeThe data volume of big data continues to increase rapidly and requires high-speed data input and output requirements. And the data sources and types are diverse, but the value of the data is huge. Data mining is mainly the process of interpreting hidden, unknown, and potentially valuable information from a large amount of data in the database. Data mining includes 5 steps, which are data extraction, cleaning, transformation, mining, interpretation, and evaluation [14]. Antivirus software runs malicious code programs and exposes the program behavior of malicious code and then detects them to achieve the purpose of antivirus. If the virus really runs in the user’s computer, sometimes it will inevitably cause damage to the user's computer, which will go against the original intention of antivirus. The detailed process is shown in Figure 2.Figure 2
Data mining flowchart.


### 2.2.1. Association Rule Algorithm

Association rules are rules based on different items. They are generally used to mine the deep information association of data in the field of big data. Today, the value of data mining is further highlighted. Focus on this field at home and abroad to promote the in-depth development of data mining.Items can be represented as properties in the database. The basic concepts of association rules are items and transactions. An itemset is a collection of multiple items.Itemset, as the name suggests, is a collection of multiple items. If the itemset isN=N1,N2,N3,…,NX, then n is called the X itemset. A transaction is a database column relative to an item. It is a database row.Support is a basic measure in association rules. If the total number of rule transactions isg and the total number of database transactions is h, the support of the two is the quotient of the two [15]. The frequency set is an itemset greater than the minimum support Smin, and the support can be expressed as(1)SN=GH.Another basic measure of association rules can be expressed as confidence. It represents the probability of B appearing in the overall database a in the ruleA⇒B [16], and its calculation rule is(2)CA⇒B=SA∩BSA.The definition of frequent itemsets is as follows. When the frequency of itemsets appearing in the database is greater thanSmin, that is, if there are itemsets N and SN≥Smin, then itemsets N is frequent itemsets.Candidate itemset is a candidate option for mining frequency set [17], which is generated by connection pruning process, and there is a very high frequency set. In addition, it also has many nonfrequency sets, but these data will affect the mining efficiency. Therefore, the candidate set should be selected for data mining.The association rule is an implicit formula likeA⇒B, expressed as(3)E⊆N,F⊆N,E∩F=Φ.This is our final goal, which is used to guide users to make decisions with the help of data association. The premise to achieve this goal is to generate association rules. According to the general support confidence standard, association rules are generated on the basis of frequency set, expressed as(4)CA⇒B≥Cmin.Breadth-first searches the entire itemset space, starting fromk = 0 and iteratively produces a set Ck + 1 of candidate itemsets of length k + 1. A candidate itemset is an itemset whose subsets are frequent itemsets. C1 is composed of all items in I0, and all itemsets of length k + 1 are generated at the kth level. Layer-by-layer recursion is the basis of Apriori algorithm [18], as shown in Figure 3. The process is as follows:(1)
It first scans the database to get the candidate 1-itemset setD1 and at the same time records the number of occurrences of the corresponding item. It filters the sets of items in D1 according to the user-specified Smin and obtains the frequent 1-itemset set K1.(2)
It uses the apriori_gen function to connect and prune members inKm−1 to generate candidate frequency set Km. It scans the database to calculate the support degree of the candidate itemset and compares it with Smin to obtain Km.(3)
It repeats the above steps until 2 is empty.Figure 3
Apriori algorithm mining process.In order to get the connection of transactions, the first step of Apriori algorithm is to use the connection pruning to turn the frequency set into candidate sets and rules. The process is as follows.(1) Connection Operation. It is self-connected from Km to generate Km+1, and the precondition for the two sets of Km to be connected is that the first m-1 items of the two are the same. Let Km be as follows:(5)Km=K1,K2,…,Km.It is assumed that there are two itemsetsKp,Kq in Km, as shown in the formula(6)Kp=Kp1,Kp2,…,Kpm1≤p≤n,Kq=Kq1,Kq2,…,Kqm1≤q≤n.If the above situation exists, the two itemsets can be connected.(7)Kp1=Kq1∧Kp2=Kq2∧…∧Kpm−1=Kqm−1∧Kpm=Kqm.The connection can get a candidate (m + 1)-itemset, and the specific itemset formula is shown in(8)Km=Kp1,Kp2,…,Kpm,Kqm,Km⊆Dm+1.(2) Trim Operation. We build candidate sets to exclude invalid nonfrequency sets, determine the attributes of frequency sets, filter data inconsistent with the attributes, and realize pruning operation. The attribute criteria are as follows:All nonempty subsets of the frequency set are frequency sets. IfNm is a frequent m-itemset, then the number of (m − 1) item subsets that include Dm−1 in Nm must be m. Any superset of the nonfrequency set must also be the nonfrequency set. If Dm can produce frequent (m + 1) itemsets, then the number of itemsets in Dm must be greater than m.


### 2.2.2. Theoretical Basis of Rough Set

Rough set theory [19]: an algorithm that uses attribute reduction algorithms to process data expression systems to obtain decision rules. The object to be studied is expressed in the form of a set, which represents a nonempty finite set. It is represented by W, axx=1,2,…,m represents the element object in W, and for any subset, A⊆W is called a concept or category.In the universe of discourse,W/T represents the set of all equivalence classes of T, and aT represents the equivalence class of T containing element a∈W.Let B be a subset ofT, namely,(9)B⊆T,P≠Φ.Then the intersection of all equivalence relations, denoted by∩B, is an equivalence relation called an indistinguishable relation on B, denoted as indB, and there are(10)aindB=∩T∈BaT.W/indB means knowledge related to B, and W/T replaces W/indB.Upper approximation and lower approximation: knowledge systemZ=W,T, subset a⊆W in the universe of discourse, and an equivalence relation T∈indZ. The upper and lower approximate expressions of A for T are shown in (11) and (12):(11)T¯A=∪L∈WT|L∩A≠Φ,(12)T¯A=∪L∈WT|L⊆A,(13)bnTA=T¯A−T¯A,posTA=T¯A,negTA=W−T¯A.SetbnTA is called the T boundary domain of A, posTA is the T positive domain of A, and negTA is the T negative domain of A. W is a finite set of universe, set function X:2W⟶0,1 is a probability measure, and we know(14)XW=1,C∩D=Φ,XC∪D=XC+XD.Then the information source V can be expressed as(15)V=v1,v2,…,vix1,x2,…,xi.The probability measure P on the universe W,V,Y⊆W,PY>0; when Y occurs, the probability of V occurring can be expressed as(16)PV|Y=PV∩YPY.The Bayesian formula provides an effective means to use the collected information to revise the original judgment. Before sampling, the economic subject has a judgment (prior probability) for various assumptions. The distribution of the prior probability can usually be determined according to the economic subject's empirical judgment (when there is no information, it is generally assumed that each prior probability is the same); the more complex and accurate methods including maximum entropy technique or marginal distribution density and mutual information principle can be used to determine the prior probability distribution. The domain W is divided intoV1,V2,…,VmM subset. From the multiplication formula and the total probability formula, the Bayes formula can be derived:(17)PVX|Y=PVxPV|Vx∑i=1mPViPV|Vi.


## 2.2.1. Association Rule Algorithm

Association rules are rules based on different items. They are generally used to mine the deep information association of data in the field of big data. Today, the value of data mining is further highlighted. Focus on this field at home and abroad to promote the in-depth development of data mining.Items can be represented as properties in the database. The basic concepts of association rules are items and transactions. An itemset is a collection of multiple items.Itemset, as the name suggests, is a collection of multiple items. If the itemset isN=N1,N2,N3,…,NX, then n is called the X itemset. A transaction is a database column relative to an item. It is a database row.Support is a basic measure in association rules. If the total number of rule transactions isg and the total number of database transactions is h, the support of the two is the quotient of the two [15]. The frequency set is an itemset greater than the minimum support Smin, and the support can be expressed as(1)SN=GH.Another basic measure of association rules can be expressed as confidence. It represents the probability of B appearing in the overall database a in the ruleA⇒B [16], and its calculation rule is(2)CA⇒B=SA∩BSA.The definition of frequent itemsets is as follows. When the frequency of itemsets appearing in the database is greater thanSmin, that is, if there are itemsets N and SN≥Smin, then itemsets N is frequent itemsets.Candidate itemset is a candidate option for mining frequency set [17], which is generated by connection pruning process, and there is a very high frequency set. In addition, it also has many nonfrequency sets, but these data will affect the mining efficiency. Therefore, the candidate set should be selected for data mining.The association rule is an implicit formula likeA⇒B, expressed as(3)E⊆N,F⊆N,E∩F=Φ.This is our final goal, which is used to guide users to make decisions with the help of data association. The premise to achieve this goal is to generate association rules. According to the general support confidence standard, association rules are generated on the basis of frequency set, expressed as(4)CA⇒B≥Cmin.Breadth-first searches the entire itemset space, starting fromk = 0 and iteratively produces a set Ck + 1 of candidate itemsets of length k + 1. A candidate itemset is an itemset whose subsets are frequent itemsets. C1 is composed of all items in I0, and all itemsets of length k + 1 are generated at the kth level. Layer-by-layer recursion is the basis of Apriori algorithm [18], as shown in Figure 3. The process is as follows:(1)
It first scans the database to get the candidate 1-itemset setD1 and at the same time records the number of occurrences of the corresponding item. It filters the sets of items in D1 according to the user-specified Smin and obtains the frequent 1-itemset set K1.(2)
It uses the apriori_gen function to connect and prune members inKm−1 to generate candidate frequency set Km. It scans the database to calculate the support degree of the candidate itemset and compares it with Smin to obtain Km.(3)
It repeats the above steps until 2 is empty.Figure 3
Apriori algorithm mining process.In order to get the connection of transactions, the first step of Apriori algorithm is to use the connection pruning to turn the frequency set into candidate sets and rules. The process is as follows.(1) Connection Operation. It is self-connected from Km to generate Km+1, and the precondition for the two sets of Km to be connected is that the first m-1 items of the two are the same. Let Km be as follows:(5)Km=K1,K2,…,Km.It is assumed that there are two itemsetsKp,Kq in Km, as shown in the formula(6)Kp=Kp1,Kp2,…,Kpm1≤p≤n,Kq=Kq1,Kq2,…,Kqm1≤q≤n.If the above situation exists, the two itemsets can be connected.(7)Kp1=Kq1∧Kp2=Kq2∧…∧Kpm−1=Kqm−1∧Kpm=Kqm.The connection can get a candidate (m + 1)-itemset, and the specific itemset formula is shown in(8)Km=Kp1,Kp2,…,Kpm,Kqm,Km⊆Dm+1.(2) Trim Operation. We build candidate sets to exclude invalid nonfrequency sets, determine the attributes of frequency sets, filter data inconsistent with the attributes, and realize pruning operation. The attribute criteria are as follows:All nonempty subsets of the frequency set are frequency sets. IfNm is a frequent m-itemset, then the number of (m − 1) item subsets that include Dm−1 in Nm must be m. Any superset of the nonfrequency set must also be the nonfrequency set. If Dm can produce frequent (m + 1) itemsets, then the number of itemsets in Dm must be greater than m.


## 2.2.2. Theoretical Basis of Rough Set

Rough set theory [19]: an algorithm that uses attribute reduction algorithms to process data expression systems to obtain decision rules. The object to be studied is expressed in the form of a set, which represents a nonempty finite set. It is represented by W, axx=1,2,…,m represents the element object in W, and for any subset, A⊆W is called a concept or category.In the universe of discourse,W/T represents the set of all equivalence classes of T, and aT represents the equivalence class of T containing element a∈W.Let B be a subset ofT, namely,(9)B⊆T,P≠Φ.Then the intersection of all equivalence relations, denoted by∩B, is an equivalence relation called an indistinguishable relation on B, denoted as indB, and there are(10)aindB=∩T∈BaT.W/indB means knowledge related to B, and W/T replaces W/indB.Upper approximation and lower approximation: knowledge systemZ=W,T, subset a⊆W in the universe of discourse, and an equivalence relation T∈indZ. The upper and lower approximate expressions of A for T are shown in (11) and (12):(11)T¯A=∪L∈WT|L∩A≠Φ,(12)T¯A=∪L∈WT|L⊆A,(13)bnTA=T¯A−T¯A,posTA=T¯A,negTA=W−T¯A.SetbnTA is called the T boundary domain of A, posTA is the T positive domain of A, and negTA is the T negative domain of A. W is a finite set of universe, set function X:2W⟶0,1 is a probability measure, and we know(14)XW=1,C∩D=Φ,XC∪D=XC+XD.Then the information source V can be expressed as(15)V=v1,v2,…,vix1,x2,…,xi.The probability measure P on the universe W,V,Y⊆W,PY>0; when Y occurs, the probability of V occurring can be expressed as(16)PV|Y=PV∩YPY.The Bayesian formula provides an effective means to use the collected information to revise the original judgment. Before sampling, the economic subject has a judgment (prior probability) for various assumptions. The distribution of the prior probability can usually be determined according to the economic subject's empirical judgment (when there is no information, it is generally assumed that each prior probability is the same); the more complex and accurate methods including maximum entropy technique or marginal distribution density and mutual information principle can be used to determine the prior probability distribution. The domain W is divided intoV1,V2,…,VmM subset. From the multiplication formula and the total probability formula, the Bayes formula can be derived:(17)PVX|Y=PVxPV|Vx∑i=1mPViPV|Vi.


## 2.3. Malicious Traffic Monitoring Technology

The network generates a large amount of data every day. The data is huge and messy. Is there any malicious data that disrupts the network environment? Therefore, it is particularly important to find a way to identify malicious data. With the development of computer network technology, the port-based application protocol identification technology and the data packet load-based protocol identification technology can no longer meet the requirements of current protocol identification. The detection and identification method based on session statistical behavior was born. In addition, the knowledge of machine learning is needed for statistics, so it can also be called a protocol identification and detection technology based on machine learning. Since there are not many tools for monitoring malicious code under Linux system, and each tool has different monitoring purposes, it cannot fully satisfy us to obtain more monitoring information from the kernel. The design of this idea is mainly to monitor the malicious process at the kernel layer and record the behavior of accessing files to provide more useful information, so that the malicious code can be analyzed in detail. Computational attribute reduction is a key part of inductive learning under the rough set framework. The attribute reduction algorithm based on difference matrix is one of the commonly used attribute reduction algorithms. Given an information system, all attributes of the information system can be obtained by using this reduction algorithm. However, the algorithm requires a large storage space and takes a long time to execute, especially for large databases.The current mainstream technology is a real-time monitoring and detection method based on network data packets, but the extraction and optimization of network data features and real-time detection efficiency are not particularly high.The application protocol identification method based on the statistical behavior of the transport layer packet session is generally divided into three stages: the extraction stage of statistical features, the creation stage of the statistical model, and the specific classification detection and identification stage. At present, model statistics mainly use machine learning algorithms. According to the nature of training data, machine learning is divided into three categories: supervised, unsupervised, and semisupervised. The classification of machine learning mainly includes learning strategies, learning methods, and data forms, learning goals, etc. Supervised algorithms include decision trees such as ID3 and C4.5, support vector machine algorithms, naive Bayes, and neural networks. Unsupervised machine learning is mainly some clustering algorithms, such as DBSCAN algorithm, EM algorithm, and K-means algorithm. There are many semisupervised learning algorithms, but the main representative ones are as follows: self-training algorithms, cotraining algorithms, and graph-based representations semisupervised learning methods, etc.


## 2.4. Distributed System and MapReduce

With the rapid development of computer network, in order to seek better computer performance, researchers have studied from two aspects of hardware and software. Among them, the hardware focuses on the computing speed of a single computer, and the software proposes to use multiple computers to process data to improve the computing speed, which is the origin of distributed system [18]. The most important part of the distributed system is MapReduce. MapReduce has received extensive attention since it was proposed. At present, the widely used Hadoop distributed system is based on MapReduce architecture.Hadoop is an open source software architecture, mainly centered on Hadoop distributed file system and MapReduce. Hadoop can provide users with a seamless distributed infrastructure and provide low-level details. The high fault tolerance and high scalability of HDFS enable users to deploy Hadoop on low-cost hardware to form a distributed system. MapReduce distributed programming model allows users to develop parallel applications without understanding the underlying details of the distributed system, so users can create a simple programming model. When it is applied to large-scale clusters, applications can be easily written and run. It makes full use of the computing and storage capacity of the cluster to process large-scale data information easily and efficiently. How to more effectively monitor the processes in the system (process monitoring: refers to analyzing the behavior of file operations to achieve the purpose of protecting system security), especially the research on behavioral security monitoring of operating systems, is a solution to domestic computer users, because ensuring the security of files is the focus of system security protection.The Hadoop distributed file system mainly implements the storage distributed by HDFS to implement the underlying Hadoop support. HDFS adopts a master/slave template structure, and an HDFS Cluster is mainly composed of a master node, NameNode, and many data nodes. The monitoring module runs in the kernel and can capture the operations of the processes that need to be monitored in the kernel on files in real time. Users can use the system to output the operation information of the processes that need to be monitored on important files to judge and analyze whether the submitted process is malicious. . The function interface provided by the system can be convenient for users to carry out secondary development and has strong expansibility. It can also dynamically load or unload monitoring modules according to specific needs to improve the execution efficiency of the system. The NameNode manages the namespace of the file system. It maintains the filesystem tree and all files and directories within the entire tree. This information is persisted on the local disk in two files: the namespace mirror file and the edit log file. The NameNode also records the data node information of each block in each file, but it does not permanently store the location information of the block, because this information is reconstructed by the data node when the system starts. Figure4 is a schematic diagram of the structure of HDFS.Figure 4
Schematic diagram of HDFS structure.MapReduce’s data processing requires that the data set to be processed can be divided into many small data sets that cannot be processed in parallel. The complete data flow of a Map and Reduce task is shown in Figure5. A dashed frame represents a data node, the dashed arrow in the dashed frame represents the data transmission process within the node, and the solid arrow represents the data transmission process between data nodes.Figure 5
MapReduce data flow diagram.From the perspective of the entire Hadoop system, the specific process of parallel computing includes distributed parallel computing, data distributed storage, data merging, reduce, task pipeline, and task granularity. The execution flow of the MapReduce program is shown in Figure6.Figure 6
MapReduce program execution flowchart.


## 3. Investigation and Analysis of Mongolian Folk Song Music Cultural Inheritance Innovation Experiment

### 3.1. Experimental Design

In order to find the obstacles that affect the cultural inheritance of Mongolian folk songs, we have carried out extensive questionnaire surveys in Mongolian and society to understand the views and suggestions of the masses on the cultural inheritance of Mongolian folk songs. At the same time, we conducted one-on-one interviews with Mongolian folk song music cultural inheritance institutions and Mongolian music leaders to understand their opinions and related suggestions.


### 3.2. Survey Content

We distributed 1,000 questionnaires to the whole society and successfully collected 946 and removed 11 invalid data. The completion rate of the questionnaire survey was 93.5%, and the relevant data were collected and analyzed. The content of the questionnaire is shown in Table2.Table 2
Questionnaire on the inheritance of Mongolian folk songs by the society.
Your ageA. below 18 yearsB. 18–35 years oldC. 35–60 years oldD. over 60 yearsYour genderA. femaleB. maleDo you usually listen to songsDo you usually like to singYour occupationHave you heard Mongolian folk songs?A: YesB: NoWhat is your opinion on the inheritance of Mongolian folk songs?Do you have any suggestions for the inheritance of Mongolian folk songs?We invited 2 heads of Mongolian folk song music cultural inheritance institutions and 8 Mongolian music leaders to organize face-to-face interviews. We surveyed their views on the current development of Mongolian folk songs, existing problems, and future improvements and collected relevant results.


### 3.3. Data Analysis

It can be seen from Table3 that the reliability coefficient value is greater than 0.8, indicating that the reliability of the research data is of high quality. The value of “the alpha coefficient of the item that has been deleted” did not increase significantly, indicating that all items should be retained, further indicating that the data has a high level of reliability. In general, the reliability of the data is of high quality and can be used for further analysis.Table 3
Cronbach reliability analysis.
NameTotal correlationThe alpha coefficient of the item deletedCronbach’s alpha coefficientDo you usually like to sing0.6870.7830.831Have you heard Mongolian folk songs?0.6410.798What is your opinion on the inheritance of Mongolian folk songs?0.6580.789Do you have any suggestions for the inheritance of Mongolian folk songs?0.6790.774It can be seen from Table4 that the KMO value is between 0.7 and 0.8, indicating that the questionnaire data is suitable for factor analysis. Significance is less than 0.05, indicating that the validity is good, and the questionnaire is valid.Table 4
Validity test results.
KMO sampling suitability quantity0.753Bartlett sphericity testApproximate chi-square1086.600Degree of freedom68Significance0.000It can be seen from Figure7 that the users of the questionnaire are concentrated in the 18–60 age group, which is in line with the current actual situation. Most people in this age group are native Internet users, who have been online for a long time, and most of them have been employed. Among the surveyed population, most of them are employees, but there are also some educators, legal experts, managers, businessmen, and scientific and technological workers, who have enriched their horizons for this survey.Figure 7
Introduction to the basic situation of the questionnaire.It can be seen from Figure8 that the majority of users surveyed like to listen to music, and nearly half of them like to sing, indicating that most people have a certain level of musical literacy. But when asked about Mongolian music, most people said they did not understand it, and many said they had heard of it. This shows that the inheritance of traditional Chinese culture has achieved certain results. However, only 2% of people really like Mongolian music, which shows that Mongolian music is difficult to inherit.Figure 8
The investigator’s understanding of Mongolian folk songs.It can be seen from Figure9 that, for many people, the reason for the difficulty in inheriting Mongolian folk music is largely because there are too many types of music today. In addition, the Mongolian folk music has a small audience and there is no good publicity, which makes it difficult to inherit the Mongolian folk music. For experts, the difficulty in inheriting Mongolian folk music is certainly due to the abovementioned reasons, but more of it lies in the low degree of public recognition of Mongolian culture. Mongolian folk songs do not match well with modern music, and popular music is more accepted by the public. It is naturally difficult for people to recognize Mongolian folk music, and the development of Mongolian folk music is unsustainable.Figure 9
Investigators and experts discuss the reasons why it is difficult to pass on Mongolian folk music.It can be seen from Figure10 that there is still a lot of work to be done in the innovation and inheritance of Mongolian culture. On the one hand, it is necessary to improve the shortcomings. It is necessary to innovate in the form and content of Mongolian folk songs, increase original content creation, and create high-quality songs. On the other hand, we must also improve the lack of optimization. The inheritance of traditional folk songs is no longer suitable for the present, and scientific teaching can train a large number of Mongolian folk song creators. At the same time, Mongolian customs must be innovatively integrated with modern life, and there must be breakthroughs in expression methods, so that the Mongolian folk song culture can be better inherited.Figure 10
Inheritance and innovation direction of Mongolian folk song culture.


## 3.1. Experimental Design

In order to find the obstacles that affect the cultural inheritance of Mongolian folk songs, we have carried out extensive questionnaire surveys in Mongolian and society to understand the views and suggestions of the masses on the cultural inheritance of Mongolian folk songs. At the same time, we conducted one-on-one interviews with Mongolian folk song music cultural inheritance institutions and Mongolian music leaders to understand their opinions and related suggestions.


## 3.2. Survey Content

We distributed 1,000 questionnaires to the whole society and successfully collected 946 and removed 11 invalid data. The completion rate of the questionnaire survey was 93.5%, and the relevant data were collected and analyzed. The content of the questionnaire is shown in Table2.Table 2
Questionnaire on the inheritance of Mongolian folk songs by the society.
Your ageA. below 18 yearsB. 18–35 years oldC. 35–60 years oldD. over 60 yearsYour genderA. femaleB. maleDo you usually listen to songsDo you usually like to singYour occupationHave you heard Mongolian folk songs?A: YesB: NoWhat is your opinion on the inheritance of Mongolian folk songs?Do you have any suggestions for the inheritance of Mongolian folk songs?We invited 2 heads of Mongolian folk song music cultural inheritance institutions and 8 Mongolian music leaders to organize face-to-face interviews. We surveyed their views on the current development of Mongolian folk songs, existing problems, and future improvements and collected relevant results.


## 3.3. Data Analysis

It can be seen from Table3 that the reliability coefficient value is greater than 0.8, indicating that the reliability of the research data is of high quality. The value of “the alpha coefficient of the item that has been deleted” did not increase significantly, indicating that all items should be retained, further indicating that the data has a high level of reliability. In general, the reliability of the data is of high quality and can be used for further analysis.Table 3
Cronbach reliability analysis.
NameTotal correlationThe alpha coefficient of the item deletedCronbach’s alpha coefficientDo you usually like to sing0.6870.7830.831Have you heard Mongolian folk songs?0.6410.798What is your opinion on the inheritance of Mongolian folk songs?0.6580.789Do you have any suggestions for the inheritance of Mongolian folk songs?0.6790.774It can be seen from Table4 that the KMO value is between 0.7 and 0.8, indicating that the questionnaire data is suitable for factor analysis. Significance is less than 0.05, indicating that the validity is good, and the questionnaire is valid.Table 4
Validity test results.
KMO sampling suitability quantity0.753Bartlett sphericity testApproximate chi-square1086.600Degree of freedom68Significance0.000It can be seen from Figure7 that the users of the questionnaire are concentrated in the 18–60 age group, which is in line with the current actual situation. Most people in this age group are native Internet users, who have been online for a long time, and most of them have been employed. Among the surveyed population, most of them are employees, but there are also some educators, legal experts, managers, businessmen, and scientific and technological workers, who have enriched their horizons for this survey.Figure 7
Introduction to the basic situation of the questionnaire.It can be seen from Figure8 that the majority of users surveyed like to listen to music, and nearly half of them like to sing, indicating that most people have a certain level of musical literacy. But when asked about Mongolian music, most people said they did not understand it, and many said they had heard of it. This shows that the inheritance of traditional Chinese culture has achieved certain results. However, only 2% of people really like Mongolian music, which shows that Mongolian music is difficult to inherit.Figure 8
The investigator’s understanding of Mongolian folk songs.It can be seen from Figure9 that, for many people, the reason for the difficulty in inheriting Mongolian folk music is largely because there are too many types of music today. In addition, the Mongolian folk music has a small audience and there is no good publicity, which makes it difficult to inherit the Mongolian folk music. For experts, the difficulty in inheriting Mongolian folk music is certainly due to the abovementioned reasons, but more of it lies in the low degree of public recognition of Mongolian culture. Mongolian folk songs do not match well with modern music, and popular music is more accepted by the public. It is naturally difficult for people to recognize Mongolian folk music, and the development of Mongolian folk music is unsustainable.Figure 9
Investigators and experts discuss the reasons why it is difficult to pass on Mongolian folk music.It can be seen from Figure10 that there is still a lot of work to be done in the innovation and inheritance of Mongolian culture. On the one hand, it is necessary to improve the shortcomings. It is necessary to innovate in the form and content of Mongolian folk songs, increase original content creation, and create high-quality songs. On the other hand, we must also improve the lack of optimization. The inheritance of traditional folk songs is no longer suitable for the present, and scientific teaching can train a large number of Mongolian folk song creators. At the same time, Mongolian customs must be innovatively integrated with modern life, and there must be breakthroughs in expression methods, so that the Mongolian folk song culture can be better inherited.Figure 10
Inheritance and innovation direction of Mongolian folk song culture.


## 4. Discussion

The article has extensively investigated the whole society and found the relevant factors that affect the cultural inheritance of the Mongolian nationality. From the survey, we found that the main reason for the difficulty in the inheritance of Mongolian culture is the failure of the inheritors. Coupled with the rich and multisourced modern music culture, it is difficult for Mongolian folk songs to gain a foothold here. According to social surveys and expert opinions, we found that the innovative inheritance of Mongolian folk songs should also focus on the form and content. It needs to win the recognition of the audience with high-quality folk songs and at the same time strengthen innovative publicity to expand the influence of Mongolian folk songs. Throughout the history of Chinese scholars’ research on the inheritance of ethnic minority music, it is not difficult to see that the two inheritance paths of rural and campus have intersected. The relationship between them has changed from the initial one to the other, to the noncommunication, and then to the complementarity of each other. Whether they can enter the relationship of mutual correlation and coprosperity and joint construction has become a new topic in this field. It raises the question of whether the inheritance of ethnic minority music is local or campus-based. If it is based on local inheritance, it means that campus inheritance must cooperate with the reconstruction of local culture. As an existing way of decorating campus culture without its own context, culture needs to be reintegrated to adapt to the inheritance of the campus. However, when we probed deeper and deeper into the “root” of minority music culture and tried to find the best way to inherit music culture, we found that this was the internal structure problem of the two cultural ecosystems. Professor Xie Jiaxing emphasized in his national key project “Research on Chinese Excellent Traditional Culture Education” that “There are three major components of Chinese excellent traditional culture: classic cultural education, traditional art and folk culture.” From this perspective if it is converted into the traditional culture of ethnic minorities, it should include three major components: classic education, traditional art, and folk activities. As mentioned above, minority music grows with life and plays a role in shaping personality. In this sense, music should be an integral part of the classical education of minority culture.


## 5. Conclusions

Based on the communication big data, this paper conducts research on the cultural inheritance of Mongolian folk songs. It uses big data to investigate the opinions and suggestions of the ethnic group on the understanding and inheritance of Mongolian culture, finds relevant professional expert interviews, and finds new ideas suitable for the inheritance of Mongolian folk song culture. This is an innovative suggestion to improve the cultural heritage of Mongolian folk songs. In the two inheritance paths, we see the limitations and advantages of each inheritance. From the establishment of the experimental base of art education, people are more and more aware of the importance of tradition. This makes it possible for us to discuss the modern adaptation and traditional reconstruction of minority music culture in a sense of crisis. However, the article also has its shortcomings. For example, the survey sample of the article is too small and may not be representative [20, 21].



---

*Source: 5752751-2022-04-11.xml*