CN109905722B - Method for determining suspected node and related equipment - Google Patents

Method for determining suspected node and related equipment Download PDF

Info

Publication number
CN109905722B
CN109905722B CN201910129314.4A CN201910129314A CN109905722B CN 109905722 B CN109905722 B CN 109905722B CN 201910129314 A CN201910129314 A CN 201910129314A CN 109905722 B CN109905722 B CN 109905722B
Authority
CN
China
Prior art keywords
node
suspicion
target
live broadcast
score
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201910129314.4A
Other languages
Chinese (zh)
Other versions
CN109905722A (en
Inventor
王璐
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Wuhan Ouyuan Network Video Co ltd
Original Assignee
Wuhan Ouyuan Network Video Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Wuhan Ouyuan Network Video Co ltd filed Critical Wuhan Ouyuan Network Video Co ltd
Priority to CN201910129314.4A priority Critical patent/CN109905722B/en
Publication of CN109905722A publication Critical patent/CN109905722A/en
Application granted granted Critical
Publication of CN109905722B publication Critical patent/CN109905722B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The embodiment of the invention provides a suspect node calculation method and related equipment, which are used for reducing the time for identifying abnormal live broadcast rooms or abnormal users in a live broadcast platform. The method comprises the following steps: determining the suspicion degree score of each node in the target bipartite graph; determining a first suspicion score of the target bipartite graph according to the suspicion score of each node; deleting the target live broadcast room node to calculate a second suspicion degree score of the target bipartite graph after the target live broadcast room node is deleted; if the difference value between the first suspicion degree score and the second suspicion degree score reaches a first preset threshold value, determining that the target live broadcast room node is a suspected live broadcast room node; deleting the target user node and the target live broadcast room node to calculate a third suspicion score of the target bipartite graph after the target user node and the target live broadcast room node are deleted; and if the difference value between the third suspicion degree score and the first suspicion degree score is larger than a second preset threshold value, determining the target user node as the suspected user node.

Description

Method for determining suspected node and related equipment
Technical Field
The invention relates to the field of data processing, in particular to a method for determining a suspected node and related equipment.
Background
On the live broadcast platform, in order to achieve the purpose of refreshing the live broadcast room, some false user behaviors are presented, and the behaviors are shown in the interaction between the user and the live broadcast room, such as attention, appreciation, bullet screen launching and the like. The false interaction behavior is often globalized, and the black industry has very high harmfulness to a live broadcast platform by directly adopting a large number of accounts to operate some live broadcast rooms.
The prior art often determines the abnormality of the interactive behavior of the live broadcast platform by mining two behaviors with abnormally high synchronicity:
1) the method is not suitable for scenes of a live broadcast platform, interaction behaviors between a user and a hot live broadcast room are very dense, and inherent abnormal information is difficult to find;
2) a synchronous and large number of associated behavior patterns are found through a lockstep behavior pattern algorithm, but the lockstep behavior pattern algorithm needs to carry out Singular Value Decomposition (SVD) Decomposition of an adjacent matrix, and is long in time consumption and high in complexity.
Disclosure of Invention
The embodiment of the invention provides a method for determining a suspect node and related equipment, which are used for reducing the time for identifying abnormal live broadcast rooms or abnormal users in a live broadcast platform.
The first aspect of the embodiments of the present invention provides a method for determining a suspect node, which is applied to a live broadcast platform, and includes:
determining the suspicion degree score of each node in a target bipartite graph, wherein the target bipartite graph is the interaction relation between a user and a live broadcast room in the live broadcast platform within a preset time length;
determining a first suspicion score of the target bipartite graph according to the suspicion score of each node;
deleting a target live broadcast room node to calculate a second suspicion degree score of the target bipartite graph after the target live broadcast room node is deleted, wherein the target live broadcast room node is any one live broadcast room node in the target bipartite graph;
if the difference value between the first suspicion degree score and the second suspicion degree score reaches a first preset threshold value, determining that the target live broadcast room node is a suspected live broadcast room node;
deleting a target user node and the target live broadcast room node to calculate a third suspicion degree score of the target bipartite graph after the target user node and the target live broadcast room node are deleted, wherein the target user node is any one of all users connected with the target live broadcast room node in the target bipartite graph;
and if the difference value between the third suspicion degree score and the first suspicion degree score is larger than a second preset threshold value, determining the target user node as a suspected user node.
Optionally, the determining a first suspicion score of the target bipartite graph according to the suspicion score of each node includes:
calculating a first suspicion score for the target bipartite graph by:
Figure BDA0001974723160000021
wherein S isGA first suspicion score of the target bipartite graph G, E is an edge set of the target bipartite graph, SnIs the suspicion score, c, of node n in the target bipartite graphijConstructing suspicion degree of edges for a node i in the target bipartite graph and a node j in the target bipartite graph, wherein cij1, | N | is the total number of nodes in the target bipartite graph G.
Optionally, each node is a user node or a live broadcast room node, and determining the suspicion score of each node in the target bipartite graph includes:
obtaining a suspicion index of the user node;
calculating a suspicion score of the user node based on the suspicion index of the user node;
obtaining a suspicion index of the live broadcast room node;
and calculating the suspicion degree score of the live broadcast room node based on the suspicion index of the live broadcast room node.
Optionally, wherein the calculating the suspicion score of the user node based on the suspicion score of the user node comprises:
calculating the suspicion degree score of the user node by the following formula:
Figure BDA0001974723160000031
wherein S isuThe suspicion degree score of the user node u is obtained, F is a user suspicion index set of the user node u, F is any one suspicion index in F, | F | is the number of the suspicion indexes of the user node u, FuA value of the user node u on the f, namely percentile (f)u) Is f is theuScore on suspicion index f of all users located in the live broadcast platformA number of bits.
Optionally, the calculating the suspicion score of the live broadcast node based on the suspicion index of the live broadcast node includes:
calculating the suspicion degree score of the live broadcast room node by the following formula:
Figure BDA0001974723160000032
wherein S isrThe index is the suspicion degree score of the live broadcast node r, G is the suspicion index set of the live broadcast node r, G is any index in G, | G | is the number of the suspicion indexes of the live broadcast node r, and GrA percentile (g) is a value of the live broadcast room node r on the gr) And the quantiles are quantiles of the suspected indexes g of all the users of the gr located in the live broadcast platform.
A second aspect of the embodiments of the present invention provides a device for determining a suspected node, which is applied to a live broadcast platform, and includes:
the first determining unit is used for determining the suspicion degree score of each node in a target bipartite graph, wherein the target bipartite graph is the interaction relation between a user and a live broadcast room in the live broadcast platform within a preset time length;
a second determining unit, configured to determine a first suspicion score of the target bipartite graph according to the suspicion score of each node;
the first calculation unit is used for deleting a target live broadcast room node so as to calculate a second suspicion degree score of the target bipartite graph after the target live broadcast room node is deleted, wherein the target live broadcast room node is any one live broadcast room node in the target bipartite graph;
a third determining unit, configured to determine that the target live broadcast room node is a suspected live broadcast room node if a difference between the first suspicion degree score and the second suspicion degree score reaches a first preset threshold;
the second calculation unit is used for deleting a target user node and the target live broadcast room node so as to calculate a third suspicion degree score of the target bipartite graph after the target user node and the target live broadcast room node are deleted, wherein the target user node is any one user in all users connected with the target live broadcast room node in the target bipartite graph;
and the fourth determining unit is used for determining the target user node as a suspected user node if the difference value between the third suspicion degree score and the first suspicion degree score is larger than a second preset threshold value.
Optionally, the determining, by the second determining unit, the first suspicion score of the target bipartite graph according to the suspicion score of each node includes:
calculating a first suspicion score for the target bipartite graph by:
Figure BDA0001974723160000051
wherein S isGA first suspicion score of the target bipartite graph G, E is an edge set of the target bipartite graph, SnIs the suspicion score, c, of node n in the target bipartite graphijConstructing suspicion degree of edges for a node i in the target bipartite graph and a node j in the target bipartite graph, wherein cij1, | N | is the total number of nodes in the target bipartite graph G.
Optionally, each node is a user node or a live broadcast room node, and the determining, by the first determining unit, the suspicion score of each node in the target bipartite graph includes:
obtaining a suspicion index of the user node;
calculating a suspicion score of the user node based on the suspicion index of the user node;
obtaining a suspicion index of the live broadcast room node;
and calculating the suspicion degree score of the live broadcast room node based on the suspicion index of the live broadcast room node.
Optionally, the calculating, by the first determining unit, the suspicion score of the user node based on the suspicion score of the user node includes:
calculating the suspicion degree score of the user node by the following formula:
Figure BDA0001974723160000052
wherein S isuThe suspicion degree score of the user node u is obtained, F is a user suspicion index set of the user node u, F is any one suspicion index in F, | F | is the number of the suspicion indexes of the user node u, FuA value of the user node u on the f, namely percentile (f)u) Is f is theuAnd quantiles on the suspicion index f of all users in the live broadcast platform.
Optionally, the calculating, by the first determining unit, the suspicion score of the live broadcast node based on the suspicion index of the live broadcast node includes:
calculating the suspicion degree score of the live broadcast room node by the following formula:
Figure BDA0001974723160000061
wherein S isrThe index is the suspicion degree score of the live broadcast node r, G is the suspicion index set of the live broadcast node r, G is any index in G, | G | is the number of the suspicion indexes of the live broadcast node r, and GrA percentile (g) is a value of the live broadcast room node r on the gr) Is the grAnd quantiles on the suspicion indexes g of all users in the live broadcast platform.
A third aspect of the present invention provides an electronic device, including a memory and a processor, wherein the processor is configured to implement the steps of the method for determining a suspect node according to any one of the above described embodiments when executing a computer management class program stored in the memory.
A fourth aspect of the present invention provides a computer-readable storage medium having a computer management-like program stored thereon, characterized in that: the computer management program, when executed by a processor, implements the steps of the method for determining a suspect node as set forth in any of the above.
In summary, it can be seen that in the embodiment provided by the present invention, a target bipartite graph of a live broadcast platform within a preset time duration is constructed, a difference between a suspicion score of the target bipartite graph and a suspicion score of the target bipartite graph after a node of a live broadcast is deleted is calculated to determine a live broadcast room, and a difference between a suspicion score of the target bipartite graph and a suspicion score of a target bipartite graph after the node of the live broadcast room is deleted and a suspicion score of the target bipartite graph after the node of the target user is deleted is calculated to determine a suspected user, where the node of the target user is a node corresponding to a user having an interactive behavior in the live broadcast room corresponding to the node of the live broadcast room, and compared with the prior art, the present invention is suitable for a scene of the live broadcast platform, and meanwhile, because SVD decomposition of an adjacency matrix is not required, time for determining the suspected node is reduced.
Drawings
Fig. 1 is a schematic flowchart of a method for determining a suspect node according to an embodiment of the present invention;
fig. 2 is a schematic diagram of an embodiment of an apparatus for determining a suspect node according to an embodiment of the present invention;
fig. 3 is a schematic diagram of a hardware structure of a device for determining a suspect node according to an embodiment of the present invention;
fig. 4 is a schematic diagram of an embodiment of an electronic device according to an embodiment of the present invention;
fig. 5 is a schematic diagram of an embodiment of a computer-readable storage medium according to an embodiment of the present invention.
Detailed Description
The embodiment of the invention provides a method for determining a suspect node and related equipment, which are used for reducing the time for identifying abnormal live broadcast rooms or abnormal users in a live broadcast platform.
The terms "first," "second," "third," "fourth," and the like in the description and in the claims, as well as in the drawings, if any, are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It will be appreciated that the data so used may be interchanged under appropriate circumstances such that the embodiments described herein may be practiced otherwise than as specifically illustrated or described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus. The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments.
The following describes a method for determining a suspected node from the perspective of a device for determining a suspected node, which may be a server or a service unit in a server.
Referring to fig. 1, fig. 1 is a schematic diagram of an embodiment of a method for determining a suspect node according to an embodiment of the present invention, including:
101. and determining the suspicion score of each node in the target bipartite graph.
In this embodiment, the device for determining the suspected node may first construct a target bipartite graph corresponding to the live broadcast platform, and then determine the suspicion score of each node in the target bipartite graph, where the target bipartite graph is an interaction relationship between a user and a live broadcast in the live broadcast platform within a preset time period, that is, an interaction behavior between the user and the live broadcast in the live broadcast platform may be regarded as one target bipartite graph, and in the target bipartite graph, one part is a vertex formed by the user, and the other part is a vertex formed by the live broadcast. If the user has an interactive behavior with the live broadcast room within a preset time length (for example, 1 day, or other time, specifically, but not limited), an edge can be formed on the target bipartite graph between the user and the live broadcast room.
It should be noted that, each node of the target bipartite graph is a user node or a live broadcast room node, and the apparatus for determining a suspect node may determine the suspect score of each node in the target bipartite graph in the following manner:
obtaining a suspicion index of a user node;
calculating the suspicion degree score of the user node based on the suspicion index of the user node;
obtaining a suspicion index of a live broadcast room node;
and calculating the suspicion degree score of the live broadcast room node based on the suspicion index of the live broadcast room node.
That is to say, a suspicion index of a user node or a suspicion index of a live broadcast room node may be obtained first, where the suspicion index of the user node is a total number of user interaction behaviors within a preset duration and a number of live broadcast rooms of the user interaction behaviors within the preset duration, the suspicion index of the live broadcast room node may be a number of day behaviors within the preset duration, and then, a suspicion score of the user node is calculated by the following formula:
Figure BDA0001974723160000081
wherein S isuThe suspicion degree score of the user node u is obtained, F is a user suspicion index set of the user node u, F is any one suspicion index in F, | F | is the number of the suspicion indexes of the user node u, FuTaking the value of the user node u on the f, namely percentile (f)u) Is fuQuantile located on index f of the user;
and calculating the suspicion degree score of the live broadcast room node by the following formula:
Figure BDA0001974723160000091
wherein S isrIs the suspicion degree score of the node r of the live broadcast room, G is the suspicion index set of the node r of the live broadcast room, G is any index in G, | G | is the number of the suspicion indexes of the node r of the live broadcast room, and GrValue of node r in live broadcast room in g, percentile ((R))gr) Is grAnd quantiles on the suspicion indexes g of all users in the live broadcast platform.
102. And determining a first suspicion score of the target bipartite graph according to the suspicion score of each node.
In this embodiment, the apparatus for determining a suspected node may calculate the first suspicion score of the target bipartite graph according to the following formula:
Figure BDA0001974723160000092
wherein S isGIs the first suspicion score of the target bipartite graph G, E is the set of edges in the target bipartite graph, SnIs the suspicion score, c, for node n in the target bipartite graphijConstructing a suspicion score for an edge for node i in the target bipartite graph and node j in the target bipartite graph, wherein cij1, | N | is the total number of nodes in the target bipartite graph G.
103. And deleting the target live broadcast room node to calculate a second suspicion degree score of the target bipartite graph after the target live broadcast room node is deleted.
In this embodiment, the apparatus for determining a suspect node may delete a target live broadcast room node, and calculate a second suspicion degree score of a target bipartite graph after the target live broadcast room node is deleted, where the target live broadcast room node is any one of the target bipartite graph live broadcast room nodes.
It should be noted that, the step 102 has already described the first suspicion score of the target bipartite graph in detail, and here, the step of calculating the second suspicion score of the target bipartite graph after deleting the target live broadcast room node is similar to the step 102, and details thereof are not repeated here.
104. And if the difference value of the first suspicion degree score and the second suspicion degree score reaches a first preset threshold value, determining the target live broadcast room node as a suspicion live broadcast room node.
In this embodiment, after the device for determining the suspected node obtains the second suspicion score, a difference between the first suspicion score and the second suspicion score may be calculated, and whether the difference between the first suspicion score and the second suspicion score reaches a first preset threshold value is determined, if yes, the target node is determined to be a node between the live suspicion rooms.
It should be noted that the apparatus for determining the suspected node may repeatedly execute step 103 and step 104, traverse all live broadcast room nodes in the target bipartite graph, and obtain a set of suspected live broadcast room nodes.
105. And deleting the target user node and the target live broadcast room node to calculate a third suspicion score of the target bipartite graph after the target user node and the target live broadcast room node are deleted.
In this embodiment, after obtaining the target live broadcast room node, the apparatus for determining the suspect node may delete the target user node and the target live broadcast room node at the same time, and calculate a third suspicion degree score of the target bipartite graph after deleting the target user node and the target live broadcast room node, where the target user node is any one of all users connected to the target live broadcast room node in the target bipartite graph, that is, a user corresponding to the target user node has an interaction behavior with a live broadcast room corresponding to the target live broadcast room node within a preset time period.
It should be noted that, the step 102 has already described in detail the calculation of the first suspicion score of the target bipartite graph, and the step 105 of calculating the third suspicion score of the target bipartite graph after deleting the target user node and the target live broadcast room node is similar to the step 102, and details thereof are not repeated here.
It should be further noted that the apparatus for determining the suspect node may execute step 105 after obtaining all suspect live broadcast room nodes in the target bipartite graph, or may execute step 105 once without obtaining one suspect live broadcast room node, which is not limited specifically.
106. And if the difference value between the third suspicion degree score and the first suspicion degree score is larger than a second preset threshold value, determining the target user node as the suspected user node.
In this embodiment, after obtaining the third suspicion score, the apparatus for determining a suspected node may calculate a difference between the first suspicion score and the third suspicion score, and determine whether the difference between the first suspicion score and the third suspicion score reaches a second preset threshold, if so, determine that the target user node is the suspected user node, that is, determine that the user corresponding to the target user node is the user who has the false interaction behavior between live broadcasts corresponding to the target live broadcast node.
In summary, it can be seen that in the embodiment provided by the present invention, a target bipartite graph of a live broadcast platform within a preset time duration is constructed, a difference between a suspicion score of the target bipartite graph and a suspicion score of the target bipartite graph after a node of a live broadcast is deleted is calculated to determine a live broadcast room, and a difference between a suspicion score of the target bipartite graph and a suspicion score of a target bipartite graph after the node of the live broadcast room is deleted and a suspicion score of the target bipartite graph after the node of the target user is deleted is calculated to determine a suspected user, where the node of the target user is a node corresponding to a user having an interactive behavior in the live broadcast room corresponding to the node of the live broadcast room, and compared with the prior art, the present invention is suitable for a scene of the live broadcast platform, and meanwhile, because SVD decomposition of an adjacency matrix is not required, time for determining the suspected node is reduced.
The method for determining a suspect node in the embodiment of the present invention is described above, and the apparatus for determining a suspect node in the embodiment of the present invention is described below.
Referring to fig. 2, an embodiment of the apparatus for determining a suspected node according to the embodiment of the present invention includes:
a first determining unit 201, configured to determine a suspicion score of each node in a target bipartite graph, where the target bipartite graph is an interaction relationship between a user and a live broadcast room in the live broadcast platform within a preset time period;
a second determining unit 202, configured to determine a first suspicion score of the target bipartite graph according to the suspicion score of each node;
a first calculating unit 203, configured to delete a target live broadcast room node to calculate a second suspicion score of the target bipartite graph after the target live broadcast room node is deleted, where the target live broadcast room node is any one of the target bipartite graphs;
a third determining unit 204, configured to determine that the target live broadcast room node is a suspected live broadcast room node if a difference between the first suspicion degree score and the second suspicion degree score reaches a first preset threshold;
a second calculating unit 205, configured to delete a target user node and the target live broadcast room node, so as to calculate a third suspicion score of the target bipartite graph after the target user node and the target live broadcast room node are deleted, where the target user node is any one of all users connected to the target live broadcast room node in the target bipartite graph;
a fourth determining unit 206, configured to determine that the target user node is a suspected user node if a difference between the third suspicion score and the first suspicion score is greater than a second preset threshold.
Optionally, the determining, by the second determining unit 202, the first suspicion score of the target bipartite graph according to the suspicion score of each node includes:
calculating a first suspicion score for the target bipartite graph by:
Figure BDA0001974723160000121
wherein S isGA first suspicion score of the target bipartite graph G, E is an edge set of the target bipartite graph, SnIs the suspicion score, c, of node n in the target bipartite graphijConstructing suspicion degree of edges for a node i in the target bipartite graph and a node j in the target bipartite graph, wherein cij1, | N | is the total number of nodes in the target bipartite graph G.
Optionally, each node is a user node or a live broadcast room node, and the determining, by the first determining unit 201, the suspicion score of each node in the target bipartite graph includes:
obtaining a suspicion index of the user node;
calculating a suspicion score of the user node based on the suspicion index of the user node;
obtaining a suspicion index of the live broadcast room node;
and calculating the suspicion degree score of the live broadcast room node based on the suspicion index of the live broadcast room node.
Optionally, the calculating, by the first determining unit 201, the suspicion score of the user node based on the suspicion score of the user node includes:
calculating the suspicion degree score of the user node by the following formula:
Figure BDA0001974723160000131
wherein S isuThe suspicion degree score of the user node u is obtained, F is a user suspicion index set of the user node u, F is any one suspicion index in F, | F | is the number of the suspicion indexes of the user node u, FuA value of the user node u on the f, namely percentile (f)u) Is f is theuAnd quantiles on the suspicion index f of all users in the live broadcast platform.
Optionally, the calculating, by the first determining unit 201, the suspicion score of the live broadcast node based on the suspicion index of the live broadcast node includes:
calculating the suspicion degree score of the live broadcast room node by the following formula:
Figure BDA0001974723160000132
wherein S isrThe index is the suspicion degree score of the live broadcast node r, G is the suspicion index set of the live broadcast node r, G is any index in G, | G | is the number of the suspicion indexes of the live broadcast node r, and GrA percentile (g) is a value of the live broadcast room node r on the gr) Is the grAnd quantiles on the suspicion indexes g of all users in the live broadcast platform.
Fig. 2 describes the apparatus for determining a suspect node in the embodiment of the present invention from the perspective of a modular functional entity, and the apparatus for determining a suspect node in the embodiment of the present invention is described in detail from the perspective of hardware processing, referring to fig. 3, an embodiment of an apparatus 300 for determining a suspect node in the embodiment of the present invention includes:
an input device 301, an output device 302, a processor 303 and a memory 304 (wherein the number of the processor 303 may be one or more, and one processor 303 is taken as an example in fig. 3). In some embodiments of the present invention, the input device 301, the output device 502, the processor 303, and the memory 304 may be connected by a bus or other means, wherein the connection by the bus is exemplified in fig. 3.
Wherein, by calling the operation instruction stored in the memory 304, the processor 303 is configured to perform the following steps:
determining the suspicion degree score of each node in a target bipartite graph, wherein the target bipartite graph is the interaction relation between a user and a live broadcast room in the live broadcast platform within a preset time length;
determining a first suspicion score of the target bipartite graph according to the suspicion score of each node;
deleting a target live broadcast room node to calculate a second suspicion degree score of the target bipartite graph after the target live broadcast room node is deleted, wherein the target live broadcast room node is any one live broadcast room node in the target bipartite graph;
if the difference value between the first suspicion degree score and the second suspicion degree score reaches a first preset threshold value, determining that the target live broadcast room node is a suspected live broadcast room node;
deleting a target user node and the target live broadcast room node to calculate a third suspicion degree score of the target bipartite graph after the target user node and the target live broadcast room node are deleted, wherein the target user node is any one of all users connected with the target live broadcast room node in the target bipartite graph;
and if the difference value between the third suspicion degree score and the first suspicion degree score is larger than a second preset threshold value, determining the target user node as a suspected user node.
The processor 303 is also configured to perform any of the methods in the corresponding embodiments of fig. 1 by calling the operation instructions stored in the memory 304.
Referring to fig. 4, fig. 4 is a schematic view of an embodiment of an electronic device according to an embodiment of the invention.
As shown in fig. 4, an embodiment of the present invention provides an electronic device, which includes a memory 410, a processor 420, and a computer program 411 stored in the memory 420 and running on the processor 420, and when the processor 420 executes the computer program 411, the following steps are implemented:
determining the suspicion degree score of each node in a target bipartite graph, wherein the target bipartite graph is the interaction relation between a user and a live broadcast room in the live broadcast platform within a preset time length;
determining a first suspicion score of the target bipartite graph according to the suspicion score of each node;
deleting a target live broadcast room node to calculate a second suspicion degree score of the target bipartite graph after the target live broadcast room node is deleted, wherein the target live broadcast room node is any one live broadcast room node in the target bipartite graph;
if the difference value between the first suspicion degree score and the second suspicion degree score reaches a first preset threshold value, determining that the target live broadcast room node is a suspected live broadcast room node;
deleting a target user node and the target live broadcast room node to calculate a third suspicion degree score of the target bipartite graph after the target user node and the target live broadcast room node are deleted, wherein the target user node is any one of all users connected with the target live broadcast room node in the target bipartite graph;
and if the difference value between the third suspicion degree score and the first suspicion degree score is larger than a second preset threshold value, determining the target user node as a suspected user node.
In a specific implementation, when the processor 420 executes the computer program 411, any of the embodiments corresponding to fig. 1 may be implemented.
Since the electronic device described in this embodiment is a device used for implementing an apparatus for determining a suspected node in the embodiment of the present invention, based on the method described in the embodiment of the present invention, a person skilled in the art can understand a specific implementation manner of the electronic device in this embodiment and various variations thereof, so that how to implement the method in the embodiment of the present invention by the electronic device is not described in detail herein, and as long as the person skilled in the art implements the device used for implementing the method in the embodiment of the present invention, the device is within the scope of the present invention to be protected.
Referring to fig. 5, fig. 5 is a schematic diagram illustrating an embodiment of a computer-readable storage medium according to the present invention.
As shown in fig. 5, the present embodiment provides a computer-readable storage medium 500 having a computer program 511 stored thereon, the computer program 511 implementing the following steps when executed by a processor:
determining the suspicion degree score of each node in a target bipartite graph, wherein the target bipartite graph is the interaction relation between a user and a live broadcast room in the live broadcast platform within a preset time length;
determining a first suspicion score of the target bipartite graph according to the suspicion score of each node;
deleting a target live broadcast room node to calculate a second suspicion degree score of the target bipartite graph after the target live broadcast room node is deleted, wherein the target live broadcast room node is any one live broadcast room node in the target bipartite graph;
if the difference value between the first suspicion degree score and the second suspicion degree score reaches a first preset threshold value, determining that the target live broadcast room node is a suspected live broadcast room node;
deleting a target user node and the target live broadcast room node to calculate a third suspicion degree score of the target bipartite graph after the target user node and the target live broadcast room node are deleted, wherein the target user node is any one of all users connected with the target live broadcast room node in the target bipartite graph;
and if the difference value between the third suspicion degree score and the first suspicion degree score is larger than a second preset threshold value, determining the target user node as a suspected user node.
In a specific implementation, the computer program 511 may implement any of the embodiments corresponding to fig. 1 when executed by a processor.
It should be noted that, in the foregoing embodiments, the descriptions of the respective embodiments have respective emphasis, and reference may be made to relevant descriptions of other embodiments for parts that are not described in detail in a certain embodiment.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
Embodiments of the present invention further provide a computer program product, where the computer program product includes computer software instructions, and when the computer software instructions are executed on a processing device, the processing device executes a flow in the method for designing a wind farm digital platform in the embodiment corresponding to fig. 1.
The computer program product includes one or more computer instructions. When loaded and executed on a computer, cause the processes or functions described in accordance with the embodiments of the invention to occur, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored on a computer readable storage medium or transmitted from one computer readable storage medium to another, for example, from one website, computer, server, or data center to another website, computer, server, or data center via wire (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that a computer can store or a data storage device, such as a server, a data center, etc., that is integrated with one or more available media. The usable medium may be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., Solid State Disk (SSD)), among others.
It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described systems, apparatuses and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
In the embodiments provided in the present invention, it should be understood that the disclosed system, apparatus and method may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.
The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
The above-mentioned embodiments are only used for illustrating the technical solutions of the present invention, and not for limiting the same; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; such modifications and substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (10)

1. A method for determining suspected nodes is applied to a live broadcast platform and is characterized by comprising the following steps:
determining the suspicion degree score of each node in a target bipartite graph, wherein the target bipartite graph is the interaction relation between a user and a live broadcast room in the live broadcast platform within a preset time length;
determining a first suspicion score of the target bipartite graph according to the suspicion score of each node;
deleting a target live broadcast room node to calculate a second suspicion degree score of the target bipartite graph after the target live broadcast room node is deleted, wherein the target live broadcast room node is any one live broadcast room node in the target bipartite graph;
if the difference value between the first suspicion degree score and the second suspicion degree score reaches a first preset threshold value, determining that the target live broadcast room node is a suspected live broadcast room node;
deleting a target user node and the target live broadcast room node to calculate a third suspicion degree score of the target bipartite graph after the target user node and the target live broadcast room node are deleted, wherein the target user node is any one of all users connected with the target live broadcast room node in the target bipartite graph;
and if the difference value between the third suspicion degree score and the first suspicion degree score is larger than a second preset threshold value, determining the target user node as a suspected user node.
2. The method of claim 1, wherein determining the first suspicion score for the target bipartite graph according to the suspicion score for each node comprises:
calculating a first suspicion score for the target bipartite graph by:
Figure FDA0002945791330000011
wherein S isGA first suspicion score of the target bipartite graph G, E is an edge set of the target bipartite graph, SnIs the suspicion score, c, of node n in the target bipartite graphijConstructing suspicion degree of edges for a node i in the target bipartite graph and a node j in the target bipartite graph, wherein cij1, | N | is the total number of nodes in the target bipartite graph G.
3. The method of claim 1 or 2, wherein each node is a user node or a live broadcast node, and wherein determining the suspicion score of each node in the target bipartite graph comprises:
obtaining a suspicion index of the user node;
calculating a suspicion score of the user node based on the suspicion index of the user node;
obtaining a suspicion index of the live broadcast room node;
and calculating the suspicion degree score of the live broadcast room node based on the suspicion index of the live broadcast room node.
4. The method of claim 3, wherein the calculating the suspicion score for the user node based on the suspicion indicator for the user node comprises:
calculating the suspicion degree score of the user node by the following formula:
Figure FDA0002945791330000021
wherein S isuThe suspicion degree score of the user node u is obtained, F is a user suspicion index set of the user node u, F is any one suspicion index in F, | F | is the number of the suspicion indexes of the user node u, FuA value of the user node u on the f, namely percentile (f)u) Is f is theuAnd quantiles on the suspicion index f of all users in the live broadcast platform.
5. The method of claim 3, wherein calculating the suspicion score for the live room node based on the suspicion indicator for the live room node comprises:
calculating the suspicion degree score of the live broadcast room node by the following formula:
Figure FDA0002945791330000031
wherein S isrThe index is the suspicion degree score of the live broadcast node r, G is the suspicion index set of the live broadcast node r, G is any index in G, | G | is the number of the suspicion indexes of the live broadcast node r, and GrA percentile (g) is a value of the live broadcast room node r on the gr) Is the grAnd quantiles on the suspicion indexes g of all users in the live broadcast platform.
6. The utility model provides a confirm suspect node's device, is applied to live platform, its characterized in that includes:
the first determining unit is used for determining the suspicion degree score of each node in a target bipartite graph, wherein the target bipartite graph is the interaction relation between a user and a live broadcast room in the live broadcast platform within a preset time length;
a second determining unit, configured to determine a first suspicion score of the target bipartite graph according to the suspicion score of each node;
the first calculation unit is used for deleting a target live broadcast room node so as to calculate a second suspicion degree score of the target bipartite graph after the target live broadcast room node is deleted, wherein the target live broadcast room node is any one live broadcast room node in the target bipartite graph;
a third determining unit, configured to determine that the target live broadcast room node is a suspected live broadcast room node if a difference between the first suspicion degree score and the second suspicion degree score reaches a first preset threshold;
the second calculation unit is used for deleting a target user node and the target live broadcast room node so as to calculate a third suspicion degree score of the target bipartite graph after the target user node and the target live broadcast room node are deleted, wherein the target user node is any one user in all users connected with the target live broadcast room node in the target bipartite graph;
and the fourth determining unit is used for determining the target user node as a suspected user node if the difference value between the third suspicion degree score and the first suspicion degree score is larger than a second preset threshold value.
7. The apparatus of claim 6, wherein the second determining unit determining the first suspicion score of the target bipartite graph according to the suspicion score of each node comprises:
calculating a first suspicion score for the target bipartite graph by:
Figure FDA0002945791330000041
wherein S isGA first suspicion score of the target bipartite graph G, E is an edge set of the target bipartite graph, SnIs the suspicion score, c, of node n in the target bipartite graphijConstructing suspicion degree of edges for a node i in the target bipartite graph and a node j in the target bipartite graph, wherein cij1, | N | is the total number of nodes in the target bipartite graph G.
8. The apparatus according to claim 6 or 7, wherein each node is a user node or a live broadcast node, and the determining the suspicion score of each node in the target bipartite graph by the first determining unit comprises:
obtaining a suspicion index of the user node;
calculating a suspicion score of the user node based on the suspicion index of the user node;
obtaining a suspicion index of the live broadcast room node;
and calculating the suspicion degree score of the live broadcast room node based on the suspicion index of the live broadcast room node.
9. An electronic device comprising a memory, a processor, wherein the processor is configured to implement the steps of the method for determining a suspect node according to any one of claims 1 to 5 when executing a computer management class program stored in the memory.
10. A computer-readable storage medium having stored thereon a computer management-like program, characterized in that: the computer management class program, when executed by a processor, implements the steps of the method of determining a suspect node according to any of claims 1 to 5.
CN201910129314.4A 2019-02-21 2019-02-21 Method for determining suspected node and related equipment Active CN109905722B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910129314.4A CN109905722B (en) 2019-02-21 2019-02-21 Method for determining suspected node and related equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910129314.4A CN109905722B (en) 2019-02-21 2019-02-21 Method for determining suspected node and related equipment

Publications (2)

Publication Number Publication Date
CN109905722A CN109905722A (en) 2019-06-18
CN109905722B true CN109905722B (en) 2021-07-23

Family

ID=66945115

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910129314.4A Active CN109905722B (en) 2019-02-21 2019-02-21 Method for determining suspected node and related equipment

Country Status (1)

Country Link
CN (1) CN109905722B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112866806B (en) * 2019-11-28 2022-09-09 武汉瓯越网视有限公司 Method and system for identifying target group

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108174296A (en) * 2018-01-02 2018-06-15 武汉斗鱼网络科技有限公司 Malicious user recognition methods and device
CN108390883A (en) * 2018-02-28 2018-08-10 武汉斗鱼网络科技有限公司 Recognition methods, device and the terminal device of brush popularity user
WO2018176445A1 (en) * 2017-04-01 2018-10-04 北京端极网络技术有限公司 Information display system and method for live broadcast room
CN109257617A (en) * 2018-09-30 2019-01-22 武汉斗鱼网络科技有限公司 A kind of determining method and relevant device that suspicion user in platform is broadcast live
CN109255371A (en) * 2018-08-23 2019-01-22 武汉斗鱼网络科技有限公司 A kind of method and relevant device of determining live streaming platform falseness concern user

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018176445A1 (en) * 2017-04-01 2018-10-04 北京端极网络技术有限公司 Information display system and method for live broadcast room
CN108174296A (en) * 2018-01-02 2018-06-15 武汉斗鱼网络科技有限公司 Malicious user recognition methods and device
CN108390883A (en) * 2018-02-28 2018-08-10 武汉斗鱼网络科技有限公司 Recognition methods, device and the terminal device of brush popularity user
CN109255371A (en) * 2018-08-23 2019-01-22 武汉斗鱼网络科技有限公司 A kind of method and relevant device of determining live streaming platform falseness concern user
CN109257617A (en) * 2018-09-30 2019-01-22 武汉斗鱼网络科技有限公司 A kind of determining method and relevant device that suspicion user in platform is broadcast live

Also Published As

Publication number Publication date
CN109905722A (en) 2019-06-18

Similar Documents

Publication Publication Date Title
CN109255371B (en) Method for determining false attention user of live broadcast platform and related equipment
CN110896488B (en) Recommendation method for live broadcast room and related equipment
CN107360188B (en) Website risk value evaluation method and device based on cloud protection and cloud monitoring system
CN108985954B (en) Method for establishing association relation of each identifier and related equipment
CN110995482B (en) Alarm analysis method and device, computer equipment and computer readable storage medium
Zhang et al. Protecting critical infrastructures against intentional attacks: A two-stage game with incomplete information
WO2019057048A1 (en) Low-frequency crawler identification method, device, readable storage medium and equipment
CN109600344B (en) Method and device for identifying risk group and electronic equipment
CN109257617B (en) Method for determining suspected user in live broadcast platform and related equipment
CN104580385A (en) Method and device expanding user relationship chain
CN104915359B (en) Theme label recommended method and device
CN109951725B (en) Recommendation method for live broadcast room and related equipment
CN111126928B (en) Method and device for auditing release content
CN110493806A (en) Mobile network complains source tracing method and device
CN109587523B (en) False attention identification method and related equipment
CN109460930B (en) Method for determining risk account and related equipment
CN106161389B (en) Cheating identification method and device and terminal
CN109905722B (en) Method for determining suspected node and related equipment
CN104424361A (en) Autonomically defining hot storage and heavy workloads
CN107809363A (en) A kind of spreading network information control method and device
CN109784403B (en) Method for identifying risk equipment and related equipment
CN109413439A (en) A kind of method and relevant device of determining suspicion user
CN110222297B (en) Identification method of tag user and related equipment
CN109361929B (en) Method for determining live broadcast room label and related equipment
CN116089658A (en) Object commonality extraction method and device, storage medium and electronic equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant