{"id":"https://openalex.org/W3199174176","doi":"https://doi.org/10.1109/ijcnn52387.2021.9534113","title":"LogBERT: Log Anomaly Detection via BERT","display_name":"LogBERT: Log Anomaly Detection via BERT","publication_year":2021,"publication_date":"2021-07-18","ids":{"openalex":"https://openalex.org/W3199174176","doi":"https://doi.org/10.1109/ijcnn52387.2021.9534113","mag":"3199174176"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn52387.2021.9534113","doi":"https://doi.org/10.1109/ijcnn52387.2021.9534113","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn52387.2021.9534113","pdf_url":null,"source":{"id":"https://openalex.org/S4363607707","display_name":"International Joint Conference on Neural Networks (IJCNN)","issn_l":"2161-4407","issn":["2161-4407"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-1","norway-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2103.04475","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039576446","display_name":"Haixuan Guo","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I121980950","display_name":"Utah State University","ror":"https://ror.org/00h6set76","country_code":"US","type":"education","lineage":["https://openalex.org/I121980950"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haixuan Guo","raw_affiliation_strings":["Utah State University, UT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Utah State University, UT","institution_ids":["https://openalex.org/I121980950"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Shuhan Yuan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I121980950","display_name":"Utah State University","ror":"https://ror.org/00h6set76","country_code":"US","type":"education","lineage":["https://openalex.org/I121980950"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shuhan Yuan","raw_affiliation_strings":["Utah State University, UT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Utah State University, UT","institution_ids":["https://openalex.org/I121980950"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008463509","display_name":"Xintao Wu","orcid":"https://orcid.org/0000-0002-2823-3063","observed_orcids":["https://orcid.org/0000-0002-2823-3063","https://orcid.org/0000-0002-6847-5673"]},"institutions":[{"id":"https://openalex.org/I78715868","display_name":"University of Arkansas at Fayetteville","ror":"https://ror.org/05jbt9m15","country_code":"US","type":"education","lineage":["https://openalex.org/I78715868"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xintao Wu","raw_affiliation_strings":["University of Arkansas, Fayetteville, AR"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arkansas, Fayetteville, AR","institution_ids":["https://openalex.org/I78715868"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":44.5208,"has_fulltext":true,"cited_by_count":560,"citation_normalized_percentile":{"value":1.0,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/log-based-anomaly-detection","display_name":"log anomaly detection","score":0.996999979019165},{"id":"https://openalex.org/keywords/system-logs","display_name":"system logs","score":0.8650000095367432},{"id":"https://openalex.org/keywords/bert","display_name":"BERT","score":0.8349999785423279},{"id":"https://openalex.org/keywords/self-supervised-learning","display_name":"self-supervised learning","score":0.984000027179718},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.5350000262260437},{"id":"https://openalex.org/keywords/cybersecurity","display_name":"cybersecurity","score":0.4300000071525574}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7866045832633972},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.746623158454895},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.5393938422203064},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4929776191711426},{"id":"https://openalex.org/C2776562905","wikidata":"https://www.wikidata.org/wiki/Q306610","display_name":"Hypersphere","level":2,"score":0.4920179545879364},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.47813642024993896},{"id":"https://openalex.org/C147764199","wikidata":"https://www.wikidata.org/wiki/Q6865248","display_name":"Minification","level":2,"score":0.42155390977859497},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.390774130821228},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34718579053878784},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/ijcnn52387.2021.9534113","doi":"https://doi.org/10.1109/ijcnn52387.2021.9534113","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn52387.2021.9534113","pdf_url":null,"source":{"id":"https://openalex.org/S4363607707","display_name":"International Joint Conference on Neural Networks (IJCNN)","issn_l":"2161-4407","issn":["2161-4407"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-1","norway-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2103.04475","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2103.04475","pdf_url":"https://arxiv.org/pdf/2103.04475","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:digitalcommons.usu.edu:etd-9253","doi":null,"is_oa":false,"landing_page_url":"https://digitalcommons.usu.edu/etd/8110","pdf_url":null,"source":{"id":"https://openalex.org/S4377196327","display_name":"Digital Commons - USU (Utah State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I121980950","host_organization_name":"Utah State University","host_organization_lineage":["https://openalex.org/I121980950"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"All Graduate Theses and Dissertations, Spring 1920 to Summer 2023","raw_type":"text"},{"id":"doi:10.48550/arxiv.2103.04475","doi":"https://doi.org/10.48550/arxiv.2103.04475","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2103.04475","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.26076/0567-4901","doi":"https://doi.org/10.26076/0567-4901","is_oa":true,"landing_page_url":"https://doi.org/10.26076/0567-4901","pdf_url":null,"source":{"id":"https://openalex.org/S4377196327","display_name":"Digital Commons - USU (Utah State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I121980950","host_organization_name":"Utah State University","host_organization_lineage":["https://openalex.org/I121980950"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2103.04475","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2103.04475","pdf_url":"https://arxiv.org/pdf/2103.04475","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G4533840240","display_name":"TWC: Medium: Collaborative: Online Social Network Fraud and Attack Research and Identification","funder_award_id":"1564250","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3199174176.pdf","grobid_xml":"https://content.openalex.org/works/W3199174176.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W1540258466","https://openalex.org/W1990089904","https://openalex.org/W2039157918","https://openalex.org/W2053186076","https://openalex.org/W2096017373","https://openalex.org/W2107263349","https://openalex.org/W2114554028","https://openalex.org/W2122301654","https://openalex.org/W2132870739","https://openalex.org/W2159637520","https://openalex.org/W2296719434","https://openalex.org/W2401686019","https://openalex.org/W2560021099","https://openalex.org/W2585367509","https://openalex.org/W2626778328","https://openalex.org/W2754665629","https://openalex.org/W2767094836","https://openalex.org/W2803697594","https://openalex.org/W2896457183","https://openalex.org/W2947815220","https://openalex.org/W2963341956","https://openalex.org/W2965838158","https://openalex.org/W2986944522","https://openalex.org/W3169066865","https://openalex.org/W4388212317"],"related_works":["https://openalex.org/W7128801333","https://openalex.org/W4386141483","https://openalex.org/W4226289522","https://openalex.org/W4309623083","https://openalex.org/W4391235307","https://openalex.org/W6989671925","https://openalex.org/W4414479978","https://openalex.org/W4391940820","https://openalex.org/W4404688251","https://openalex.org/W3187309050"],"abstract_inverted_index":{"Detecting":[0],"anomalous":[1],"events":[2],"in":[3],"online":[4],"computer":[5],"systems":[6,12],"is":[7,81],"crucial":[8],"to":[9,83],"protect":[10],"the":[11,57,85,96],"from":[13,52,100],"malicious":[14],"attacks":[15],"or":[16],"malfunctions.":[17],"System":[18],"logs,":[19],"which":[20],"record":[21],"detailed":[22],"information":[23],"of":[24,59,75,87],"computational":[25],"events,":[26],"are":[27],"widely":[28],"used":[29],"for":[30,43,116],"system":[31],"status":[32],"analysis.":[33],"In":[34],"this":[35],"paper,":[36],"we":[37],"propose":[38],"LogBERT,":[39],"a":[40],"self-supervised":[41,66],"framework":[42],"log":[44,61,70,89,108],"anomaly":[45,117],"detection":[46],"based":[47],"on":[48,106],"Bidirectional":[49],"Encoder":[50],"Representations":[51],"Transformers":[53],"(BERT).":[54],"LogBERT":[55,80,112],"learns":[56],"patterns":[58,86,98],"normal":[60,88],"sequences":[62,90],"by":[63],"two":[64],"novel":[65],"training":[67],"tasks,":[68],"masked":[69],"message":[71],"prediction":[72],"and":[73,91],"volume":[74],"hypersphere":[76],"minimization.":[77],"After":[78],"training,":[79],"able":[82],"capture":[84],"further":[92],"detect":[93],"anomalies":[94],"where":[95],"underlying":[97],"deviate":[99],"expected":[101],"patterns.":[102],"The":[103],"experimental":[104],"results":[105],"three":[107],"datasets":[109],"show":[110],"that":[111],"outperforms":[113],"state-of-the-art":[114],"approaches":[115],"detection.":[118]},"counts_by_year":[{"year":2026,"cited_by_count":188},{"year":2025,"cited_by_count":141},{"year":2024,"cited_by_count":108},{"year":2023,"cited_by_count":85},{"year":2022,"cited_by_count":29},{"year":2021,"cited_by_count":9}],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2021-09-27T00:00:00"}
