{"id":"https://openalex.org/W7039111165","doi":null,"title":"Machine Learning for Anomaly Detection in Kernel Traces","display_name":"Machine Learning for Anomaly Detection in Kernel Traces","publication_year":2022,"publication_date":"2022-12-01","ids":{"openalex":"https://openalex.org/W7039111165"},"language":"fr","primary_location":{"id":"pmh:oai:publications.polymtl.ca:10708","doi":null,"is_oa":true,"landing_page_url":"https://publications.polymtl.ca/10708/","pdf_url":"https://publications.polymtl.ca/10708/1/2022_QuentinFournier.pdf","source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Fournier, Q. (2022). Machine Learning for Anomaly Detection in Kernel Traces [Ph.D. thesis, Polytechnique Montr\u00e9al].","raw_type":"http://purl.org/coar/resource_type/c_db06"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://publications.polymtl.ca/10708/1/2022_QuentinFournier.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Fournier, Quentin","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Fournier, Quentin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9761000275611877,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9761000275611877,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.01600000075995922,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.004999999888241291,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.9350000023841858},{"id":"https://openalex.org/keywords/web-server-performance","display_name":"web server performance","score":0.45500001311302185},{"id":"https://openalex.org/keywords/critical-path","display_name":"critical path","score":0.49799999594688416},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.3840000033378601},{"id":"https://openalex.org/keywords/network-anomaly-detection","display_name":"network anomaly detection","score":0.36500000953674316},{"id":"https://openalex.org/keywords/network-traffic-visualization","display_name":"network traffic visualization","score":0.9160000085830688}],"concepts":[{"id":"https://openalex.org/C15708023","wikidata":"https://www.wikidata.org/wiki/Q80083","display_name":"Humanities","level":1,"score":0.7394999861717224},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.41839998960494995},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31869998574256897},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.30660000443458557},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2768999934196472},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.2574000060558319},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.211899995803833},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.1647000014781952},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.16019999980926514},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.14380000531673431}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:publications.polymtl.ca:10708","doi":null,"is_oa":true,"landing_page_url":"https://publications.polymtl.ca/10708/","pdf_url":"https://publications.polymtl.ca/10708/1/2022_QuentinFournier.pdf","source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Fournier, Q. (2022). Machine Learning for Anomaly Detection in Kernel Traces [Ph.D. thesis, Polytechnique Montr\u00e9al].","raw_type":"http://purl.org/coar/resource_type/c_db06"}],"best_oa_location":{"id":"pmh:oai:publications.polymtl.ca:10708","doi":null,"is_oa":true,"landing_page_url":"https://publications.polymtl.ca/10708/","pdf_url":"https://publications.polymtl.ca/10708/1/2022_QuentinFournier.pdf","source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Fournier, Q. (2022). Machine Learning for Anomaly Detection in Kernel Traces [Ph.D. thesis, Polytechnique Montr\u00e9al].","raw_type":"http://purl.org/coar/resource_type/c_db06"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7039111165.pdf","grobid_xml":"https://content.openalex.org/works/W7039111165.grobid-xml"},"referenced_works_count":47,"referenced_works":["https://openalex.org/W1583776211","https://openalex.org/W1583912456","https://openalex.org/W1821462560","https://openalex.org/W2064274762","https://openalex.org/W2133369829","https://openalex.org/W2133564696","https://openalex.org/W2152893374","https://openalex.org/W2153131460","https://openalex.org/W2270070752","https://openalex.org/W2325237720","https://openalex.org/W2338908902","https://openalex.org/W2551087083","https://openalex.org/W2767094836","https://openalex.org/W2915716523","https://openalex.org/W2938704169","https://openalex.org/W2940744433","https://openalex.org/W2951025380","https://openalex.org/W2965373594","https://openalex.org/W2965658867","https://openalex.org/W2976023236","https://openalex.org/W2978017171","https://openalex.org/W3005714399","https://openalex.org/W3006439205","https://openalex.org/W3015468748","https://openalex.org/W3021293129","https://openalex.org/W3031696893","https://openalex.org/W3033529678","https://openalex.org/W3037932933","https://openalex.org/W3049039618","https://openalex.org/W3085139254","https://openalex.org/W3087547017","https://openalex.org/W3103334733","https://openalex.org/W3112689365","https://openalex.org/W3119866685","https://openalex.org/W3119997354","https://openalex.org/W3127742036","https://openalex.org/W3136363192","https://openalex.org/W3144557079","https://openalex.org/W3145511196","https://openalex.org/W3145602566","https://openalex.org/W3157506437","https://openalex.org/W3171649327","https://openalex.org/W3173365702","https://openalex.org/W3199174176","https://openalex.org/W3214373999","https://openalex.org/W4226399820","https://openalex.org/W4255949318"],"related_works":["https://openalex.org/W2947764527","https://openalex.org/W2605235322","https://openalex.org/W71895890","https://openalex.org/W7220454898","https://openalex.org/W6903936335","https://openalex.org/W2974135409","https://openalex.org/W4250186434","https://openalex.org/W6999883937","https://openalex.org/W6998603434","https://openalex.org/W6993159383"],"abstract_inverted_index":{"R\u00c9SUM\u00c9:":[0],"En":[1,23,114],"raison":[2],"de":[3,14,19,53,66,93,99,110,145,183,205,210,236,253,259,271,290,300,319,325,328,344,351,362,364],"l'\u00e9tendue":[4],"actuelle":[5],"des":[6,36,43,48,57,62,69,71,74,88,97,150,163,175,203,247,269,298,353],"syst\u00e8mes":[7,89,231],"informatiques,":[8],"il":[9],"existe":[10],"un":[11,119,134,143,359],"r\u00e9el":[12],"besoin":[13],"d\u00e9tecter":[15,256,345],"efficacement":[16],"toute":[17],"d\u00e9viation":[18],"leur":[20,265],"comportement":[21,87,182,245,324],"attendu.":[22],"effet,":[24],"les":[25,32,214,230,257,278,346],"interactions":[26,400],"complexes":[27],"entre":[28],"le":[29,86,124,158,170,181,191,195,244,287,323],"mat\u00e9riel":[30],"et":[31,39,56,73,82,136,142,147,224,250,281,314,322,350],"logiciels":[33],"entra\u00eenent":[34],"souvent":[35],"comportements":[37,44],"nouveaux":[38,54],"inattendus,":[40],"y":[41],"compris":[42],"courants":[45],"tels":[46,139],"que":[47,65,166,339],"mises":[49],"\u00e0":[50,149,162,189,295],"jour":[51],"logicielles,":[52],"utilisateurs":[55],"requ\u00eates":[58,151,248,347],"rares,":[59],"mais":[60],"aussi":[61],"anomalies":[63,427],"telles":[64,165],"mauvaises":[67],"configurations,":[68],"latences,":[70],"intrusions,":[72,432],"bogues.":[75],"Le":[76,172],"tra\u00e7age":[77],"est":[78,112,178,239,293,331,342],"une":[79,240,251],"approche":[80],"l\u00e9g\u00e8re":[81],"efficace":[83],"pour":[84,228,242,255],"enregistrer":[85],"informatiques":[90],"au":[91],"moment":[92],"l'ex\u00e9cution":[94],"en":[95,276,370],"collectant":[96],"\u00e9v\u00e9nements":[98],"bas":[100,272],"niveau":[101,273,303],"g\u00e9n\u00e9r\u00e9s":[102,122],"chaque":[103,291,326],"fois":[104],"qu'une":[105],"instruction":[106,457],"sp\u00e9cifique":[107],"appel\u00e9e":[108],"point":[109],"trace":[111],"ex\u00e9cut\u00e9e.":[113],"particulier,":[115],"cette":[116,237],"th\u00e8se":[117,238],"\u00e9tudie":[118],"sous-ensemble":[120],"d'\u00e9v\u00e9nements":[121],"par":[123],"noyau":[125,159,196,282],"Linux":[126,197,474,543],"appel\u00e9s":[127,304],"appels":[128,131,176,215],"syst\u00e8me.":[129],"Les":[130,309,334],"syst\u00e8me":[132,177,186,216],"comprennent":[133],"nom":[135],"plusieurs":[137],"arguments":[138],"qu'un":[140],"horodatage":[141],"identifiant":[144],"processus,":[146],"correspondent":[148],"d'applications":[152],"s'ex\u00e9cutant":[153],"dans":[154],"l'espace":[155],"utilisateur":[156,280],"vers":[157],"afin":[160],"d'acc\u00e9der":[161],"ressources":[164],"la":[167,218,221,225,317],"m\u00e9moire":[168],"ou":[169],"r\u00e9seau.":[171],"principal":[173],"avantage":[174],"qu'ils":[179],"exposent":[180],"l'ensemble":[184],"du":[185,283],"sans":[187],"avoir":[188],"modifier":[190],"code":[192],"source,":[193],"car":[194],"a":[198,367,385,437,455,467,482,489,492,578,589,682],"d\u00e9j\u00e0":[199],"\u00e9t\u00e9":[200,368],"instrument\u00e9":[201],"avec":[202],"points":[204],"trace.":[206],"De":[207],"nos":[208],"jours,":[209],"nombreux":[211],"chercheurs":[212],"consid\u00e8rent":[213],"comme":[217],"source":[219,539,564],"d'informations":[220],"plus":[222,226,301],"d\u00e9taill\u00e9e":[223],"pr\u00e9cise":[227],"analyser":[229],"informatiques.":[232],"La":[233],"premi\u00e8re":[234],"contribution":[235,573],"m\u00e9thode":[241],"extraire":[243],"interne":[246],"Web":[249,348],"cha\u00eene":[252],"traitement":[254],"probl\u00e8mes":[258],"performances":[260],"qui":[261],"permet":[262],"\u00e9galement":[263],"d'identifier":[264],"cause.":[266,602],"Tout":[267],"d'abord,":[268],"informations":[270,354],"sont":[274,307,312],"collect\u00e9es":[275],"tra\u00e7ant":[277],"espaces":[279],"serveur":[284],"Web.":[285],"Ensuite,":[286],"chemin":[288],"critique":[289],"requ\u00eate":[292],"calcul\u00e9":[294],"partir":[296],"duquel":[297],"attributs":[299],"haut":[302],"\u00e9tats":[305],"d'ex\u00e9cution":[306],"extraits.":[308],"valeurs":[310,329],"aberrantes":[311,330],"d\u00e9tect\u00e9es":[313],"regroup\u00e9es":[315],"sur":[316,355],"base":[318],"ces":[320],"caract\u00e9ristiques,":[321],"groupe":[327],"analys\u00e9":[332],"s\u00e9par\u00e9ment.":[333],"exp\u00e9riences":[335],"r\u00e9alis\u00e9es":[336],"ont":[337],"r\u00e9v\u00e9l\u00e9":[338],"ce":[340],"pipeline":[341,590,664],"capable":[343],"lentes":[349],"fournir":[352],"leurs":[356],"causes.":[357,680],"Notamment,":[358],"v\u00e9ritable":[360],"probl\u00e8me":[361],"conflit":[363],"cache":[365],"PHP":[366],"d\u00e9couvert":[369],"utilisant":[371],"l'approche":[372],"propos\u00e9e.":[373],"ABSTRACT:":[374],"Due":[375],"to":[376,388,440,497,505,510,536,557,567,580,591,667],"the":[377,442,473,503,506,528,531,538,542,559,582,612,618,622,650],"current":[378],"extent":[379],"of":[380,444,469,521,530,565,574,585,617,625,652,655],"computer":[381,445,569],"systems,":[382],"there":[383],"is":[384,436,460,524,608,628,657,665],"genuine":[386],"need":[387],"effectively":[389],"and":[390,403,409,421,433,484,491,495,562,588,605,614,642,649,672],"efficiently":[391],"detect":[392,592,668],"deviations":[393],"from":[394,499,630],"their":[395,600,677],"expected":[396],"behavior.":[397],"Indeed,":[398],"complex":[399],"between":[401],"hardware":[402],"software":[404,417],"often":[405],"result":[406],"in":[407,502,508],"novel":[408],"unexpected":[410],"behaviors,":[411],"including":[412],"common":[413],"behaviors":[414],"such":[415,428,487,513],"as":[416,424,426,429,488,514,541],"updates,":[418],"new":[419],"users,":[420],"rare":[422],"queries,":[423],"well":[425],"misconfigurations,":[430],"latency,":[431],"bugs.":[434],"Tracing":[435],"lightweight":[438],"approach":[439],"recording":[441],"behavior":[443,529,584,651],"systems":[446],"at":[447],"runtime":[448],"by":[449,472,610],"collecting":[450],"low-level":[451,604],"events":[452,470],"generated":[453,471],"whenever":[454],"specific":[456],"called":[458,476,634],"tracepoint":[459],"executed.":[461],"This":[462],"research":[463],"focuses":[464],"mainly":[465],"on":[466,645],"subset":[468],"kernel":[475,507,544,615],"system":[477,522,533,555],"calls.":[478],"System":[479],"calls":[480,523,556],"comprise":[481],"name":[483],"multiple":[485],"arguments,":[486],"timestamp":[490],"process":[493],"id,":[494],"correspond":[496],"requests":[498,587,671],"applications":[500],"running":[501],"userspace":[504],"order":[509],"access":[511],"resources":[512],"memory":[515],"or":[516],"network.":[517],"The":[518,571],"main":[519],"benefit":[520],"that":[525,595,662],"they":[526],"expose":[527],"whole":[532],"without":[534],"having":[535],"modify":[537],"code,":[540],"has":[545],"already":[546],"been":[547],"instrumented":[548],"with":[549],"tracepoints.":[550],"Nowadays,":[551],"many":[552],"researchers":[553],"consider":[554],"be":[558],"most":[560],"fine-grained":[561,606],"accurate":[563],"information":[566,607],"investigate":[568],"systems.":[570],"first":[572],"this":[575,663],"thesis":[576],"introduces":[577],"method":[579],"extract":[581],"internal":[583],"web":[586,619,670],"performance":[593],"issues":[594],"also":[596],"provide":[597,673],"insights":[598,675],"into":[599,676],"root":[601,679],"First,":[603],"collected":[609],"tracing":[611],"user":[613],"spaces":[616],"server.":[620],"Then,":[621],"critical":[623],"path":[624],"each":[626,653],"request":[627],"computed":[629],"which":[631],"higher-level":[632],"features":[633],"execution":[635],"states":[636],"are":[637,640],"extracted.":[638],"Outliers":[639],"detected":[641],"clustered":[643],"based":[644],"these":[646],"handcrafted":[647],"features,":[648],"group":[654],"outliers":[656],"analyzed":[658],"separately.":[659],"Experiments":[660],"revealed":[661],"able":[666],"slow":[669],"additional":[674],"true":[678],"Notably,":[681],"real":[683],"PHPcache":[684],"contention":[685],"issue":[686],"was":[687],"discovered":[688],"using":[689],"our":[690],"proposed":[691],"approach.":[692]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2025-10-10T00:00:00"}