{"id":"https://openalex.org/W7223373627","doi":"https://doi.org/10.3390/math14213866","title":"A Mathematical Modeling Framework for Semantic\u2013Temporal Graph Learning in Log Anomaly Detection","display_name":"A Mathematical Modeling Framework for Semantic\u2013Temporal Graph Learning in Log Anomaly Detection","publication_year":2026,"publication_date":"2026-10-23","ids":{"openalex":"https://openalex.org/W7223373627","doi":"https://doi.org/10.3390/math14213866"},"language":"en","primary_location":{"id":"doi:10.3390/math14213866","doi":"https://doi.org/10.3390/math14213866","is_oa":true,"landing_page_url":"https://doi.org/10.3390/math14213866","pdf_url":null,"source":{"id":"https://openalex.org/S4210192031","display_name":"Mathematics","issn_l":"2227-7390","issn":["2227-7390"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","poland-20","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mathematics","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.3390/math14213866","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089002209","display_name":"Shuo Gao","orcid":"https://orcid.org/0000-0003-3096-4700","observed_orcids":["https://orcid.org/0000-0003-3096-4700","https://orcid.org/0009-0009-7639-5137","https://orcid.org/0009-0007-2472-2816"]},"institutions":[{"id":"https://openalex.org/I90259746","display_name":"Capital University of Economics and Business","ror":"https://ror.org/01r5sf951","country_code":"CN","type":"education","lineage":["https://openalex.org/I90259746"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuo Gao","raw_affiliation_strings":["School of Management Engineering, Capital University of Economics and Business, Beijing 100070, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Management Engineering, Capital University of Economics and Business, Beijing 100070, China","institution_ids":["https://openalex.org/I90259746"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5159299697","display_name":"Xiaoyan Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I176432857","display_name":"Beijing Wuzi University","ror":"https://ror.org/00bd1d647","country_code":"CN","type":"education","lineage":["https://openalex.org/I176432857"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xiaoyan Wang","raw_affiliation_strings":["School of System Science and Statistics, Beijing Wuzi University, Beijing 101149, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of System Science and Statistics, Beijing Wuzi University, Beijing 101149, China","institution_ids":["https://openalex.org/I176432857"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5159299697"],"corresponding_institution_ids":["https://openalex.org/I176432857"],"apc_list":{"value":2600,"currency":"CHF","value_usd":3137},"apc_paid":{"value":2600,"currency":"CHF","value_usd":3137},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.7941531,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":"21","first_page":"3866","last_page":"3866"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/log-based-anomaly-detection","display_name":"log anomaly detection","score":0.996999979019165},{"id":"https://openalex.org/keywords/system-logs","display_name":"system logs","score":0.6629999876022339},{"id":"https://openalex.org/keywords/graph-attention-networks","display_name":"graph attention networks","score":0.6290000081062317},{"id":"https://openalex.org/keywords/attributed-networks","display_name":"attributed graphs","score":0.6129999756813049},{"id":"https://openalex.org/keywords/temporal-graph-learning","display_name":"temporal graph learning","score":0.5130000114440918},{"id":"https://openalex.org/keywords/class-imbalance","display_name":"class imbalance","score":0.7369999885559082},{"id":"https://openalex.org/keywords/bert-embeddings","display_name":"BERT embeddings","score":0.5040000081062317},{"id":"https://openalex.org/keywords/distributed-systems","display_name":"distributed systems","score":0.6520000100135803},{"id":"https://openalex.org/keywords/hadoop-distributed-file-system","display_name":"HDFS","score":0.5950000286102295},{"id":"https://openalex.org/keywords/bgl","display_name":"BGL","score":0.7379999756813049},{"id":"https://openalex.org/keywords/thunderbird","display_name":"Thunderbird","score":0.9869999885559082}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6431999802589417},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6087999939918518},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.6011999845504761},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.48669999837875366},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4596000015735626},{"id":"https://openalex.org/C176225458","wikidata":"https://www.wikidata.org/wiki/Q595971","display_name":"Graph database","level":3,"score":0.39469999074935913},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.385699987411499},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.3492000102996826},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3312000036239624},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3253999948501587},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3197999894618988},{"id":"https://openalex.org/C176809094","wikidata":"https://www.wikidata.org/wiki/Q15401496","display_name":"Traverse","level":2,"score":0.31869998574256897},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3037000000476837},{"id":"https://openalex.org/C90312973","wikidata":"https://www.wikidata.org/wiki/Q7449052","display_name":"Semantic data model","level":2,"score":0.28839999437332153},{"id":"https://openalex.org/C118930307","wikidata":"https://www.wikidata.org/wiki/Q600590","display_name":"Tuple","level":2,"score":0.28220000863075256},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.27649998664855957},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2696000039577484},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.2653999924659729},{"id":"https://openalex.org/C36382193","wikidata":"https://www.wikidata.org/wiki/Q7068966","display_name":"Null model","level":2,"score":0.2621999979019165},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.2563999891281128},{"id":"https://openalex.org/C56654003","wikidata":"https://www.wikidata.org/wiki/Q7858715","display_name":"Two-graph","level":5,"score":0.2533000111579895},{"id":"https://openalex.org/C76444178","wikidata":"https://www.wikidata.org/wiki/Q72897900","display_name":"Connectivity","level":3,"score":0.2522999942302704},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.2515000104904175}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3390/math14213866","doi":"https://doi.org/10.3390/math14213866","is_oa":true,"landing_page_url":"https://doi.org/10.3390/math14213866","pdf_url":null,"source":{"id":"https://openalex.org/S4210192031","display_name":"Mathematics","issn_l":"2227-7390","issn":["2227-7390"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","poland-20","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mathematics","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3390/math14213866","doi":"https://doi.org/10.3390/math14213866","is_oa":true,"landing_page_url":"https://doi.org/10.3390/math14213866","pdf_url":null,"source":{"id":"https://openalex.org/S4210192031","display_name":"Mathematics","issn_l":"2227-7390","issn":["2227-7390"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","poland-20","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mathematics","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2039157918","https://openalex.org/W2107263349","https://openalex.org/W2754665629","https://openalex.org/W2767094836","https://openalex.org/W2947815220","https://openalex.org/W2963341956","https://openalex.org/W3199174176","https://openalex.org/W4205965165","https://openalex.org/W4226289522","https://openalex.org/W4383174304","https://openalex.org/W4388212317","https://openalex.org/W4389304845","https://openalex.org/W4390693945","https://openalex.org/W4391235307","https://openalex.org/W4394745427","https://openalex.org/W4394987717","https://openalex.org/W4401113920","https://openalex.org/W4402638818","https://openalex.org/W4404953656","https://openalex.org/W4406970425","https://openalex.org/W4407056396","https://openalex.org/W4408353705","https://openalex.org/W4408568331","https://openalex.org/W4414126118","https://openalex.org/W4414993542","https://openalex.org/W4416251915","https://openalex.org/W4416946720","https://openalex.org/W7123735605","https://openalex.org/W7124457284","https://openalex.org/W7138915700"],"related_works":["https://openalex.org/W4393079429","https://openalex.org/W7155066317","https://openalex.org/W4296413500","https://openalex.org/W7215236612","https://openalex.org/W4416234908","https://openalex.org/W4307873062","https://openalex.org/W3161236358","https://openalex.org/W4402393692","https://openalex.org/W4391423880","https://openalex.org/W4392154758"],"abstract_inverted_index":{"System":[0],"logs":[1],"provide":[2],"valuable":[3],"information":[4],"for":[5,57,68],"monitoring":[6],"system":[7],"states,":[8],"identifying":[9],"failures,":[10],"and":[11,29,84,93,119,136,159,169,188],"detecting":[12],"anomalous":[13,126],"behaviour":[14],"in":[15,131],"large-scale":[16],"distributed":[17],"computing":[18],"systems.":[19],"However,":[20],"their":[21],"unstructured":[22],"text,":[23],"complex":[24],"semantic":[25,87,102,117,158],"dependencies,":[26,90],"temporal":[27,91,120,160],"variation,":[28],"severe":[30,196],"class":[31,197],"imbalance":[32],"limit":[33],"conventional":[34],"methods":[35],"based":[36],"on":[37,166],"event":[38,89],"templates,":[39],"sequence":[40],"statistics,":[41],"or":[42],"shallow":[43],"features.":[44],"To":[45,122],"address":[46],"these":[47],"challenges,":[48],"this":[49],"study":[50],"proposes":[51],"a":[52,80,143],"unified":[53],"mathematical":[54],"modelling":[55,187],"framework":[56,73],"log":[58,77,105,109,176],"anomaly":[59,124,177,189],"detection,":[60],"instantiated":[61],"as":[62,79],"the":[63,132,139,155],"Conditional":[64],"Graph":[65],"Attention":[66],"Transformer":[67],"Log":[69],"Analysis":[70],"(CGATLog).":[71],"The":[72,180],"represents":[74],"temporally":[75],"ordered":[76],"observations":[78],"weighted":[81,108],"attributed":[82],"graph":[83,110,133,141,150,186],"jointly":[85],"models":[86],"representations,":[88],"associations,":[92],"minority-class":[94],"distributions.":[95],"A":[96,107,147],"BERT-Transformer":[97],"encoder":[98],"first":[99],"extracts":[100],"contextual":[101],"representations":[103,128],"from":[104,114],"entries.":[106],"is":[111],"then":[112],"constructed":[113],"event-transition":[115],"relationships,":[116],"similarity,":[118],"proximity.":[121],"alleviate":[123],"scarcity,":[125],"node":[127],"are":[129],"generated":[130],"embedding":[134],"space":[135],"connected":[137],"to":[138],"original":[140],"through":[142],"learnable":[144],"edge-relation":[145],"predictor.":[146],"semantic\u2013temporal":[148,185],"gated":[149],"attention":[151],"mechanism":[152],"further":[153],"regulates":[154],"contributions":[156],"of":[157],"associations":[161],"during":[162],"neighbourhood":[163],"aggregation.":[164],"Experiments":[165],"HDFS,":[167],"BGL,":[168],"Thunderbird":[170],"show":[171],"that":[172,184],"CGATLog":[173],"achieves":[174],"competitive":[175],"detection":[178],"performance.":[179],"results":[181],"also":[182],"confirm":[183],"sample":[190],"augmentation":[191],"improve":[192],"robustness,":[193],"particularly":[194],"under":[195],"imbalance.":[198]},"counts_by_year":[],"updated_date":"2026-10-30T12:39:25.321706","created_date":"2026-10-24T00:00:00"}