{"id":"https://openalex.org/W4409916700","doi":"https://doi.org/10.1109/access.2025.3565220","title":"Anomaly Detection and Root Cause Analysis in Cloud-Native Environments Using Large Language Models and Bayesian Networks","display_name":"Anomaly Detection and Root Cause Analysis in Cloud-Native Environments Using Large Language Models and Bayesian Networks","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4409916700","doi":"https://doi.org/10.1109/access.2025.3565220"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3565220","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565220","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3565220","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070784082","display_name":"Diego Frazatto Pedroso","orcid":null},"institutions":[{"id":"https://openalex.org/I4210092357","display_name":"Institute of Mathematics and Computer Science","ror":"https://ror.org/00fy4at53","country_code":"MD","type":"facility","lineage":["https://openalex.org/I112090838","https://openalex.org/I4210092357"]},{"id":"https://openalex.org/I4210131883","display_name":"Brazilian Society of Computational and Applied Mathematics","ror":"https://ror.org/03kcw4w74","country_code":"BR","type":"other","lineage":["https://openalex.org/I4210131883"]}],"countries":["BR","MD"],"is_corresponding":false,"raw_author_name":"Diego Frazatto Pedroso","raw_affiliation_strings":["ICMC-Institute of Mathematical and Computer Sciences, University of São Paulo (USP), São Carlos, Brazil","USP - University of São Paulo, ICMC - Institute of Mathematical and Computer Sciences, São Carlos, Brazil"],"raw_orcid":"https://orcid.org/0009-0002-5871-675X","affiliations":[{"raw_affiliation_string":"ICMC-Institute of Mathematical and Computer Sciences, University of São Paulo (USP), São Carlos, Brazil","institution_ids":["https://openalex.org/I4210092357"]},{"raw_affiliation_string":"USP - University of São Paulo, ICMC - Institute of Mathematical and Computer Sciences, São Carlos, Brazil","institution_ids":["https://openalex.org/I4210131883"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Lu\u00eds Almeida","orcid":"https://orcid.org/0009-0004-0705-1801"},"institutions":[{"id":"https://openalex.org/I182534213","display_name":"Universidade do Porto","ror":"https://ror.org/043pwc612","country_code":"PT","type":"education","lineage":["https://openalex.org/I182534213"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Lu\u00eds Almeida","raw_affiliation_strings":["Department of Computer Science, FCUP-Faculty of Sciences of the University of Porto, Porto, Portugal","FCUP - Faculty of Sciences of the University of Porto, Porto, Portugal"],"raw_orcid":"https://orcid.org/0009-0004-0705-1801","affiliations":[{"raw_affiliation_string":"Department of Computer Science, FCUP-Faculty of Sciences of the University of Porto, Porto, Portugal","institution_ids":["https://openalex.org/I182534213"]},{"raw_affiliation_string":"FCUP - Faculty of Sciences of the University of Porto, Porto, Portugal","institution_ids":["https://openalex.org/I182534213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093220246","display_name":"Lucas Eduardo Gulka Pulcinelli","orcid":"https://orcid.org/0000-0001-9120-8584"},"institutions":[{"id":"https://openalex.org/I4210092357","display_name":"Institute of Mathematics and Computer Science","ror":"https://ror.org/00fy4at53","country_code":"MD","type":"facility","lineage":["https://openalex.org/I112090838","https://openalex.org/I4210092357"]},{"id":"https://openalex.org/I4210131883","display_name":"Brazilian Society of Computational and Applied Mathematics","ror":"https://ror.org/03kcw4w74","country_code":"BR","type":"other","lineage":["https://openalex.org/I4210131883"]}],"countries":["BR","MD"],"is_corresponding":false,"raw_author_name":"Lucas Eduardo Gulka Pulcinelli","raw_affiliation_strings":["ICMC-Institute of Mathematical and Computer Sciences, University of São Paulo (USP), São Carlos, Brazil","USP - University of São Paulo, ICMC - Institute of Mathematical and Computer Sciences, São Carlos, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ICMC-Institute of Mathematical and Computer Sciences, University of São Paulo (USP), São Carlos, Brazil","institution_ids":["https://openalex.org/I4210092357"]},{"raw_affiliation_string":"USP - University of São Paulo, ICMC - Institute of Mathematical and Computer Sciences, São Carlos, Brazil","institution_ids":["https://openalex.org/I4210131883"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047504072","display_name":"William Akihiro Alves Aisawa","orcid":"https://orcid.org/0000-0002-8627-9350"},"institutions":[{"id":"https://openalex.org/I4210092357","display_name":"Institute of Mathematics and Computer Science","ror":"https://ror.org/00fy4at53","country_code":"MD","type":"facility","lineage":["https://openalex.org/I112090838","https://openalex.org/I4210092357"]},{"id":"https://openalex.org/I4210131883","display_name":"Brazilian Society of Computational and Applied Mathematics","ror":"https://ror.org/03kcw4w74","country_code":"BR","type":"other","lineage":["https://openalex.org/I4210131883"]}],"countries":["BR","MD"],"is_corresponding":false,"raw_author_name":"William Akihiro Alves Aisawa","raw_affiliation_strings":["ICMC-Institute of Mathematical and Computer Sciences, University of São Paulo (USP), São Carlos, Brazil","USP - University of São Paulo, ICMC - Institute of Mathematical and Computer Sciences, São Carlos, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-8627-9350","affiliations":[{"raw_affiliation_string":"ICMC-Institute of Mathematical and Computer Sciences, University of São Paulo (USP), São Carlos, Brazil","institution_ids":["https://openalex.org/I4210092357"]},{"raw_affiliation_string":"USP - University of São Paulo, ICMC - Institute of Mathematical and Computer Sciences, São Carlos, Brazil","institution_ids":["https://openalex.org/I4210131883"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049291048","display_name":"In\u00eas Dutra","orcid":"https://orcid.org/0000-0002-3578-7769"},"institutions":[{"id":"https://openalex.org/I182534213","display_name":"Universidade do Porto","ror":"https://ror.org/043pwc612","country_code":"PT","type":"education","lineage":["https://openalex.org/I182534213"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"In\u00eas Dutra","raw_affiliation_strings":["Department of Computer Science, FCUP-Faculty of Sciences of the University of Porto, Porto, Portugal","FCUP - Faculty of Sciences of the University of Porto, Porto, Portugal"],"raw_orcid":"https://orcid.org/0000-0002-3578-7769","affiliations":[{"raw_affiliation_string":"Department of Computer Science, FCUP-Faculty of Sciences of the University of Porto, Porto, Portugal","institution_ids":["https://openalex.org/I182534213"]},{"raw_affiliation_string":"FCUP - Faculty of Sciences of the University of Porto, Porto, Portugal","institution_ids":["https://openalex.org/I182534213"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088766636","display_name":"Sarita Mazzini Bruschi","orcid":"https://orcid.org/0000-0003-4011-8583"},"institutions":[{"id":"https://openalex.org/I4210092357","display_name":"Institute of Mathematics and Computer Science","ror":"https://ror.org/00fy4at53","country_code":"MD","type":"facility","lineage":["https://openalex.org/I112090838","https://openalex.org/I4210092357"]},{"id":"https://openalex.org/I4210131883","display_name":"Brazilian Society of Computational and Applied Mathematics","ror":"https://ror.org/03kcw4w74","country_code":"BR","type":"other","lineage":["https://openalex.org/I4210131883"]}],"countries":["BR","MD"],"is_corresponding":false,"raw_author_name":"Sarita Mazzini Bruschi","raw_affiliation_strings":["ICMC-Institute of Mathematical and Computer Sciences, University of São Paulo (USP), São Carlos, Brazil","USP - University of São Paulo, ICMC - Institute of Mathematical and Computer Sciences, São Carlos, Brazil"],"raw_orcid":"https://orcid.org/0000-0003-4011-8583","affiliations":[{"raw_affiliation_string":"ICMC-Institute of Mathematical and Computer Sciences, University of São Paulo (USP), São Carlos, Brazil","institution_ids":["https://openalex.org/I4210092357"]},{"raw_affiliation_string":"USP - University of São Paulo, ICMC - Institute of Mathematical and Computer Sciences, São Carlos, Brazil","institution_ids":["https://openalex.org/I4210131883"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2075,"currency":"USD","value_usd":2075},"apc_paid":{"value":2075,"currency":"USD","value_usd":2075},"fwci":7.0697,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.97079927,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"13","issue":null,"first_page":"77550","last_page":"77564"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9825000166893005,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9825000166893005,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9327999949455261,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7379047274589539},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6527807116508484},{"id":"https://openalex.org/keywords/bayesian-network","display_name":"Bayesian network","score":0.5949900150299072},{"id":"https://openalex.org/keywords/root-cause-analysis","display_name":"Root cause analysis","score":0.5556245446205139},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5477754473686218},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.47354239225387573},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.4188724160194397},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3652990162372589},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3349211812019348},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.07068571448326111},{"id":"https://openalex.org/keywords/reliability-engineering","display_name":"Reliability engineering","score":0.06623950600624084}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7379047274589539},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6527807116508484},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.5949900150299072},{"id":"https://openalex.org/C130963320","wikidata":"https://www.wikidata.org/wiki/Q1401207","display_name":"Root cause analysis","level":2,"score":0.5556245446205139},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5477754473686218},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.47354239225387573},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.4188724160194397},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3652990162372589},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3349211812019348},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.07068571448326111},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.06623950600624084},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2025.3565220","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565220","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:003248245","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ACCESS.2025.3565220","pdf_url":null,"source":{"id":"https://openalex.org/S4306402641","display_name":"LA Referencia (Red Federada de Repositorios Institucionales de Publicaciones Cient\u00edficas)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4383465926","host_organization_name":"LA Referencia","host_organization_lineage":["https://openalex.org/I4383465926"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"instacron:USP","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:8de4024a7a26476487e69e8e579c3f47","is_oa":true,"landing_page_url":"https://doaj.org/article/8de4024a7a26476487e69e8e579c3f47","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 77550-77564 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3565220","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565220","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2789238333","display_name":"Trends on high performance computing, from resource management to new computer architectures","funder_award_id":"19/26702-8","funder_id":"https://openalex.org/F4320320997","funder_display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de S\u00e3o Paulo"}],"funders":[{"id":"https://openalex.org/F4320320997","display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de S\u00e3o Paulo","ror":"https://ror.org/02ddkpn78"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W2772620242","https://openalex.org/W3199174176","https://openalex.org/W4205965165","https://openalex.org/W4388483869","https://openalex.org/W4391235307","https://openalex.org/W4399338583","https://openalex.org/W4403390336","https://openalex.org/W4405755985","https://openalex.org/W4406354830","https://openalex.org/W4406458335","https://openalex.org/W6747798603","https://openalex.org/W6776148200","https://openalex.org/W6856926427","https://openalex.org/W6868980394","https://openalex.org/W6870141625","https://openalex.org/W6873110942","https://openalex.org/W6873295377","https://openalex.org/W6873733004","https://openalex.org/W6875549190"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"Cloud":[0],"computing":[1],"technologies":[2],"offer":[3,84],"significant":[4],"advantages":[5],"in":[6,45,67],"scalability":[7],"and":[8,35,112,142,181,211],"performance,":[9],"enabling":[10],"rapid":[11],"deployment":[12],"of":[13,17,29,48,51,59,70,139,185],"applications.":[14],"The":[15,119,215],"adoption":[16],"microservices-oriented":[18],"architectures":[19],"has":[20],"introduced":[21],"an":[22,26,62,116,132,155],"ecosystem":[23],"characterized":[24],"by":[25,115,159,193],"increased":[27],"number":[28],"applications,":[30],"frameworks,":[31],"abstraction":[32],"layers,":[33],"orchestrators,":[34],"hypervisors,":[36],"all":[37,224],"operating":[38],"within":[39,92,246],"distributed":[40],"systems.":[41],"This":[42],"complexity":[43],"results":[44,217],"the":[46,57,68,160,174,177,183,194,203,208,219],"generation":[47],"vast":[49],"quantities":[50],"logs":[52],"from":[53],"diverse":[54],"sources,":[55],"making":[56],"analysis":[58],"these":[60,93],"events":[61,226],"inherently":[63],"challenging":[64],"task,":[65],"particularly":[66],"absence":[69],"automation.":[71],"To":[72],"address":[73],"this":[74,96],"issue,":[75],"Machine":[76],"Learning":[77],"techniques":[78],"leveraging":[79],"Large":[80],"Language":[81],"Models":[82],"(LLMs)":[83],"a":[85,100,106,146,165,190],"promising":[86],"approach":[87],"for":[88],"dynamically":[89],"identifying":[90,223],"patterns":[91],"events.":[94],"In":[95],"study,":[97],"we":[98,163],"propose":[99],"novel":[101],"anomaly":[102,156],"detection":[103],"framework":[104],"utilizing":[105],"microservices":[107],"architecture":[108],"deployed":[109],"on":[110,123],"Kubernetes":[111],"Istio,":[113],"enhanced":[114],"LLM":[117,161,196],"model.":[118],"model":[120,197],"was":[121],"trained":[122],"various":[124,228],"error":[125,133,225],"scenarios,":[126],"with":[127,202],"Chaos":[128],"Mesh":[129],"employed":[130],"as":[131,145],"injection":[134],"tool":[135],"to":[136,149,169,200],"simulate":[137],"faults":[138],"different":[140],"natures,":[141],"Locust":[143],"used":[144],"load":[147],"generator":[148],"create":[150],"workload":[151],"stress":[152],"conditions.":[153],"After":[154],"is":[157],"detected":[158,209],"model,":[162],"employ":[164],"dynamic":[166],"Bayesian":[167],"network":[168],"provide":[170],"probabilistic":[171],"inferences":[172],"about":[173,207],"incident,":[175,210],"proving":[176],"relationships":[178],"between":[179],"components":[180],"assessing":[182],"degree":[184],"impact":[186],"among":[187],"them.":[188],"Additionally,":[189],"ChatBot":[191],"powered":[192],"same":[195],"allows":[198],"users":[199],"interact":[201],"AI,":[204],"ask":[205],"questions":[206],"gain":[212],"deeper":[213],"insights.":[214],"experimental":[216],"demonstrated":[218],"model\u2019s":[220],"effectiveness,":[221],"reliably":[222],"across":[227],"test":[229],"scenarios.":[230],"While":[231],"it":[232,238],"successfully":[233],"avoided":[234],"missing":[235],"any":[236],"anomalies,":[237],"did":[239],"produce":[240],"some":[241],"false":[242],"positives,":[243],"which":[244],"remain":[245],"acceptable":[247],"limits.":[248]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":4}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}