{"id":"https://openalex.org/W7125597760","doi":"https://doi.org/10.1109/access.2026.3656892","title":"LogDEC: Unsupervised Log Anomaly Detection in Complex IT Environments Using Deep Embedded Clustering and Sequential Models","display_name":"LogDEC: Unsupervised Log Anomaly Detection in Complex IT Environments Using Deep Embedded Clustering and Sequential Models","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7125597760","doi":"https://doi.org/10.1109/access.2026.3656892"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3656892","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3656892","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3656892","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045390735","display_name":"Markus F\u00e4lt","orcid":null},"institutions":[{"id":"https://openalex.org/I56475706","display_name":"Mid Sweden University","ror":"https://ror.org/019k1pd13","country_code":"SE","type":"education","lineage":["https://openalex.org/I56475706"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Markus F\u00e4lt","raw_affiliation_strings":["Department of Computer and Electrical Engineering, Mid Sweden University, Sundsvall, Sweden"],"affiliations":[{"raw_affiliation_string":"Department of Computer and Electrical Engineering, Mid Sweden University, Sundsvall, Sweden","institution_ids":["https://openalex.org/I56475706"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072795169","display_name":"Qing He","orcid":null},"institutions":[{"id":"https://openalex.org/I56475706","display_name":"Mid Sweden University","ror":"https://ror.org/019k1pd13","country_code":"SE","type":"education","lineage":["https://openalex.org/I56475706"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Qing He","raw_affiliation_strings":["Department of Computer and Electrical Engineering, Mid Sweden University, Sundsvall, Sweden"],"affiliations":[{"raw_affiliation_string":"Department of Computer and Electrical Engineering, Mid Sweden University, Sundsvall, Sweden","institution_ids":["https://openalex.org/I56475706"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044064820","display_name":"Stefan Forsstr\u00f6m","orcid":"https://orcid.org/0000-0002-1797-1095"},"institutions":[{"id":"https://openalex.org/I56475706","display_name":"Mid Sweden University","ror":"https://ror.org/019k1pd13","country_code":"SE","type":"education","lineage":["https://openalex.org/I56475706"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Stefan Forsstr\u00f6m","raw_affiliation_strings":["Department of Computer and Electrical Engineering, Mid Sweden University, Sundsvall, Sweden"],"affiliations":[{"raw_affiliation_string":"Department of Computer and Electrical Engineering, Mid Sweden University, Sundsvall, Sweden","institution_ids":["https://openalex.org/I56475706"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5123773094","display_name":"Tingting Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I56475706","display_name":"Mid Sweden University","ror":"https://ror.org/019k1pd13","country_code":"SE","type":"education","lineage":["https://openalex.org/I56475706"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Tingting Zhang","raw_affiliation_strings":["Department of Computer and Electrical Engineering, Mid Sweden University, Sundsvall, Sweden"],"affiliations":[{"raw_affiliation_string":"Department of Computer and Electrical Engineering, Mid Sweden University, Sundsvall, Sweden","institution_ids":["https://openalex.org/I56475706"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5045390735"],"corresponding_institution_ids":["https://openalex.org/I56475706"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.15641496,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"19030","last_page":"19040"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.00139999995008111,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.7124000191688538},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7024000287055969},{"id":"https://openalex.org/keywords/observability","display_name":"Observability","score":0.5325000286102295},{"id":"https://openalex.org/keywords/dimensionality-reduction","display_name":"Dimensionality reduction","score":0.5194000005722046},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.5077999830245972},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.445499986410141},{"id":"https://openalex.org/keywords/curse-of-dimensionality","display_name":"Curse of dimensionality","score":0.42239999771118164},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.4027000069618225}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.794700026512146},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.7124000191688538},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7024000287055969},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6395000219345093},{"id":"https://openalex.org/C36299963","wikidata":"https://www.wikidata.org/wiki/Q1369844","display_name":"Observability","level":2,"score":0.5325000286102295},{"id":"https://openalex.org/C70518039","wikidata":"https://www.wikidata.org/wiki/Q16000077","display_name":"Dimensionality reduction","level":2,"score":0.5194000005722046},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5077999830245972},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5005000233650208},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.445499986410141},{"id":"https://openalex.org/C111030470","wikidata":"https://www.wikidata.org/wiki/Q1430460","display_name":"Curse of dimensionality","level":2,"score":0.42239999771118164},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.4027000069618225},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.39100000262260437},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.37700000405311584},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3718000054359436},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.361299991607666},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.36079999804496765},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3249000012874603},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.30480000376701355},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.29989999532699585},{"id":"https://openalex.org/C184509293","wikidata":"https://www.wikidata.org/wiki/Q5136711","display_name":"Clustering high-dimensional data","level":3,"score":0.28439998626708984},{"id":"https://openalex.org/C164866538","wikidata":"https://www.wikidata.org/wiki/Q367351","display_name":"Cluster (spacecraft)","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C149490388","wikidata":"https://www.wikidata.org/wiki/Q1718507","display_name":"Sequential Pattern Mining","level":2,"score":0.2759999930858612},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.26579999923706055},{"id":"https://openalex.org/C18555067","wikidata":"https://www.wikidata.org/wiki/Q8375051","display_name":"Joint (building)","level":2,"score":0.2524000108242035}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2026.3656892","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3656892","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:DiVA.org:miun-56543","is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:miun:diva-56543","pdf_url":null,"source":{"id":"https://openalex.org/S4306401559","display_name":"KTH Publication Database DiVA (KTH Royal Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:doaj.org/article:d3ab5b5c3ed84d74b05a596d5a4c9a6c","is_oa":true,"landing_page_url":"https://doaj.org/article/d3ab5b5c3ed84d74b05a596d5a4c9a6c","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 19030-19040 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3656892","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3656892","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6871953010559082,"id":"https://metadata.un.org/sdg/8","display_name":"Decent work and economic growth"}],"awards":[{"id":"https://openalex.org/G2436606424","display_name":null,"funder_award_id":"20373282","funder_id":"https://openalex.org/F4320337753","funder_display_name":"Interreg"}],"funders":[{"id":"https://openalex.org/F4320337753","display_name":"Interreg","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"In":[0],"today’s":[1],"complex":[2],"IT":[3],"environments,":[4],"understanding":[5],"interconnected":[6],"systems":[7,15],"poses":[8],"significant":[9],"challenges.":[10],"The":[11,134],"nature":[12],"of":[13,42,91],"these":[14],"introduces":[16],"risks,":[17],"making":[18],"automatic":[19],"observability":[20],"and":[21,27,70,109,137],"problem":[22],"prevention":[23],"critical.":[24],"Machine":[25],"learning":[26],"artificial":[28],"intelligence":[29],"enable":[30],"promising":[31],"solutions":[32],"for":[33,54],"managing":[34],"this":[35],"complexity.":[36],"This":[37],"paper":[38],"addresses":[39],"the":[40,88,102,121],"challenge":[41],"detecting":[43],"log":[44,92,132],"anomalies":[45,86,140],"within":[46],"unstructured,":[47],"continually":[48],"changing":[49],"logs":[50],"that":[51,66],"are":[52,96],"difficult":[53],"traditional":[55],"methods":[56],"to":[57,84],"parse.":[58],"We":[59],"propose":[60],"a":[61,81,99,117],"novel":[62],"approach":[63],"called":[64],"LogDEC":[65,105],"utilizes":[67],"joint":[68],"clustering":[69],"dimensionality":[71],"reduction":[72],"together":[73],"with":[74,129],"sequential":[75,82],"anomaly":[76],"detection.":[77],"Our":[78],"method":[79],"employs":[80],"auto-encoder":[83],"detect":[85],"through":[87],"reconstruction":[89,103],"error":[90],"feature":[93],"sequences.":[94],"Anomalies":[95],"scored":[97],"by":[98],"threshold":[100],"on":[101,116],"error.":[104],"is":[106],"trained":[107],"unsupervised":[108],"can":[110],"effectively":[111],"identify":[112],"anomalies,":[113],"as":[114,126,128],"demonstrated":[115],"dataset":[118],"collected":[119],"at":[120],"Swedish":[122],"Social":[123],"Insurance":[124],"Agency,":[125],"well":[127],"three":[130],"public":[131],"datasets.":[133],"model":[135],"successfully":[136],"efficiently":[138],"detected":[139],"arising":[141],"from":[142],"manual":[143],"interference,":[144],"highlighting":[145],"its":[146],"applicability":[147],"in":[148],"real-world":[149],"scenarios.":[150]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2026-01-25T00:00:00"}