{"id":"https://openalex.org/W7160021814","doi":"https://doi.org/10.1109/access.2026.3688834","title":"LogRAIL: A Retrieval-Augmented LLM Reverification Layer for Log Anomaly Detection","display_name":"LogRAIL: A Retrieval-Augmented LLM Reverification Layer for Log Anomaly Detection","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7160021814","doi":"https://doi.org/10.1109/access.2026.3688834"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3688834","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3688834","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3688834","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135193754","display_name":"Wongwang Choi","orcid":"https://orcid.org/0009-0001-6342-3743"},"institutions":[{"id":"https://openalex.org/I67900169","display_name":"Chung-Ang University","ror":"https://ror.org/01r024a98","country_code":"KR","type":"education","lineage":["https://openalex.org/I67900169"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Wongwang Choi","raw_affiliation_strings":["Bigdata & AI Laboratory, School of Electrical and Electronics Engineering, Chung-Ang University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0009-0001-6342-3743","affiliations":[{"raw_affiliation_string":"Bigdata & AI Laboratory, School of Electrical and Electronics Engineering, Chung-Ang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I67900169"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135265072","display_name":"Donghee Park","orcid":"https://orcid.org/0009-0009-9971-505X"},"institutions":[{"id":"https://openalex.org/I67900169","display_name":"Chung-Ang University","ror":"https://ror.org/01r024a98","country_code":"KR","type":"education","lineage":["https://openalex.org/I67900169"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Donghee Park","raw_affiliation_strings":["Bigdata & AI Laboratory, School of Electrical and Electronics Engineering, Chung-Ang University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0009-0009-9971-505X","affiliations":[{"raw_affiliation_string":"Bigdata & AI Laboratory, School of Electrical and Electronics Engineering, Chung-Ang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I67900169"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135167459","display_name":"Myeonggwan Kim","orcid":null},"institutions":[{"id":"https://openalex.org/I67900169","display_name":"Chung-Ang University","ror":"https://ror.org/01r024a98","country_code":"KR","type":"education","lineage":["https://openalex.org/I67900169"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Myeonggwan Kim","raw_affiliation_strings":["Bigdata & AI Laboratory, School of Electrical and Electronics Engineering, Chung-Ang University, Seoul, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bigdata & AI Laboratory, School of Electrical and Electronics Engineering, Chung-Ang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I67900169"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130332689","display_name":"Subin Cho","orcid":null},"institutions":[{"id":"https://openalex.org/I67900169","display_name":"Chung-Ang University","ror":"https://ror.org/01r024a98","country_code":"KR","type":"education","lineage":["https://openalex.org/I67900169"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Subin Cho","raw_affiliation_strings":["Bigdata & AI Laboratory, School of Electrical and Electronics Engineering, Chung-Ang University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0009-0006-0514-104X","affiliations":[{"raw_affiliation_string":"Bigdata & AI Laboratory, School of Electrical and Electronics Engineering, Chung-Ang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I67900169"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030701542","display_name":"\uc774\uc131\ud6c8","orcid":null},"institutions":[{"id":"https://openalex.org/I67900169","display_name":"Chung-Ang University","ror":"https://ror.org/01r024a98","country_code":"KR","type":"education","lineage":["https://openalex.org/I67900169"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Seonghun Lee","raw_affiliation_strings":["Department of Computer Science and Engineering, Chung-Ang University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0001-5702-8117","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Chung-Ang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I67900169"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076229234","display_name":"Jaehwa Park","orcid":"https://orcid.org/0000-0001-9863-464X"},"institutions":[{"id":"https://openalex.org/I67900169","display_name":"Chung-Ang University","ror":"https://ror.org/01r024a98","country_code":"KR","type":"education","lineage":["https://openalex.org/I67900169"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jaehwa Park","raw_affiliation_strings":["Department of Computer Science and Engineering, Chung-Ang University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0001-9863-464X","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Chung-Ang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I67900169"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026178235","display_name":"Ho\u2010Hyun Park","orcid":"https://orcid.org/0000-0003-0322-8660"},"institutions":[{"id":"https://openalex.org/I67900169","display_name":"Chung-Ang University","ror":"https://ror.org/01r024a98","country_code":"KR","type":"education","lineage":["https://openalex.org/I67900169"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Ho-Hyun Park","raw_affiliation_strings":["Bigdata & AI Laboratory, School of Electrical and Electronics Engineering, Chung-Ang University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0003-0322-8660","affiliations":[{"raw_affiliation_string":"Bigdata & AI Laboratory, School of Electrical and Electronics Engineering, Chung-Ang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I67900169"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I67900169"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.51471513,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"65899","last_page":"65911"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.5273000001907349,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.5273000001907349,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.05510000139474869,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.017999999225139618,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.4309000074863434},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.3384999930858612},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.3084999918937683},{"id":"https://openalex.org/keywords/signal-to-noise-ratio","display_name":"Signal-to-noise ratio (imaging)","score":0.26260000467300415}],"concepts":[{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.4309000074863434},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.3384999930858612},{"id":"https://openalex.org/C62649853","wikidata":"https://www.wikidata.org/wiki/Q199687","display_name":"Remote sensing","level":1,"score":0.3122999966144562},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.3084999918937683},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3068000078201294},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.29089999198913574},{"id":"https://openalex.org/C13944312","wikidata":"https://www.wikidata.org/wiki/Q7512748","display_name":"Signal-to-noise ratio (imaging)","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.26100000739097595},{"id":"https://openalex.org/C32283439","wikidata":"https://www.wikidata.org/wiki/Q1407014","display_name":"Radar tracker","level":3,"score":0.25699999928474426},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.2513999938964844}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2026.3688834","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3688834","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:be7978fca79846f587e0143c5757dff3","is_oa":true,"landing_page_url":"https://doaj.org/article/be7978fca79846f587e0143c5757dff3","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 65899-65911 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3688834","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3688834","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Climate action","score":0.4962022006511688,"id":"https://metadata.un.org/sdg/13"}],"awards":[{"id":"https://openalex.org/G1097904621","display_name":null,"funder_award_id":"P0023718","funder_id":"https://openalex.org/F4320322064","funder_display_name":"Korea Institute for Advancement of Technology"},{"id":"https://openalex.org/G4785715254","display_name":null,"funder_award_id":"42500903","funder_id":"https://openalex.org/F4320336122","funder_display_name":"Korea Institute of Planning and Evaluation for Technology in Food, Agriculture and Forestry"}],"funders":[{"id":"https://openalex.org/F4320321202","display_name":"Chung-Ang University","ror":"https://ror.org/01r024a98"},{"id":"https://openalex.org/F4320322064","display_name":"Korea Institute for Advancement of Technology","ror":"https://ror.org/015w1qa96"},{"id":"https://openalex.org/F4320329803","display_name":"LG Electronics","ror":"https://ror.org/03ddh2c27"},{"id":"https://openalex.org/F4320336122","display_name":"Korea Institute of Planning and Evaluation for Technology in Food, Agriculture and Forestry","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1966716734","https://openalex.org/W1976526581","https://openalex.org/W2039157918","https://openalex.org/W2099419573","https://openalex.org/W2107263349","https://openalex.org/W2132870739","https://openalex.org/W2162651021","https://openalex.org/W2516809705","https://openalex.org/W2536393303","https://openalex.org/W2583874385","https://openalex.org/W2754665629","https://openalex.org/W2762028850","https://openalex.org/W2767094836","https://openalex.org/W2916904544","https://openalex.org/W2947815220","https://openalex.org/W2963469388","https://openalex.org/W2963999143","https://openalex.org/W2965838158","https://openalex.org/W2970641574","https://openalex.org/W2999013495","https://openalex.org/W3099700870","https://openalex.org/W3183619936","https://openalex.org/W3199174176","https://openalex.org/W4367146761","https://openalex.org/W4376288669","https://openalex.org/W4385484660","https://openalex.org/W4391096001","https://openalex.org/W4393141466","https://openalex.org/W4393158476","https://openalex.org/W4393158805","https://openalex.org/W4404952749","https://openalex.org/W4415709246"],"related_works":[],"abstract_inverted_index":{"Android":[0],"logs":[1,48],"vary":[2],"across":[3],"devices,":[4],"build":[5],"versions,":[6],"and":[7,10,41,53,68,86,142,151],"deployment":[8],"cycles":[9],"may":[11],"contain":[12],"missing":[13],"or":[14,96],"out-of-order":[15],"entries,":[16],"making":[17],"reliable":[18],"anomaly":[19,39,66],"detection":[20],"difficult.":[21],"To":[22],"address":[23],"this":[24],"problem,":[25],"we":[26],"propose":[27],"LogRAIL,":[28],"a":[29,54,89,97,108],"two-stage":[30],"framework":[31],"in":[32],"which":[33],"the":[34,42,83],"first":[35],"stage":[36,44],"selects":[37],"candidate":[38],"windows":[40,60,81],"second":[43],"performs":[45],"reverification.":[46],"Raw":[47],"are":[49],"normalized":[50],"into":[51],"templates,":[52,144],"transformer-based":[55],"sequence":[56],"classifier":[57],"processes":[58],"fixed-length":[59],"of":[61],"log":[62],"templates":[63],"to":[64,92,100],"produce":[65],"decisions":[67],"scores.":[69],"A":[70],"retrieval-augmented":[71],"large":[72],"language":[73],"model":[74,105],"inference":[75],"layer":[76],"(RAIL)":[77],"then":[78],"re-evaluates":[79],"only":[80],"near":[82],"decision":[84,140],"threshold":[85],"applies":[87],"either":[88],"precision-oriented":[90],"mode":[91,99],"reduce":[93,101],"false":[94,102],"positives":[95],"recall-oriented":[98],"negatives.":[103],"The":[104],"also":[106],"provides":[107,138],"concise":[109],"reason":[110],"for":[111,148],"each":[112],"decision.":[113],"In":[114],"both":[115],"operating":[116],"modes,":[117],"LogRAIL":[118,137],"improves":[119],"F1-score":[120],"over":[121],"Stage":[122],"1":[123],"while":[124],"enabling":[125],"controlled":[126],"precision–recall":[127],"trade-offs":[128],"aligned":[129],"with":[130],"operational":[131],"objectives.":[132],"These":[133],"results":[134],"show":[135],"that":[136],"per-window":[139],"explanations":[141],"supporting":[143],"offering":[145],"template-based":[146],"rationales":[147],"post-detection":[149],"review":[150],"reporting.":[152]},"counts_by_year":[],"updated_date":"2026-05-07T06:04:25.777469","created_date":"2026-05-05T00:00:00"}