{"id":"https://openalex.org/W4411551118","doi":"https://doi.org/10.1109/cscwd64889.2025.11033638","title":"An Effective Log Sequence Anomaly Detection Method Guided by Large Language Models","display_name":"An Effective Log Sequence Anomaly Detection Method Guided by Large Language Models","publication_year":2025,"publication_date":"2025-05-05","ids":{"openalex":"https://openalex.org/W4411551118","doi":"https://doi.org/10.1109/cscwd64889.2025.11033638"},"language":"en","primary_location":{"id":"doi:10.1109/cscwd64889.2025.11033638","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cscwd64889.2025.11033638","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 28th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5021667482","display_name":"Zhihui Xie","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zhihui Xie","raw_affiliation_strings":["Beijing University of Posts and Telecommunications,Beijing Key Laboratory of Intelligent Telecommunications Software and Multimedia,Beijing,China,100876"],"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications,Beijing Key Laboratory of Intelligent Telecommunications Software and Multimedia,Beijing,China,100876","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044104149","display_name":"Xiaolin Chai","orcid":"https://orcid.org/0000-0002-7447-3367"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaolin Chai","raw_affiliation_strings":["Beijing University of Posts and Telecommunications,Beijing Key Laboratory of Intelligent Telecommunications Software and Multimedia,Beijing,China,100876"],"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications,Beijing Key Laboratory of Intelligent Telecommunications Software and Multimedia,Beijing,China,100876","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050967095","display_name":"Hong Luo","orcid":"https://orcid.org/0000-0002-4811-7764"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hong Luo","raw_affiliation_strings":["Beijing University of Posts and Telecommunications,Beijing Key Laboratory of Intelligent Telecommunications Software and Multimedia,Beijing,China,100876"],"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications,Beijing Key Laboratory of Intelligent Telecommunications Software and Multimedia,Beijing,China,100876","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101112482","display_name":"Yan Sun","orcid":"https://orcid.org/0009-0007-0330-8165"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yan Sun","raw_affiliation_strings":["Beijing University of Posts and Telecommunications,Beijing Key Laboratory of Intelligent Telecommunications Software and Multimedia,Beijing,China,100876"],"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications,Beijing Key Laboratory of Intelligent Telecommunications Software and Multimedia,Beijing,China,100876","institution_ids":["https://openalex.org/I139759216"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5021667482"],"corresponding_institution_ids":["https://openalex.org/I139759216"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.18509719,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"367","last_page":"372"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9330000281333923,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9330000281333923,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6741912364959717},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.6526440382003784},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.47620877623558044},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.4687393307685852},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.34305882453918457},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.09382826089859009},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.07724595069885254}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6741912364959717},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.6526440382003784},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.47620877623558044},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.4687393307685852},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34305882453918457},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.09382826089859009},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.07724595069885254},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cscwd64889.2025.11033638","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cscwd64889.2025.11033638","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 28th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W2039157918","https://openalex.org/W2107263349","https://openalex.org/W2767094836","https://openalex.org/W2947815220","https://openalex.org/W2965838158","https://openalex.org/W3199174176","https://openalex.org/W4205965165","https://openalex.org/W4391235307","https://openalex.org/W4391550281","https://openalex.org/W4391579685","https://openalex.org/W4393141466","https://openalex.org/W6739901393","https://openalex.org/W6755207826","https://openalex.org/W6805727143","https://openalex.org/W6869080875"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"With":[0],"the":[1,7,52,58,65,95,206,212,221],"rapid":[2],"advancement":[3],"of":[4,9,24,55,60,69,83,97,135,203],"information":[5,14],"technology,":[6],"volume":[8],"log":[10,27,47,91,113,181,191,216],"data":[11],"generated":[12],"by":[13,119,225],"systems":[15],"has":[16,29],"expanded":[17],"significantly.":[18],"The":[19],"effective":[20],"detection":[21,45,116,184],"and":[22,57,80,100,157,166,177,209,227],"processing":[23],"anomalies":[25],"in":[26,46,190],"sequences":[28],"emerged":[30],"as":[31,142,163],"a":[32,77,111,126,132,172],"crucial":[33],"research":[34,87],"topic.":[35],"Recent":[36],"studies":[37],"have":[38],"successfully":[39],"applied":[40],"pre-trained":[41],"models":[42,73],"for":[43,180,215],"anomaly":[44,115,218],"sequences.":[48],"However,":[49],"due":[50],"to":[51,75,130,153],"semi-structured":[53],"nature":[54],"logs":[56,137],"presence":[59],"domain-specific":[61],"vocabulary,":[62],"along":[63],"with":[64,174],"diverse":[66],"logging":[67],"styles":[68],"different":[70],"vendors,":[71],"those":[72],"struggled":[74],"provide":[76],"comprehensive":[78],"understanding":[79],"unified":[81],"representation":[82,158],"logs.":[84,104],"Additionally,":[85],"current":[86,222],"primarily":[88],"focused":[89],"on":[90,205,211],"template":[92],"sequences,":[93],"neglecting":[94],"impact":[96],"variable":[98],"values":[99],"contextual":[101],"relationships":[102],"among":[103],"In":[105],"this":[106],"paper,":[107],"we":[108,146],"propose":[109],"LlmBertLog,":[110],"BERT-based":[112],"sequence":[114,182,192,217],"model":[117,129],"guided":[118],"large":[120,127],"language":[121,128,140],"models.":[122],"We":[123,169],"first":[124],"utilize":[125],"transform":[131],"limited":[133],"set":[134],"raw":[136],"into":[138],"natural":[139],"descriptions":[141],"sample":[143],"data.":[144],"Subsequently,":[145],"induct":[147],"three":[148],"novel":[149],"pre-training":[150],"tasks":[151],"designed":[152],"enhance":[154],"BERT's":[155],"comprehension":[156],"capabilities":[159],"through":[160],"methods":[161],"such":[162],"semantic":[164,167],"augmentation":[165],"masking.":[168],"then":[170],"integrate":[171],"Transformer":[173],"positional":[175],"encoding":[176],"fine-tune":[178],"LlmBertLog":[179,199],"anomily":[183],"task,":[185],"thereby":[186],"improving":[187],"its":[188],"performance":[189],"content":[193],"mining.":[194],"Extensive":[195],"experiments":[196],"demonstrate":[197],"that":[198],"achieves":[200],"F1":[201],"scores":[202],"0.994":[204],"BGL":[207],"dataset":[208,214],"0.998":[210],"HDFS":[213],"detection,":[219],"surpassing":[220],"best":[223],"benchmarks":[224],"2.3%":[226],"5.5%,":[228],"respectively.":[229]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}