{"id":"https://openalex.org/W4315630210","doi":"https://doi.org/10.1109/globecom48099.2022.10000804","title":"LogTracer: Efficient Anomaly Tracing Combining System Log Detection and Provenance Graph","display_name":"LogTracer: Efficient Anomaly Tracing Combining System Log Detection and Provenance Graph","publication_year":2022,"publication_date":"2022-12-04","ids":{"openalex":"https://openalex.org/W4315630210","doi":"https://doi.org/10.1109/globecom48099.2022.10000804"},"language":"en","primary_location":{"id":"doi:10.1109/globecom48099.2022.10000804","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom48099.2022.10000804","pdf_url":null,"source":{"id":"https://openalex.org/S4363607705","display_name":"GLOBECOM 2022 - 2022 IEEE Global Communications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2022 - 2022 IEEE Global Communications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029715489","display_name":"Weina Niu","orcid":"https://orcid.org/0000-0002-3235-3463"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weina Niu","raw_affiliation_strings":["University of Electronic Science and Technology of China,School of Computer Science and Engineering,Chengdu,China","School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China,School of Computer Science and Engineering,Chengdu,China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037903864","display_name":"Zhenqi Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenqi Yu","raw_affiliation_strings":["University of Electronic Science and Technology of China,School of Computer Science and Engineering,Chengdu,China","School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China,School of Computer Science and Engineering,Chengdu,China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101833827","display_name":"Zimu Li","orcid":"https://orcid.org/0000-0002-2305-7275"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zimu Li","raw_affiliation_strings":["University of Electronic Science and Technology of China,School of Computer Science and Engineering,Chengdu,China","School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China,School of Computer Science and Engineering,Chengdu,China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100423730","display_name":"Beibei Li","orcid":"https://orcid.org/0000-0002-0485-1975"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Beibei Li","raw_affiliation_strings":["Sichuan University,School of Cyber Science and Engineering,Chengdu,China","School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sichuan University,School of Cyber Science and Engineering,Chengdu,China","institution_ids":["https://openalex.org/I24185976"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003367512","display_name":"Runzi Zhang","orcid":"https://orcid.org/0000-0003-2929-2484"},"institutions":[{"id":"https://openalex.org/I110630785","display_name":"NSK (United States)","ror":"https://ror.org/027qba521","country_code":"US","type":"company","lineage":["https://openalex.org/I110630785","https://openalex.org/I4210157453"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Runzi Zhang","raw_affiliation_strings":["NSFOCUS Technologies Group Co., Ltd.,Beijing,China","NSFOCUS Technologies Group Co., Ltd., Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NSFOCUS Technologies Group Co., Ltd.,Beijing,China","institution_ids":["https://openalex.org/I110630785"]},{"raw_affiliation_string":"NSFOCUS Technologies Group Co., Ltd., Beijing, China","institution_ids":["https://openalex.org/I110630785"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100780268","display_name":"Xiaosong Zhang","orcid":"https://orcid.org/0000-0001-9886-1412"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaosong Zhang","raw_affiliation_strings":["University of Electronic Science and Technology of China,School of Computer Science and Engineering,Chengdu,China","School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China,School of Computer Science and Engineering,Chengdu,China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3356","last_page":"3361"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9815000295639038,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.7654303908348083},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7071406841278076},{"id":"https://openalex.org/keywords/provenance","display_name":"Provenance","score":0.6762579679489136},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6420572996139526},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.6362919807434082},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.4913274347782135},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.45571139454841614},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3408026695251465},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.11400032043457031},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.07453450560569763}],"concepts":[{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.7654303908348083},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7071406841278076},{"id":"https://openalex.org/C2780049196","wikidata":"https://www.wikidata.org/wiki/Q23582628","display_name":"Provenance","level":2,"score":0.6762579679489136},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6420572996139526},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.6362919807434082},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.4913274347782135},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.45571139454841614},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3408026695251465},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.11400032043457031},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.07453450560569763},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C5900021","wikidata":"https://www.wikidata.org/wiki/Q163082","display_name":"Petrology","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/globecom48099.2022.10000804","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom48099.2022.10000804","pdf_url":null,"source":{"id":"https://openalex.org/S4363607705","display_name":"GLOBECOM 2022 - 2022 IEEE Global Communications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2022 - 2022 IEEE Global Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G446943515","display_name":null,"funder_award_id":"Z211100002121150","funder_id":"https://openalex.org/F4320334978","funder_display_name":"Beijing Nova Program"},{"id":"https://openalex.org/G5811850657","display_name":null,"funder_award_id":"2018YFB0804103","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G935485695","display_name":null,"funder_award_id":"61902262","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334978","display_name":"Beijing Nova Program","ror":"https://ror.org/034k14f91"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W2579106964","https://openalex.org/W2767094836","https://openalex.org/W2803341875","https://openalex.org/W2886752452","https://openalex.org/W2947745012","https://openalex.org/W2954675436","https://openalex.org/W3008508243","https://openalex.org/W3126165507","https://openalex.org/W3138838255","https://openalex.org/W3176367300","https://openalex.org/W3185502221","https://openalex.org/W3190895447","https://openalex.org/W4255845613","https://openalex.org/W6752278124","https://openalex.org/W6801247658"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"Information":[0],"systems":[1],"have":[2,34],"penetrated":[3],"into":[4],"all":[5],"areas":[6],"of":[7,44,97],"social":[8],"life,":[9],"however,":[10],"unknown":[11],"threats":[12],"represented":[13],"by":[14],"APT":[15],"attacks":[16],"pose":[17],"serious":[18],"challenges":[19],"to":[20],"their":[21],"security.":[22],"In":[23],"recent":[24],"years,":[25],"approaches":[26],"based":[27],"on":[28,113],"log":[29,74],"analysis":[30],"and":[31,42,56,76,109,135,145],"provenance":[32,77,88],"graph":[33,78],"been":[35],"extensively":[36],"used":[37],"in":[38,142],"the":[39,84,94,98],"anomaly":[40,67,95,101],"detection":[41,52,75,102],"tracing":[43,68],"malicious":[45,147],"attacks.":[46],"However,":[47],"traditional":[48],"method":[49,131],"has":[50],"low":[51,57],"accuracy,":[53],"high":[54],"complexity":[55],"efficiency.":[58],"To":[59],"address":[60],"those":[61],"shortcomings,":[62],"we":[63],"propose":[64],"an":[65],"efficient":[66],"approach":[69],"(LogTracer),":[70],"which":[71,90],"combines":[72],"system":[73,99],"together.":[79],"The":[80,125],"proposed":[81],"LogTracer":[82],"extracts":[83],"attack":[85,119],"path":[86],"from":[87],"graph,":[89],"is":[91],"constructed":[92],"with":[93,106,117],"degrees":[96],"logs":[100],"results.":[103],"Compar-ative":[104],"experiments":[105],"OmegaLog,":[107],"NoDoze":[108],"ALchemist":[110],"are":[111],"conducted":[112],"a":[114],"simulated":[115],"dataset":[116],"16":[118],"types":[120],"totaling":[121],"290":[122],"million":[123],"logs.":[124],"experimental":[126],"results":[127],"show":[128],"that":[129],"our":[130],"approximately":[132],"5.4x,":[133],"0.2x":[134],"7.2x":[136],"faster":[137],"than":[138],"these":[139],"three":[140],"methods":[141],"processing":[143],"efficiency,":[144],"its":[146],"node":[148],"coverage":[149],"rate":[150],"reaches":[151],"98.1%.":[152]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}