{"id":"https://openalex.org/W4385302163","doi":"https://doi.org/10.1109/iwqos57198.2023.10188773","title":"Triple:The Interpretable Deep Learning Anomaly Detection Framework based on Trace-Metric-Log of Microservice","display_name":"Triple:The Interpretable Deep Learning Anomaly Detection Framework based on Trace-Metric-Log of Microservice","publication_year":2023,"publication_date":"2023-06-19","ids":{"openalex":"https://openalex.org/W4385302163","doi":"https://doi.org/10.1109/iwqos57198.2023.10188773"},"language":"en","primary_location":{"id":"doi:10.1109/iwqos57198.2023.10188773","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwqos57198.2023.10188773","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE/ACM 31st International Symposium on Quality of Service (IWQoS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101595349","display_name":"Rui Ren","orcid":"https://orcid.org/0009-0009-0263-879X"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Rui Ren","raw_affiliation_strings":["Institute of Computing Technology, CAS","University of Chinese Academy of Sciences"],"affiliations":[{"raw_affiliation_string":"Institute of Computing Technology, CAS","institution_ids":["https://openalex.org/I4210090176"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100322712","display_name":"Yan Wang","orcid":"https://orcid.org/0000-0002-5344-1884"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Wang","raw_affiliation_strings":["Institute of Computing Technology, CAS"],"affiliations":[{"raw_affiliation_string":"Institute of Computing Technology, CAS","institution_ids":["https://openalex.org/I4210090176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049591643","display_name":"Fengrui Liu","orcid":"https://orcid.org/0000-0001-7578-0492"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]},{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fengrui Liu","raw_affiliation_strings":["Institute of Computing Technology, CAS","University of Chinese Academy of Sciences"],"affiliations":[{"raw_affiliation_string":"Institute of Computing Technology, CAS","institution_ids":["https://openalex.org/I4210090176"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100330770","display_name":"Zhenyu Li","orcid":"https://orcid.org/0000-0002-9959-1124"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenyu Li","raw_affiliation_strings":["Institute of Computing Technology, CAS"],"affiliations":[{"raw_affiliation_string":"Institute of Computing Technology, CAS","institution_ids":["https://openalex.org/I4210090176"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030689390","display_name":"Gaogang Xie","orcid":"https://orcid.org/0000-0003-4964-1135"},"institutions":[{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gaogang Xie","raw_affiliation_strings":["CAS,Computer Network Information Center","Computer Network Information Center, CAS"],"affiliations":[{"raw_affiliation_string":"CAS,Computer Network Information Center","institution_ids":["https://openalex.org/I4210108629"]},{"raw_affiliation_string":"Computer Network Information Center, CAS","institution_ids":["https://openalex.org/I4210108629"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5101595349"],"corresponding_institution_ids":["https://openalex.org/I4210090176","https://openalex.org/I4210165038"],"apc_list":null,"apc_paid":null,"fwci":2.4075,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.89455611,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9866999983787537,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.776756763458252},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6842118501663208},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5620830655097961},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.507450520992279},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5046194791793823},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4794396460056305},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4631355106830597},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.44633257389068604},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4383167326450348},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.41024765372276306},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.2670373022556305}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.776756763458252},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6842118501663208},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5620830655097961},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.507450520992279},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5046194791793823},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4794396460056305},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4631355106830597},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.44633257389068604},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4383167326450348},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.41024765372276306},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2670373022556305},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iwqos57198.2023.10188773","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwqos57198.2023.10188773","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE/ACM 31st International Symposium on Quality of Service (IWQoS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7599999904632568}],"awards":[{"id":"https://openalex.org/G2306119806","display_name":null,"funder_award_id":"2022YFB3103000","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G5752682689","display_name":null,"funder_award_id":"U20A20180,62072437","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W2134673568","https://openalex.org/W2404462252","https://openalex.org/W2508465325","https://openalex.org/W2516809705","https://openalex.org/W2754665629","https://openalex.org/W2767094836","https://openalex.org/W2803697594","https://openalex.org/W2888307014","https://openalex.org/W2903799441","https://openalex.org/W2903871660","https://openalex.org/W2942544869","https://openalex.org/W2944981198","https://openalex.org/W2947096836","https://openalex.org/W2950898568","https://openalex.org/W2962858109","https://openalex.org/W2966971704","https://openalex.org/W2972317931","https://openalex.org/W2973084513","https://openalex.org/W2979481854","https://openalex.org/W3002832602","https://openalex.org/W3034371431","https://openalex.org/W3034708216","https://openalex.org/W3047409962","https://openalex.org/W3099845770","https://openalex.org/W3100178186","https://openalex.org/W3103717137","https://openalex.org/W3103720336","https://openalex.org/W3116637551","https://openalex.org/W3194768773","https://openalex.org/W3198081460","https://openalex.org/W4287649558","https://openalex.org/W4297733535","https://openalex.org/W6631190155","https://openalex.org/W6690815549","https://openalex.org/W6751494907","https://openalex.org/W6762652066","https://openalex.org/W6763140224","https://openalex.org/W6767288045","https://openalex.org/W6773125873","https://openalex.org/W6784106106","https://openalex.org/W6785773631","https://openalex.org/W6786048916"],"related_works":["https://openalex.org/W4375867731","https://openalex.org/W2061122711","https://openalex.org/W4247954915","https://openalex.org/W2131958170","https://openalex.org/W2273754158","https://openalex.org/W2336747664","https://openalex.org/W2357130048","https://openalex.org/W4206605161","https://openalex.org/W2092234295","https://openalex.org/W1971270045"],"abstract_inverted_index":{"Existing":[0],"anomaly":[1,48,189,199],"detection":[2,49,190,200],"approaches":[3],"based":[4,51,206],"on":[5,52,105,207],"deep-learning":[6],"just":[7,25],"could":[8,227],"simultaneously":[9,182],"dig":[10],"out":[11],"key":[12,33,73,119,230],"information":[13,36,120,233],"from":[14,72],"two":[15],"dimensions":[16],"in":[17,37,68,79,91,191,234,240,254],"the":[18,32,38,69,76,87,92,95,101,106,118,130,141,162,172,179,192,216,229,235,255],"traces,":[19],"metrics":[20,74,98,152],"or":[21],"logs.":[22,80],"Besides,":[23],"they":[24],"output":[26],"simple":[27,142,221],"binary":[28,143,222],"result,":[29,149],"which":[30,128],"ignores":[31],"artificial":[34,77,231],"statement":[35,232],"log.":[39],"In":[40,133],"this":[41],"paper,":[42],"we":[43,135,177,195,210,244],"propose":[44],"Triple,":[45],"an":[46,137,204,212],"interpretable":[47,225],"approach":[50],"deep":[53,126],"learning":[54],"for":[55],"microservice":[56],"system.":[57],"More":[58],"importantly,":[59],"Triple":[60,81,109,263],"aims":[61],"to":[62,65,85,116,139,155,171,181,187,249],"help":[63],"engineers":[64,239],"establish":[66],"trust":[67],"system":[70],"decision":[71,123,217],"and":[75,97,121,153,159,237],"statements":[78],"leverages":[82],"graph":[83,107],"representation":[84],"describe":[86],"complicated":[88],"dependency":[89],"relationship":[90],"traces":[93],"with":[94],"logs":[96],"embedded":[99],"into":[100,145],"node":[102],"features.":[103],"Based":[104],"representation,":[108],"trains":[110],"a":[111,146,197,220,246],"Spatial-Temporal":[112],"Graph":[113],"Convolutional":[114],"Network(STGCN)":[115],"capture":[117,228],"generate":[122],"boundary":[124],"by":[125,271],"SVDD,":[127],"detects":[129],"system's":[131,257],"anomaly.":[132],"addition,":[134],"design":[136,196,211,245],"interpreter":[138,213],"transfer":[140],"result":[144,226],"humanly":[147],"understandable":[148],"including":[150],"log,":[151],"trace,":[154],"facilitate":[156],"engineers'":[157],"understanding":[158],"handling":[160],"of":[161,174],"incoming":[163],"incident.":[164],"Our":[165,259],"work":[166],"has":[167],"four":[168],"aims.":[169],"First,":[170],"best":[173],"our":[175,251],"knowledge,":[176],"are":[178],"first":[180],"apply":[183],"three":[184],"data":[185],"sources":[186],"finish":[188],"domain.":[193],"Second,":[194],"new":[198],"method":[201],"that":[202,214,262],"is":[203],"STGCN":[205],"SVDD.":[208],"Third,":[209],"makes":[215],"not":[218],"only":[219],"result.":[223],"The":[224],"log":[236],"assist":[238],"incident":[241],"troubleshooting.":[242],"Finally,":[243],"series":[247],"experiments":[248],"validate":[250],"method's":[252],"effectiveness":[253],"real-world":[256],"dataset.":[258],"results":[260],"show":[261],"consistently":[264],"achieves":[265],"improvements":[266],"over":[267],"other":[268],"state-of-the-art":[269],"models":[270],"11%-65%.":[272]},"counts_by_year":[{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
