{"id":"https://openalex.org/W7154944759","doi":"https://doi.org/10.1109/jiot.2026.3685253","title":"LogRMC: Robust Log Anomaly Detection in IoT Systems via Multifield Fusion, Contrastive Learning, and Pseudo-Label Refinement","display_name":"LogRMC: Robust Log Anomaly Detection in IoT Systems via Multifield Fusion, Contrastive Learning, and Pseudo-Label Refinement","publication_year":2026,"publication_date":"2026-04-20","ids":{"openalex":"https://openalex.org/W7154944759","doi":"https://doi.org/10.1109/jiot.2026.3685253"},"language":null,"primary_location":{"id":"doi:10.1109/jiot.2026.3685253","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3685253","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134030476","display_name":"Jun Ma","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Ma","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-8695-3763","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103068268","display_name":"Qingjun Xiao","orcid":"https://orcid.org/0000-0001-8348-6277"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingjun Xiao","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-8348-6277","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006557503","display_name":"Y Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongchao Zhang","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-6804-1990","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054477511","display_name":"Liukun He","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liukun He","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5134049387","display_name":"Hang Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hang Chen","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0003-3725-5755","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I76569877"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.44708639,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"13","first_page":"29065","last_page":"29078"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.6545000076293945,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.6545000076293945,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12676","display_name":"Machine Learning and ELM","score":0.02669999934732914,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.02590000070631504,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6243000030517578},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.45680001378059387},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.4066999852657318},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.30809998512268066},{"id":"https://openalex.org/keywords/algorithm-design","display_name":"Algorithm design","score":0.28999999165534973}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7990000247955322},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6243000030517578},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.45680001378059387},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4066999852657318},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.375900000333786},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3393000066280365},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3086000084877014},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.30809998512268066},{"id":"https://openalex.org/C106516650","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm design","level":2,"score":0.28999999165534973},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2766999900341034},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.27300000190734863},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2624000012874603}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2026.3685253","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3685253","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2280639332","display_name":null,"funder_award_id":"62372106","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4611437951","display_name":null,"funder_award_id":"2020YFB1805204","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G6740090423","display_name":null,"funder_award_id":"No. 62372106","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"In":[0],"large-scale":[1],"Internet":[2],"of":[3,11,81,163],"Things":[4],"(IoT)":[5],"environments,":[6],"the":[7,35,78,101,161],"reliability":[8],"and":[9,45,123,134,156,165,188,210,226,229],"security":[10],"complex":[12],"cloud-edge":[13],"ecosystems":[14],"critically":[15],"depend":[16],"on":[17,30,150,184,208,216],"accurate":[18],"anomaly":[19,113],"detection":[20,114],"from":[21,130],"system":[22],"logs.":[23],"However,":[24],"most":[25],"existing":[26],"methods":[27],"rely":[28],"primarily":[29],"log":[31,112,117,132,212,218],"templates,":[32],"often":[33,74],"ignoring":[34],"diagnostic":[36],"signals":[37],"embedded":[38],"in":[39,97],"heterogeneous":[40],"fields":[41,133],"(e.g.,":[42],"timestamps,":[43],"components,":[44],"severity":[46],"levels).":[47],"Furthermore,":[48],"they":[49],"struggle":[50],"to":[51,59,65,76,87,89,153,196,233],"learn":[52,154],"discriminative":[53,155],"representations":[54],"for":[55,110],"rare":[56],"anomalies":[57],"due":[58],"severe":[60],"class":[61],"imbalance,":[62],"causing":[63],"models":[64],"become":[66],"biased":[67],"toward":[68],"normal":[69,151,164],"patterns.":[70],"Finally,":[71,200],"these":[72],"approaches":[73],"fail":[75],"capture":[77],"latent":[79],"structure":[80],"unlabeled":[82,171],"data,":[83,172],"limiting":[84],"their":[85],"ability":[86],"generalize":[88],"unseen":[90],"anomalies.":[91],"These":[92],"limitations":[93],"render":[94],"them":[95,136],"unreliable":[96],"practice.":[98],"To":[99,169],"address":[100],"above":[102],"challenges,":[103],"we":[104],"propose":[105],"LogRMC,":[106],"a":[107,176],"semi-supervised":[108,227],"framework":[109],"robust":[111],"through":[115],"multi-field":[116],"feature":[118],"fusion,":[119],"contrastive":[120,148],"representation":[121],"learning,":[122],"pseudo-label":[124],"refinement.":[125],"First,":[126],"LogRMC":[127,173,222],"extracts":[128],"features":[129],"diverse":[131],"fuses":[135],"into":[137],"unified":[138],"contextual":[139],"embeddings":[140,187],"that":[141,221],"encode":[142],"inter-field":[143],"dependencies.":[144],"Next,":[145],"it":[146,180],"applies":[147,189],"learning":[149],"samples":[152],"stable":[157],"representations,":[158],"thereby":[159],"improving":[160],"separation":[162],"anomalous":[166],"sequence":[167],"embeddings.":[168],"exploit":[170],"further":[174],"introduces":[175],"cluster-refined":[177],"pseudo-labeling":[178],"strategy:":[179],"performs":[181],"density-based":[182],"clustering":[183],"contrastively":[185],"learned":[186],"density":[190],"ratio":[191],"estimation":[192],"within":[193],"each":[194],"cluster":[195],"generate":[197],"confidence-aware":[198],"pseudo-labels.":[199],"an":[201],"attention-based":[202],"GRU":[203],"network":[204],"is":[205],"trained":[206],"jointly":[207],"labeled":[209],"pseudo-labeled":[211],"sequences.":[213],"Extensive":[214],"experiments":[215],"public":[217],"datasets":[219],"demonstrate":[220],"outperforms":[223],"state-of-the-art":[224],"unsupervised":[225],"methods,":[228],"achieves":[230],"performance":[231],"comparable":[232],"fully":[234],"supervised":[235],"approaches.":[236]},"counts_by_year":[],"updated_date":"2026-06-27T06:13:17.587685","created_date":"2026-04-21T00:00:00"}
