{"id":"https://openalex.org/W2216158747","doi":"https://doi.org/10.1109/milcom.2015.7357664","title":"An automatic approach to extract the formats of network and security log messages","display_name":"An automatic approach to extract the formats of network and security log messages","publication_year":2015,"publication_date":"2015-10-01","ids":{"openalex":"https://openalex.org/W2216158747","doi":"https://doi.org/10.1109/milcom.2015.7357664","mag":"2216158747"},"language":"en","primary_location":{"id":"doi:10.1109/milcom.2015.7357664","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom.2015.7357664","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2015 - 2015 IEEE Military Communications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039094834","display_name":"Jing Ya","orcid":"https://orcid.org/0009-0003-6646-3278"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210160629","display_name":"China Information Technology Security Evaluation Center","ror":"https://ror.org/053cexp66","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210160629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Ya","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","National Engineering Laboratory for Information Security Technologies, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"National Engineering Laboratory for Information Security Technologies, Beijing, China","institution_ids":["https://openalex.org/I4210160629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103214505","display_name":"Tingwen Liu","orcid":"https://orcid.org/0000-0003-0487-0751"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210160629","display_name":"China Information Technology Security Evaluation Center","ror":"https://ror.org/053cexp66","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210160629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tingwen Liu","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","National Engineering Laboratory for Information Security Technologies, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"National Engineering Laboratory for Information Security Technologies, Beijing, China","institution_ids":["https://openalex.org/I4210160629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013050862","display_name":"Haoliang Zhang","orcid":"https://orcid.org/0000-0002-3270-514X"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210160629","display_name":"China Information Technology Security Evaluation Center","ror":"https://ror.org/053cexp66","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210160629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoliang Zhang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","National Engineering Laboratory for Information Security Technologies, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"National Engineering Laboratory for Information Security Technologies, Beijing, China","institution_ids":["https://openalex.org/I4210160629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110292528","display_name":"Jinqiao Shi","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210160629","display_name":"China Information Technology Security Evaluation Center","ror":"https://ror.org/053cexp66","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210160629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinqiao Shi","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","National Engineering Laboratory for Information Security Technologies, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"National Engineering Laboratory for Information Security Technologies, Beijing, China","institution_ids":["https://openalex.org/I4210160629"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100675165","display_name":"Li Guo","orcid":"https://orcid.org/0000-0002-9723-3294"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210160629","display_name":"China Information Technology Security Evaluation Center","ror":"https://ror.org/053cexp66","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210160629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Li Guo","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","National Engineering Laboratory for Information Security Technologies, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"National Engineering Laboratory for Information Security Technologies, Beijing, China","institution_ids":["https://openalex.org/I4210160629"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1542","last_page":"1547"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8568340539932251},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5158861875534058},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4544352889060974},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.35949742794036865}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8568340539932251},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5158861875534058},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4544352889060974},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35949742794036865}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/milcom.2015.7357664","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom.2015.7357664","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2015 - 2015 IEEE Military Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.41999998688697815,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W179510128","https://openalex.org/W1673310716","https://openalex.org/W1880262756","https://openalex.org/W1968002881","https://openalex.org/W1996289178","https://openalex.org/W2001082470","https://openalex.org/W2026065824","https://openalex.org/W2039157918","https://openalex.org/W2049867480","https://openalex.org/W2056291033","https://openalex.org/W2056325176","https://openalex.org/W2133473417","https://openalex.org/W2151191426","https://openalex.org/W2172163424","https://openalex.org/W2353502412","https://openalex.org/W2890620276","https://openalex.org/W6607214813","https://openalex.org/W6637131181","https://openalex.org/W6639619044","https://openalex.org/W6642404687","https://openalex.org/W6685277877","https://openalex.org/W6884739614"],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2382290278","https://openalex.org/W2350741829","https://openalex.org/W2130043461","https://openalex.org/W2530322880"],"abstract_inverted_index":{"Analyzing":[0],"massive":[1,49,133],"network":[2,8,14,18,50,66,92,136],"and":[3,27,38,42,51,67,70,93,105,152,167],"security":[4,52,68,94],"logs":[5,53,95],"that":[6,87,148],"record":[7],"events":[9],"is":[10,24,36,88],"crucial":[11],"for":[12],"diagnosing":[13],"anomalies":[15],"in":[16,73],"large-scale":[17,74],"environments.":[19],"Extracting":[20],"log":[21,45,81,103,110,137,155],"message":[22,46,121,156],"formats":[23,47,157],"an":[25,85],"important":[26],"necessary":[28],"step":[29],"to":[30,40,96],"achieve":[31],"the":[32,62,98,108,114,159],"goal.":[33],"However,":[34],"it":[35,119],"time-consuming":[37],"costly":[39],"automatically":[41],"efficiently":[43],"extract":[44],"from":[48,140],"of":[54,65,91,135],"many":[55],"different":[56],"types,":[57],"which":[58],"are":[59],"generated":[60],"by":[61,123],"increasing":[63],"number":[64],"devices":[69],"services":[71],"used":[72],"networks.":[75],"In":[76],"this":[77],"paper,":[78],"we":[79],"propose":[80],"template":[82],"extraction":[83],"(LTE),":[84],"approach":[86,150],"semantics":[89],"aware":[90],"address":[97],"problem.":[99],"LTE":[100,149],"first":[101],"cleans":[102],"messages":[104,111,138],"then":[106],"clusters":[107],"cleaned":[109],"based":[112],"on":[113,132],"DBSCAN":[115],"algorithm.":[116,127],"At":[117],"last":[118],"infers":[120,151],"templates":[122],"LDA":[124],"Gibbs":[125],"sampling":[126],"We":[128],"evaluate":[129],"our":[130],"work":[131],"amount":[134],"collected":[139],"a":[141],"large":[142],"production":[143],"network.":[144],"Experimental":[145],"results":[146],"show":[147],"gets":[153],"multiple":[154],"at":[158],"same":[160],"time":[161],"with":[162],"more":[163],"than":[164],"90%":[165],"accuracy":[166],"100%":[168],"recall.":[169]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":2}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}