{"id":"https://openalex.org/W7126104591","doi":"https://doi.org/10.1109/nfv-sdn66355.2025.11349548","title":"XTreeAD: Explainable Boosting Trees for Anomaly Detection in Cloud-native Services","display_name":"XTreeAD: Explainable Boosting Trees for Anomaly Detection in Cloud-native Services","publication_year":2025,"publication_date":"2025-11-10","ids":{"openalex":"https://openalex.org/W7126104591","doi":"https://doi.org/10.1109/nfv-sdn66355.2025.11349548"},"language":null,"primary_location":{"id":"doi:10.1109/nfv-sdn66355.2025.11349548","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nfv-sdn66355.2025.11349548","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Conference on Network Function Virtualization and Software-Defined Networking (NFV-SDN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5106399375","display_name":"Lazaros Liatsas","orcid":null},"institutions":[{"id":"https://openalex.org/I2799803557","display_name":"Barcelona Supercomputing Center","ror":"https://ror.org/05sd8tv96","country_code":"ES","type":"facility","lineage":["https://openalex.org/I2799803557","https://openalex.org/I9617848"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Lazaros Liatsas","raw_affiliation_strings":["Nearby Computing S.L,Barcelona,Spain"],"affiliations":[{"raw_affiliation_string":"Nearby Computing S.L,Barcelona,Spain","institution_ids":["https://openalex.org/I2799803557"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054282996","display_name":"Godfrey Kibalya","orcid":"https://orcid.org/0000-0002-7053-3756"},"institutions":[{"id":"https://openalex.org/I2799803557","display_name":"Barcelona Supercomputing Center","ror":"https://ror.org/05sd8tv96","country_code":"ES","type":"facility","lineage":["https://openalex.org/I2799803557","https://openalex.org/I9617848"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Godfrey Mirondo Kibalya","raw_affiliation_strings":["Nearby Computing S.L,Barcelona,Spain"],"affiliations":[{"raw_affiliation_string":"Nearby Computing S.L,Barcelona,Spain","institution_ids":["https://openalex.org/I2799803557"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5124260363","display_name":"Angelos Antonopoulos","orcid":null},"institutions":[{"id":"https://openalex.org/I2799803557","display_name":"Barcelona Supercomputing Center","ror":"https://ror.org/05sd8tv96","country_code":"ES","type":"facility","lineage":["https://openalex.org/I2799803557","https://openalex.org/I9617848"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Angelos Antonopoulos","raw_affiliation_strings":["Nearby Computing S.L,Barcelona,Spain"],"affiliations":[{"raw_affiliation_string":"Nearby Computing S.L,Barcelona,Spain","institution_ids":["https://openalex.org/I2799803557"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5106399375"],"corresponding_institution_ids":["https://openalex.org/I2799803557"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.75316006,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.0012000000569969416,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7559000253677368},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.5950999855995178},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.571399986743927},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4975000023841858},{"id":"https://openalex.org/keywords/fault-detection-and-isolation","display_name":"Fault detection and isolation","score":0.4108999967575073},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.36970001459121704},{"id":"https://openalex.org/keywords/supervised-learning","display_name":"Supervised learning","score":0.33629998564720154},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.33550000190734863}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7567999958992004},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7559000253677368},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.5950999855995178},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.571399986743927},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5551999807357788},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4975000023841858},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49549999833106995},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47929999232292175},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.4108999967575073},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.36970001459121704},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.33629998564720154},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.33550000190734863},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.31450000405311584},{"id":"https://openalex.org/C2780898871","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Performance metric","level":2,"score":0.30709999799728394},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.3068000078201294},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.30480000376701355},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.3041999936103821},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.30390000343322754},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.2989000082015991},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.2872999906539917},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.2678999900817871},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2635999917984009},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.25360000133514404}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/nfv-sdn66355.2025.11349548","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nfv-sdn66355.2025.11349548","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Conference on Network Function Virtualization and Software-Defined Networking (NFV-SDN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6312857866287231,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W2295598076","https://openalex.org/W2888937476","https://openalex.org/W2900100055","https://openalex.org/W2999561215","https://openalex.org/W3126359657","https://openalex.org/W4226214891","https://openalex.org/W4290927880","https://openalex.org/W4312820313","https://openalex.org/W4318049614","https://openalex.org/W4400582267","https://openalex.org/W4401247017","https://openalex.org/W4411019788"],"related_works":[],"abstract_inverted_index":{"Cloud-native":[0],"microservice":[1],"architectures":[2],"are":[3,113],"increasingly":[4],"adopted":[5],"in":[6,81,121,143],"modern":[7],"networked":[8],"systems,":[9],"including":[10],"virtualized":[11],"infrastructures":[12],"and":[13,27,37,59,78,97,101,115,148],"critical":[14],"domains":[15],"such":[16],"as":[17,62],"Healthcare":[18],"4.0.":[19],"Ensuring":[20],"their":[21],"reliability":[22],"requires":[23],"timely":[24],"anomaly":[25,76],"detection":[26,77,144],"accurate":[28],"root-cause":[29,79],"analysis":[30],"(RCA),":[31],"despite":[32],"challenges":[33],"from":[34,94],"service-level":[35],"dependencies":[36],"indirect":[38],"fault":[39],"propagation.":[40],"Traditional":[41],"methods":[42],"based":[43],"on":[44,132],"statistical":[45],"thresholds":[46],"or":[47],"rule-based":[48],"heuristics":[49],"often":[50],"lack":[51],"the":[52,118],"expressiveness":[53],"to":[54,89,107,126],"capture":[55],"complex":[56],"metric":[57],"interactions":[58],"treat":[60],"RCA":[61],"a":[63,122,133],"separate,":[64],"post":[65],"hoc":[66],"task.":[67],"We":[68],"propose":[69],"XTreeAD,":[70],"an":[71,86],"explainable,":[72],"supervised":[73],"framework":[74],"for":[75],"localization":[80,146],"microservice-based":[82],"systems.":[83],"XTreeAD":[84,139],"uses":[85],"XGBoost":[87],"classifier":[88],"detect":[90],"anomalous":[91],"system":[92],"states":[93],"monitored":[95],"performance":[96],"resource":[98],"utilization":[99],"metrics,":[100],"applies":[102],"SHapley":[103],"Additive":[104],"ex-Planations":[105],"(SHAP)":[106],"compute":[108],"per-service":[109],"feature":[110],"attributions.":[111],"These":[112],"aggregated":[114],"combined":[116],"with":[117],"service-call":[119],"graph":[120],"dependency-aware":[123],"ranking":[124],"algorithm":[125],"identify":[127],"likely":[128],"faulty":[129],"services.":[130],"Experiments":[131],"public":[134],"available":[135],"dataset":[136],"show":[137],"that":[138],"outperforms":[140],"established":[141],"baselines":[142],"precision,":[145],"accuracy,":[147],"runtime":[149],"efficiency.":[150]},"counts_by_year":[],"updated_date":"2026-02-01T03:34:12.195049","created_date":"2026-01-30T00:00:00"}