{"id":"https://openalex.org/W4400678979","doi":"https://doi.org/10.1109/tdsc.2024.3428538","title":"Log Sequence Anomaly Detection Based on Template and Parameter Parsing via BERT","display_name":"Log Sequence Anomaly Detection Based on Template and Parameter Parsing via BERT","publication_year":2024,"publication_date":"2024-07-16","ids":{"openalex":"https://openalex.org/W4400678979","doi":"https://doi.org/10.1109/tdsc.2024.3428538"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2024.3428538","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3428538","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044104149","display_name":"Xiaolin Chai","orcid":"https://orcid.org/0000-0002-7447-3367"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xiaolin Chai","raw_affiliation_strings":["Department of Computer Science, Beijing University of Posts and Telecommunication, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Beijing University of Posts and Telecommunication, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100438442","display_name":"Hang Zhang","orcid":"https://orcid.org/0000-0001-9573-1372"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hang Zhang","raw_affiliation_strings":["Department of Computer Science, Beijing University of Posts and Telecommunication, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Beijing University of Posts and Telecommunication, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081982421","display_name":"Jue Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jue Zhang","raw_affiliation_strings":["Department of Computer Science and Engineering, Beihang University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101112482","display_name":"Yan Sun","orcid":"https://orcid.org/0009-0007-0330-8165"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yan Sun","raw_affiliation_strings":["Department of Computer Science, Beijing University of Posts and Telecommunication, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Beijing University of Posts and Telecommunication, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050881965","display_name":"Sajal K. Das","orcid":"https://orcid.org/0000-0002-9471-0868"},"institutions":[{"id":"https://openalex.org/I20382870","display_name":"Missouri University of Science and Technology","ror":"https://ror.org/00scwqd12","country_code":"US","type":"education","lineage":["https://openalex.org/I20382870"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sajal K. Das","raw_affiliation_strings":["Department of Computer Science, Missouri University of Science and Technology, Rolla, MO, USA","Computer Science and Daniel St. Clair Endowed Chair at Missouri University of Science and Technology, Rolla, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Missouri University of Science and Technology, Rolla, MO, USA","institution_ids":["https://openalex.org/I20382870"]},{"raw_affiliation_string":"Computer Science and Daniel St. Clair Endowed Chair at Missouri University of Science and Technology, Rolla, USA","institution_ids":["https://openalex.org/I20382870"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5044104149"],"corresponding_institution_ids":["https://openalex.org/I139759216"],"apc_list":null,"apc_paid":null,"fwci":2.418,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.90143403,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"22","issue":"2","first_page":"1150","last_page":"1167"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9697999954223633,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/parsing","display_name":"Parsing","score":0.7626932859420776},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.5795695781707764},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5314573049545288},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5113767981529236},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.48721593618392944},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.40092024207115173},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.24426037073135376},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.1057840883731842}],"concepts":[{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.7626932859420776},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.5795695781707764},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5314573049545288},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5113767981529236},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.48721593618392944},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.40092024207115173},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.24426037073135376},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.1057840883731842},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2024.3428538","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3428538","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W2039157918","https://openalex.org/W2063566496","https://openalex.org/W2076809217","https://openalex.org/W2107263349","https://openalex.org/W2121879602","https://openalex.org/W2583874385","https://openalex.org/W2750747353","https://openalex.org/W2754665629","https://openalex.org/W2762028850","https://openalex.org/W2767094836","https://openalex.org/W2952963788","https://openalex.org/W2954548827","https://openalex.org/W2963999143","https://openalex.org/W2965838158","https://openalex.org/W2972437240","https://openalex.org/W3041215671","https://openalex.org/W3095840026","https://openalex.org/W3127712067","https://openalex.org/W3156636935","https://openalex.org/W3167387776","https://openalex.org/W3174544005","https://openalex.org/W3199174176","https://openalex.org/W3213920537","https://openalex.org/W4205965165","https://openalex.org/W4226065059","https://openalex.org/W4312340546","https://openalex.org/W4312454513","https://openalex.org/W4313325148","https://openalex.org/W4319993380","https://openalex.org/W4327503230","https://openalex.org/W4367146761","https://openalex.org/W4382119071","https://openalex.org/W4385605314","https://openalex.org/W4388210198","https://openalex.org/W4391096001","https://openalex.org/W4402443006","https://openalex.org/W6712994927","https://openalex.org/W6732386721","https://openalex.org/W6751494907","https://openalex.org/W6751893232","https://openalex.org/W6766673545","https://openalex.org/W6775750170"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W2972971679"],"abstract_inverted_index":{"Logs":[0],"record":[1],"various":[2],"operations":[3],"and":[4,19,27,37,49,72,77,105,115,165,187],"events":[5],"during":[6,94],"system":[7,25,32],"running":[8],"in":[9,31],"text":[10],"format,":[11],"which":[12,58],"is":[13,28,44],"an":[14],"essential":[15],"basis":[16],"for":[17,88],"detecting":[18],"identifying":[20],"potential":[21],"security":[22,36],"threats":[23],"or":[24,62],"failures,":[26],"widely":[29],"used":[30],"management":[33],"to":[34,126,143,154],"ensure":[35,112],"reliability.":[38],"Existing":[39],"log":[40,47,74,81,138,169,175],"sequence":[41],"anomaly":[42,132,156,189],"detection":[43,157,190],"limited":[45],"by":[46],"parsing":[48,75,176,182],"does":[50],"not":[51],"consider":[52],"all":[53],"key":[54],"features":[55,140],"of":[56,117,168],"logs,":[57],"may":[59],"cause":[60],"false":[61],"missed":[63],"detection.":[64],"In":[65],"this":[66],"article,":[67],"we":[68,96,119,134],"propose":[69,120],"a":[70,121],"fast":[71,123],"accurate":[73],"method":[76,125,177,191],"feed":[78],"the":[79,84,113,136,144,163,179,188],"entire":[80],"content":[82,139],"into":[83],"deep":[85],"learning":[86],"network":[87],"analysis.":[89],"To":[90,111],"avoid":[91],"semantic":[92,103],"loss":[93],"parsing,":[95,118],"replace":[97],"some":[98],"variables":[99],"with":[100,108,128],"tokens":[101],"containing":[102],"information":[104,167],"divide":[106],"logs":[107],"appropriate":[109],"granularity.":[110],"speed":[114],"accuracy":[116],"similarity-based":[122],"merging":[124],"deal":[127],"redundant":[129],"templates.":[130],"For":[131],"detection,":[133],"use":[135,147],"complete":[137],"as":[141],"input":[142],"model.":[145],"We":[146],"Bidirectional":[148],"Encoder":[149],"Representation":[150],"from":[151],"Transformers":[152],"(BERT)":[153],"output":[155],"results":[158,194],"directly":[159],"after":[160],"considering":[161],"both":[162],"global":[164],"local":[166],"sequences.":[170],"Experiments":[171],"show":[172],"that":[173],"our":[174],"achieves":[178,192],"best":[180],"average":[181],"quality":[183],"on":[184,195],"16":[185],"datasets,":[186],"optimal":[193],"different":[196],"datasets.":[197]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":5}],"updated_date":"2026-04-02T15:55:50.835912","created_date":"2025-10-10T00:00:00"}