{"id":"https://openalex.org/W4411336764","doi":"https://doi.org/10.1109/tnse.2025.3579809","title":"System Log Anomaly Detection With Noise-Contrastive Learning and Pattern Feature","display_name":"System Log Anomaly Detection With Noise-Contrastive Learning and Pattern Feature","publication_year":2025,"publication_date":"2025-06-16","ids":{"openalex":"https://openalex.org/W4411336764","doi":"https://doi.org/10.1109/tnse.2025.3579809"},"language":"en","primary_location":{"id":"doi:10.1109/tnse.2025.3579809","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2025.3579809","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100752688","display_name":"Pengcheng Luo","orcid":"https://orcid.org/0000-0003-0586-3078"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Pengcheng Luo","raw_affiliation_strings":["Ningbo Artificial Intelligence Institute, Shanghai Jiao Tong University, Ningbo, China"],"affiliations":[{"raw_affiliation_string":"Ningbo Artificial Intelligence Institute, Shanghai Jiao Tong University, Ningbo, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5118319456","display_name":"Dengke Deng","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dengke Deng","raw_affiliation_strings":["Ningbo Artificial Intelligence Institute, Shanghai Jiao Tong University, Ningbo, China"],"affiliations":[{"raw_affiliation_string":"Ningbo Artificial Intelligence Institute, Shanghai Jiao Tong University, Ningbo, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067820762","display_name":"Mingfeng Xie","orcid":"https://orcid.org/0000-0002-3253-9137"},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingfeng Xie","raw_affiliation_strings":["College of Electronic and Information Engineering, Nanjing University of Aeronautics and Astronautics, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"College of Electronic and Information Engineering, Nanjing University of Aeronautics and Astronautics, Nanjing, China","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001818611","display_name":"Genke Yang","orcid":"https://orcid.org/0000-0003-3492-0211"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Genke Yang","raw_affiliation_strings":["Ningbo Artificial Intelligence Institute, Shanghai Jiao Tong University, Ningbo, China"],"affiliations":[{"raw_affiliation_string":"Ningbo Artificial Intelligence Institute, Shanghai Jiao Tong University, Ningbo, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103529401","display_name":"Jian Chu","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Chu","raw_affiliation_strings":["Ningbo Artificial Intelligence Institute, Shanghai Jiao Tong University, Ningbo, China"],"affiliations":[{"raw_affiliation_string":"Ningbo Artificial Intelligence Institute, Shanghai Jiao Tong University, Ningbo, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069808079","display_name":"Boon\u2010Hee Soong","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Boon-Hee Soong","raw_affiliation_strings":["School of Electrical and Electronics Engineering, Nanyang Technological University, Singapore"],"affiliations":[{"raw_affiliation_string":"School of Electrical and Electronics Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060020877","display_name":"Chau Yuen","orcid":"https://orcid.org/0000-0002-9307-2120"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Chau Yuen","raw_affiliation_strings":["School of Electrical and Electronics Engineering, Nanyang Technological University, Singapore"],"affiliations":[{"raw_affiliation_string":"School of Electrical and Electronics Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5100752688"],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":null,"apc_paid":null,"fwci":2.8599,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.91392259,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"13","issue":null,"first_page":"11","last_page":"24"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10876","display_name":"Fault Detection and Control Systems","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6566778421401978},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6309118866920471},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5732540488243103},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.5668417811393738},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5622562766075134},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.5540581345558167},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.48335617780685425},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4609850347042084},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.1714043915271759},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.09649530053138733}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6566778421401978},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6309118866920471},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5732540488243103},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.5668417811393738},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5622562766075134},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5540581345558167},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.48335617780685425},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4609850347042084},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.1714043915271759},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.09649530053138733},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnse.2025.3579809","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2025.3579809","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W1970088130","https://openalex.org/W2039157918","https://openalex.org/W2056132907","https://openalex.org/W2076618162","https://openalex.org/W2107263349","https://openalex.org/W2295598076","https://openalex.org/W2296719434","https://openalex.org/W2527994611","https://openalex.org/W2754665629","https://openalex.org/W2767094836","https://openalex.org/W2807955733","https://openalex.org/W2891432086","https://openalex.org/W2896457183","https://openalex.org/W2947815220","https://openalex.org/W2963999143","https://openalex.org/W2965838158","https://openalex.org/W2969804742","https://openalex.org/W2997591727","https://openalex.org/W3034418897","https://openalex.org/W3037958117","https://openalex.org/W3040197085","https://openalex.org/W3190441617","https://openalex.org/W3199174176","https://openalex.org/W3211484264","https://openalex.org/W4226128225","https://openalex.org/W4295789122","https://openalex.org/W4316876979","https://openalex.org/W4319993380","https://openalex.org/W4367016885","https://openalex.org/W4381244010","https://openalex.org/W4383200230","https://openalex.org/W4385245566","https://openalex.org/W4385605314","https://openalex.org/W4391147905","https://openalex.org/W4391235307","https://openalex.org/W4392901781","https://openalex.org/W4396817460","https://openalex.org/W4398222740","https://openalex.org/W4400762160","https://openalex.org/W4402401596"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"System":[0],"logs":[1],"play":[2],"a":[3,80,89,112,154],"critical":[4],"role":[5],"in":[6,138,209],"identifying":[7],"security":[8],"threats":[9],"such":[10],"as":[11,88],"network":[12],"attacks,":[13],"unauthorized":[14],"access,":[15],"and":[16,33,66,100,111,216],"system":[17],"vulnerabilities.":[18],"Recent":[19],"research":[20],"has":[21],"focused":[22],"on":[23,198],"extracting":[24],"sequences":[25],"of":[26,63,69,206],"security-related":[27],"events":[28,125],"from":[29],"large-scale":[30],"log":[31,139,189],"data":[32],"applying":[34],"deep":[35],"learning":[36,82,210],"methods":[37,42,130,192],"for":[38,156],"anomaly":[39,44,70,158,190],"detection.":[40],"These":[41,201],"achieve":[43],"detection":[45,71,191,197],"by":[46,183],"designing":[47],"an":[48,107],"auxiliary":[49],"training":[50,90],"task":[51,62],"that":[52,84,160,169,177],"predicts":[53],"the":[54,58,61,67,93,122,132,157,204],"next":[55],"event.":[56],"However,":[57],"inconsistency":[59],"between":[60,98,214],"event":[64,140,218],"prediction":[65],"goal":[68],"limits":[72],"their":[73],"performance.":[74],"In":[75],"this":[76,151],"paper,":[77],"we":[78],"introduce":[79],"noise-contrastive":[81],"approach":[83,104,152,208],"introduces":[85],"synthetic":[86],"noise":[87],"signal,":[91],"enabling":[92],"model":[94,133,179],"to":[95,134,146,167],"directly":[96],"discriminate":[97],"normal":[99,127,215],"anomalous":[101,217],"samples.":[102],"Our":[103],"also":[105],"includes":[106],"ensemble":[108],"model,":[109],"STrees,":[110],"novel":[113],"feature":[114],"engineering":[115],"method":[116],"named":[117],"pattern":[118],"feature.":[119],"By":[120],"modeling":[121],"relationships":[123],"among":[124],"under":[126],"conditions,":[128],"these":[129],"allow":[131],"capture":[135],"contextual":[136],"dependencies":[137],"sequences,":[141],"thereby":[142],"improving":[143],"its":[144],"ability":[145],"detect":[147],"potential":[148],"anomalies.":[149],"Specifically,":[150],"achieves":[153],"recall":[155,182],"class":[159],"is":[161],"at":[162,184],"least":[163,185],"7.3%":[164],"higher":[165],"compared":[166],"models":[168],"utilize":[170],"only":[171],"sequence":[172,219],"features.":[173],"Experimental":[174],"results":[175,202],"demonstrate":[176],"our":[178,207],"improves":[180],"anomaly-class":[181],"10.8%":[186],"over":[187],"advanced":[188],"while":[193],"achieving":[194],"more":[195],"accurate":[196],"most":[199],"datasets.":[200],"highlight":[203],"effectiveness":[205],"discriminative":[211],"decision":[212],"boundaries":[213],"patterns":[220]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2025-11-23T05:10:03.516525","created_date":"2025-10-10T00:00:00"}