{"id":"https://openalex.org/W3095840026","doi":"https://doi.org/10.1109/tnsm.2020.3034647","title":"HitAnomaly: Hierarchical Transformers for Anomaly Detection in System Log","display_name":"HitAnomaly: Hierarchical Transformers for Anomaly Detection in System Log","publication_year":2020,"publication_date":"2020-10-29","ids":{"openalex":"https://openalex.org/W3095840026","doi":"https://doi.org/10.1109/tnsm.2020.3034647","mag":"3095840026"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2020.3034647","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.3034647","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061624006","display_name":"Shaohan Huang","orcid":"https://orcid.org/0000-0003-4324-6337"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaohan Huang","raw_affiliation_strings":["School of Computer Science and Engineering, Sino-German Joint Software Institute, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4324-6337","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Sino-German Joint Software Institute, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100330624","display_name":"Yi Liu","orcid":"https://orcid.org/0000-0003-1829-2817"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi Liu","raw_affiliation_strings":["School of Computer Science and Engineering, Sino-German Joint Software Institute, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1829-2817","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Sino-German Joint Software Institute, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001203568","display_name":"Carol Fung","orcid":"https://orcid.org/0000-0001-5726-4371"},"institutions":[{"id":"https://openalex.org/I184840846","display_name":"Virginia Commonwealth University","ror":"https://ror.org/02nkdxk79","country_code":"US","type":"education","lineage":["https://openalex.org/I184840846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Carol Fung","raw_affiliation_strings":["Computer Science Department, Virginia Commonwealth University, Richmond, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department, Virginia Commonwealth University, Richmond, VA, USA","institution_ids":["https://openalex.org/I184840846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104779659","display_name":"Rong He","orcid":null},"institutions":[{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rong He","raw_affiliation_strings":["Chinese Academy of Scientific Computer Network Information Center, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Scientific Computer Network Information Center, Beijing, China","institution_ids":["https://openalex.org/I4210108629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048412206","display_name":"Yining Zhao","orcid":"https://orcid.org/0000-0002-3156-0858"},"institutions":[{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yining Zhao","raw_affiliation_strings":["Chinese Academy of Scientific Computer Network Information Center, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Scientific Computer Network Information Center, Beijing, China","institution_ids":["https://openalex.org/I4210108629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018705589","display_name":"Hailong Yang","orcid":"https://orcid.org/0000-0003-1101-7927"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hailong Yang","raw_affiliation_strings":["School of Computer Science and Engineering, Sino-German Joint Software Institute, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1101-7927","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Sino-German Joint Software Institute, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5074183877","display_name":"Zhongzhi Luan","orcid":"https://orcid.org/0000-0002-7186-0556"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongzhi Luan","raw_affiliation_strings":["School of Computer Science and Engineering, Sino-German Joint Software Institute, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-7186-0556","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Sino-German Joint Software Institute, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":13.1553,"has_fulltext":false,"cited_by_count":218,"citation_normalized_percentile":{"value":0.99013298,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"17","issue":"4","first_page":"2064","last_page":"2076"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9810000061988831,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9805999994277954,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7838571071624756},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7134963274002075},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6098725199699402},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5240235924720764},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.44999492168426514}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7838571071624756},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7134963274002075},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6098725199699402},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5240235924720764},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.44999492168426514},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2020.3034647","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.3034647","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5774836301","display_name":"\u9ad8\u6027\u80fd\u3001\u9ad8\u53ef\u6269\u5c55\u548c\u9ad8\u53ef\u79fb\u690d\u7684Stencil\u4ee3\u7801\u751f\u6210\u548c\u4f18\u5316\u6846\u67b6\u7814\u7a76","funder_award_id":"62072018","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W35047313","https://openalex.org/W114517082","https://openalex.org/W208057840","https://openalex.org/W1524673069","https://openalex.org/W1540258466","https://openalex.org/W1919179112","https://openalex.org/W1965626898","https://openalex.org/W1994625872","https://openalex.org/W2027380800","https://openalex.org/W2028479713","https://openalex.org/W2032280284","https://openalex.org/W2039157918","https://openalex.org/W2054506507","https://openalex.org/W2094924503","https://openalex.org/W2096017373","https://openalex.org/W2107263349","https://openalex.org/W2111795469","https://openalex.org/W2116261113","https://openalex.org/W2153802732","https://openalex.org/W2401686019","https://openalex.org/W2525778437","https://openalex.org/W2527994611","https://openalex.org/W2536606640","https://openalex.org/W2754665629","https://openalex.org/W2756452435","https://openalex.org/W2762028850","https://openalex.org/W2767094836","https://openalex.org/W2782907311","https://openalex.org/W2896457183","https://openalex.org/W2899771611","https://openalex.org/W2947815220","https://openalex.org/W2963341956","https://openalex.org/W2963403868","https://openalex.org/W2963626623","https://openalex.org/W2963999143","https://openalex.org/W2965838158","https://openalex.org/W2970641574","https://openalex.org/W3145644127","https://openalex.org/W4385245566","https://openalex.org/W6601359990","https://openalex.org/W6608443543","https://openalex.org/W6631426539","https://openalex.org/W6632550495","https://openalex.org/W6677408996","https://openalex.org/W6719819555","https://openalex.org/W6728835364","https://openalex.org/W6739901393","https://openalex.org/W6755207826","https://openalex.org/W6756040250"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Enterprise":[0],"systems":[1],"often":[2],"produce":[3],"a":[4,94,100,115,120],"large":[5],"volume":[6],"of":[7,65,72,163,193],"logs":[8,19,83],"to":[9,42,54,79,104,124,146],"record":[10],"runtime":[11],"status":[12],"and":[13,25,52,110,119,156,159],"events.":[14],"Anomaly":[15],"detection":[16,32,97,186],"from":[17,39],"system":[18,26],"is":[20,144],"crucial":[21],"for":[22],"service":[23],"management":[24],"maintenance.":[27],"Most":[28],"existing":[29,183],"log-based":[30,95,184],"anomaly":[31,56,96,185],"methods":[33,46],"use":[34,131],"log":[35,40,50,66,107,116,153,172,199],"event":[36],"indexes":[37],"parsed":[38],"data":[41],"detect":[43],"anomalies.":[44,164],"Those":[45],"cannot":[47],"handle":[48,160],"unseen":[49],"templates":[51,67],"lead":[53],"inaccurate":[55],"detection.":[57],"Some":[58],"recent":[59],"studies":[60],"focused":[61],"on":[62,170,197],"the":[63,70,81,148,191],"semantics":[64],"but":[68],"ignored":[69],"information":[71,150],"parameter":[73,86,111,121,157],"values.":[74,87,112],"Therefore,":[75],"their":[76,126],"approaches":[77],"failed":[78],"address":[80],"abnormal":[82],"caused":[84],"by":[85],"In":[88,140],"this":[89,141],"article,":[90],"we":[91],"propose":[92],"HitAnomaly,":[93],"model":[98,105,196],"utilizing":[99],"hierarchical":[101],"transformer":[102],"structure":[103],"both":[106,152],"template":[108,154],"sequences":[109],"We":[113,129,165,188],"designed":[114],"sequence":[117,155],"encoder":[118,123],"value":[122],"obtain":[125],"representations":[127],"correspondingly.":[128],"then":[130],"an":[132],"attention":[133],"mechanism":[134],"as":[135],"our":[136,167,194],"final":[137],"classification":[138],"model.":[139],"way,":[142],"HitAnomaly":[143,179],"able":[145],"capture":[147],"semantic":[149],"in":[151],"values":[158],"various":[161],"types":[162],"evaluated":[166],"proposed":[168,195],"method":[169],"three":[171],"datasets.":[173],"Our":[174],"experimental":[175],"results":[176],"demonstrate":[177],"that":[178],"has":[180],"outperformed":[181],"other":[182],"methods.":[187],"also":[189],"assess":[190],"robustness":[192],"unstable":[198],"data.":[200]},"counts_by_year":[{"year":2026,"cited_by_count":24},{"year":2025,"cited_by_count":50},{"year":2024,"cited_by_count":46},{"year":2023,"cited_by_count":66},{"year":2022,"cited_by_count":21},{"year":2021,"cited_by_count":11}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}