{"id":"https://openalex.org/W4206134478","doi":"https://doi.org/10.1109/icsrs53853.2021.9660694","title":"Machine Learning Based Anomaly Detection of Log Files Using Ensemble Learning and Self-Attention","display_name":"Machine Learning Based Anomaly Detection of Log Files Using Ensemble Learning and Self-Attention","publication_year":2021,"publication_date":"2021-11-24","ids":{"openalex":"https://openalex.org/W4206134478","doi":"https://doi.org/10.1109/icsrs53853.2021.9660694"},"language":"en","primary_location":{"id":"doi:10.1109/icsrs53853.2021.9660694","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icsrs53853.2021.9660694","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 5th International Conference on System Reliability and Safety (ICSRS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:miun:diva-44038","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045390735","display_name":"Markus F\u00e4lt","orcid":null},"institutions":[{"id":"https://openalex.org/I56475706","display_name":"Mid Sweden University","ror":"https://ror.org/019k1pd13","country_code":"SE","type":"education","lineage":["https://openalex.org/I56475706"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Markus Falt","raw_affiliation_strings":["Department of Information Systems and Technology, Mid Sweden University, Sundsvall Sweden, Holmgatan","F\u00f6rs\u00e4kringkassan, ITPBM Systems Management, Sundsvall Sweden, S\u00f6dra J\u00e4rnv\u00e4gsgatan"],"affiliations":[{"raw_affiliation_string":"Department of Information Systems and Technology, Mid Sweden University, Sundsvall Sweden, Holmgatan","institution_ids":["https://openalex.org/I56475706"]},{"raw_affiliation_string":"F\u00f6rs\u00e4kringkassan, ITPBM Systems Management, Sundsvall Sweden, S\u00f6dra J\u00e4rnv\u00e4gsgatan","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044064820","display_name":"Stefan Forsstr\u00f6m","orcid":"https://orcid.org/0000-0002-1797-1095"},"institutions":[{"id":"https://openalex.org/I56475706","display_name":"Mid Sweden University","ror":"https://ror.org/019k1pd13","country_code":"SE","type":"education","lineage":["https://openalex.org/I56475706"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Stefan Forsstrom","raw_affiliation_strings":["Department of Information Systems and Technology, Mid Sweden University, Sundsvall Sweden, Holmgatan"],"affiliations":[{"raw_affiliation_string":"Department of Information Systems and Technology, Mid Sweden University, Sundsvall Sweden, Holmgatan","institution_ids":["https://openalex.org/I56475706"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100329627","display_name":"Tingting Zhang","orcid":"https://orcid.org/0000-0002-3548-6106"},"institutions":[{"id":"https://openalex.org/I56475706","display_name":"Mid Sweden University","ror":"https://ror.org/019k1pd13","country_code":"SE","type":"education","lineage":["https://openalex.org/I56475706"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Tingting Zhang","raw_affiliation_strings":["Department of Information Systems and Technology, Mid Sweden University, Sundsvall Sweden, Holmgatan"],"affiliations":[{"raw_affiliation_string":"Department of Information Systems and Technology, Mid Sweden University, Sundsvall Sweden, Holmgatan","institution_ids":["https://openalex.org/I56475706"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5045390735"],"corresponding_institution_ids":["https://openalex.org/I56475706"],"apc_list":null,"apc_paid":null,"fwci":1.5281,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.84044626,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"209","last_page":"215"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9915000200271606,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9821000099182129,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8536628484725952},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7376340627670288},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.583120584487915},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5242170095443726},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4793201684951782},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.45413100719451904},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4387859106063843},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.42017829418182373},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.0888846218585968}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8536628484725952},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7376340627670288},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.583120584487915},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5242170095443726},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4793201684951782},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.45413100719451904},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4387859106063843},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.42017829418182373},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0888846218585968},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C165801399","wikidata":"https://www.wikidata.org/wiki/Q25428","display_name":"Voltage","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/icsrs53853.2021.9660694","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icsrs53853.2021.9660694","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 5th International Conference on System Reliability and Safety (ICSRS)","raw_type":"proceedings-article"},{"id":"pmh:oai:DiVA.org:miun-44038","is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:miun:diva-44038","pdf_url":null,"source":{"id":"https://openalex.org/S4306402314","display_name":"Publications (Mid Sweden University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I56475706","host_organization_name":"Mid Sweden University","host_organization_lineage":["https://openalex.org/I56475706"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:DiVA.org:miun-44038","is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:miun:diva-44038","pdf_url":null,"source":{"id":"https://openalex.org/S4306402314","display_name":"Publications (Mid Sweden University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I56475706","host_organization_name":"Mid Sweden University","host_organization_lineage":["https://openalex.org/I56475706"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1661413208","https://openalex.org/W2107263349","https://openalex.org/W2115056012","https://openalex.org/W2208211896","https://openalex.org/W2250539671","https://openalex.org/W2583874385","https://openalex.org/W2754665629","https://openalex.org/W2767094836","https://openalex.org/W2792207129","https://openalex.org/W2944703101","https://openalex.org/W2999825877","https://openalex.org/W3040197085","https://openalex.org/W3095840026","https://openalex.org/W3127712067","https://openalex.org/W4385245566","https://openalex.org/W6739901393"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W3210364259","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4300558037","https://openalex.org/W4377864969","https://openalex.org/W3030345572"],"abstract_inverted_index":{"Modern":[0],"enterprise":[1],"IT":[2],"systems":[3,30,69,123],"generate":[4],"large":[5],"amounts":[6],"of":[7,21,40,50,66,100,148,171],"log":[8,22,54,116,119,152,163],"data":[9,23,120],"to":[10,70,143,161],"record":[11],"system":[12,41,51,83],"state,":[13],"potential":[14],"errors,":[15],"and":[16,139,150],"performance":[17,159],"metrics.":[18],"Manual":[19],"analysis":[20],"is":[24,43,105],"becoming":[25],"more":[26,32],"difficult":[27],"as":[28],"these":[29],"become":[31],"complex.":[33],"Therefore,":[34,85],"machine":[35],"learning":[36,61,141],"based":[37],"anomaly":[38,55,91,131,164],"detection":[39,56,92,132,165],"logs":[42],"a":[44,89,158],"vital":[45],"component":[46],"for":[47,128],"the":[48,62,67,79,101,130,145,172],"future":[49],"management.":[52],"Existing":[53],"models":[57],"commonly":[58],"rely":[59],"on":[60],"general":[63,90],"normal":[64,149],"behavior":[65],"target":[68,102,173],"accurately":[71],"detect":[72],"anomalies.":[73],"They":[74],"are":[75,110],"however":[76],"limited":[77],"by":[78,107],"often":[80],"sparse":[81],"existing":[82],"knowledge.":[84],"this":[86],"paper":[87],"proposes":[88],"method":[93,156],"which":[94],"requires":[95],"little":[96,169],"or":[97],"no":[98],"knowledge":[99,170],"system.":[103,174],"This":[104],"done":[106],"assuming":[108],"there":[109],"semantic":[111,146],"similarities":[112],"in":[113],"different":[114],"systems\u2019":[115],"data.":[117],"Labeled":[118],"from":[121],"other":[122,162],"can":[124],"then":[125],"be":[126],"used":[127],"training":[129],"model.":[133],"The":[134,154],"model":[135],"uses":[136],"self-attention":[137],"transformers":[138],"ensemble":[140],"techniques":[142],"learn":[144],"representation":[147],"abnormal":[151],"messages.":[153],"proposed":[155],"achieves":[157],"comparable":[160],"methods":[166],"while":[167],"requiring":[168]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2}],"updated_date":"2026-02-11T14:41:00.668223","created_date":"2025-10-10T00:00:00"}