{"id":"https://openalex.org/W3194080456","doi":"https://doi.org/10.1145/3465481.3470083","title":"Log Abstraction for Information Security: Heuristics and Reproducibility","display_name":"Log Abstraction for Information Security: Heuristics and Reproducibility","publication_year":2021,"publication_date":"2021-08-16","ids":{"openalex":"https://openalex.org/W3194080456","doi":"https://doi.org/10.1145/3465481.3470083","mag":"3194080456"},"language":"en","primary_location":{"id":"doi:10.1145/3465481.3470083","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3465481.3470083","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019052543","display_name":"Rafael Copstein","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rafael Copstein","raw_affiliation_strings":["Dalhousie University, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalhousie University, CA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033213246","display_name":"Jeff Schwartzentruber","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jeff Schwartzentruber","raw_affiliation_strings":["2Keys, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"2Keys, CA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008462534","display_name":"A. Nur Zincir\u2010Heywood","orcid":"https://orcid.org/0000-0003-2796-7265"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nur Zincir-Heywood","raw_affiliation_strings":["Dalhousie University, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalhousie University, CA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003699164","display_name":"Malcolm I. Heywood","orcid":"https://orcid.org/0000-0002-1521-0671"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Malcolm Heywood","raw_affiliation_strings":["Dalhousie University, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalhousie University, CA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.4411,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.89699636,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9833999872207642,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8108259439468384},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.7292813062667847},{"id":"https://openalex.org/keywords/parsing","display_name":"Parsing","score":0.6683824062347412},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.654691219329834},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.590883195400238},{"id":"https://openalex.org/keywords/replicate","display_name":"Replicate","score":0.511681318283081},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5028781294822693},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.46299514174461365},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.44715285301208496},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.3761045038700104},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.305391788482666}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8108259439468384},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.7292813062667847},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.6683824062347412},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.654691219329834},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.590883195400238},{"id":"https://openalex.org/C2781162219","wikidata":"https://www.wikidata.org/wiki/Q26250693","display_name":"Replicate","level":2,"score":0.511681318283081},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5028781294822693},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.46299514174461365},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.44715285301208496},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3761045038700104},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.305391788482666},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3465481.3470083","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3465481.3470083","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.41999998688697815,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W1043239492","https://openalex.org/W1661413208","https://openalex.org/W1915075355","https://openalex.org/W1990301041","https://openalex.org/W1994625872","https://openalex.org/W2000339673","https://openalex.org/W2076809217","https://openalex.org/W2097279640","https://openalex.org/W2098695822","https://openalex.org/W2115056012","https://openalex.org/W2142804492","https://openalex.org/W2153470728","https://openalex.org/W2208211896","https://openalex.org/W2331488455","https://openalex.org/W2479743319","https://openalex.org/W2536393303","https://openalex.org/W2583874385","https://openalex.org/W2593903637","https://openalex.org/W2611828818","https://openalex.org/W2754665629","https://openalex.org/W2762028850","https://openalex.org/W2792207129","https://openalex.org/W2963999143","https://openalex.org/W3003705911","https://openalex.org/W3004114389","https://openalex.org/W3005115843","https://openalex.org/W3107155461"],"related_works":["https://openalex.org/W4254851101","https://openalex.org/W3171007296","https://openalex.org/W22115721","https://openalex.org/W2321234655","https://openalex.org/W2065444835","https://openalex.org/W4394550905","https://openalex.org/W2952773340","https://openalex.org/W2470062578","https://openalex.org/W2981861370","https://openalex.org/W4229503580"],"abstract_inverted_index":{"The":[0],"collection":[1],"of":[2,8,26,34,49,52,79,87,102,127,142],"log":[3,71,103,120],"messages":[4],"regarding":[5],"the":[6,18,22,47,50,62,69,77,91,114,138],"operation":[7],"deployed":[9],"services":[10],"and":[11,24,32,40,73,100,140],"application":[12],"is":[13],"an":[14],"integral":[15],"component":[16],"to":[17,132],"forensic":[19,106,135],"analysis":[20,86,107,136],"for":[21,30,46,98,105,137],"identification":[23,139],"understanding":[25,141],"security":[27,143],"incidents.":[28,144],"Approaches":[29],"parsing":[31,72,99],"abstraction":[33,74,101],"such":[35,88],"logs,":[36],"despite":[37],"widespread":[38],"use":[39],"study,":[41],"do":[42],"not":[43],"directly":[44],"account":[45],"individualities":[48],"domain":[51],"information":[53,80],"security.":[54,81],"This,":[55],"in":[56,119,125,134],"return,":[57],"limits":[58],"their":[59,96],"applicability":[60],"on":[61],"field.":[63],"In":[64],"this":[65],"work,":[66],"we":[67,83,94],"analyze":[68],"state-of-the-art":[70,115],"algorithms":[75,89],"from":[76,90],"perspective":[78],"First,":[82],"reproduce/replicate":[84],"previous":[85],"literature.":[92],"Then,":[93],"evaluate":[95],"ability":[97],"files":[104],"purposes.":[108],"Our":[109],"study":[110],"demonstrates":[111],"that":[112],"while":[113],"techniques":[116],"are":[117,123],"accurate":[118],"parsing,":[121],"improvements":[122],"necessary":[124],"terms":[126],"achieving":[128],"a":[129],"holistic":[130],"view":[131],"aid":[133]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":2}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}