{"id":"https://openalex.org/W4367046692","doi":"https://doi.org/10.1145/3543507.3583215","title":"Unsupervised Anomaly Detection on Microservice Traces through Graph VAE","display_name":"Unsupervised Anomaly Detection on Microservice Traces through Graph VAE","publication_year":2023,"publication_date":"2023-04-26","ids":{"openalex":"https://openalex.org/W4367046692","doi":"https://doi.org/10.1145/3543507.3583215"},"language":"en","primary_location":{"id":"doi:10.1145/3543507.3583215","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3543507.3583215","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583215","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2023","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583215","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102871595","display_name":"Zhe Xie","orcid":"https://orcid.org/0000-0001-9749-2539"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zhe Xie","raw_affiliation_strings":["Department of Computer Science and Technology, Tsinghua University, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075634052","display_name":"Haowen Xu","orcid":"https://orcid.org/0000-0003-2841-5788"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haowen Xu","raw_affiliation_strings":["Department of Computer Science and Technology, Tsinghua University, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030501342","display_name":"Wenxiao Chen","orcid":"https://orcid.org/0000-0001-8852-675X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenxiao Chen","raw_affiliation_strings":["Department of Computer Science and Technology, Tsinghua University, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091614340","display_name":"Wanxue Li","orcid":"https://orcid.org/0000-0001-6582-2521"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wanxue Li","raw_affiliation_strings":["eBay, China"],"affiliations":[{"raw_affiliation_string":"eBay, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026733966","display_name":"Huai Jiang","orcid":"https://orcid.org/0000-0001-5049-9178"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huai Jiang","raw_affiliation_strings":["eBay, China"],"affiliations":[{"raw_affiliation_string":"eBay, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046916861","display_name":"Liangfei Su","orcid":"https://orcid.org/0000-0002-5735-6740"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liangfei Su","raw_affiliation_strings":["eBay, China"],"affiliations":[{"raw_affiliation_string":"eBay, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040046281","display_name":"Hanzhang Wang","orcid":"https://orcid.org/0000-0002-7994-2935"},"institutions":[{"id":"https://openalex.org/I4210150719","display_name":"eBay (United States)","ror":"https://ror.org/05cnabr44","country_code":"US","type":"company","lineage":["https://openalex.org/I4210150719"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hanzhang Wang","raw_affiliation_strings":["eBay, USA"],"affiliations":[{"raw_affiliation_string":"eBay, USA","institution_ids":["https://openalex.org/I4210150719"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046419834","display_name":"Dan Pei","orcid":"https://orcid.org/0000-0002-5113-838X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dan Pei","raw_affiliation_strings":["Department of Computer Science and Technology, Tsinghua University, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5102871595"],"corresponding_institution_ids":["https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":7.3535,"has_fulltext":true,"cited_by_count":37,"citation_normalized_percentile":{"value":0.9756821,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"2874","last_page":"2884"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7801555395126343},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6736287474632263},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.47905433177948},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.4350183606147766},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4027077257633209}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7801555395126343},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6736287474632263},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.47905433177948},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.4350183606147766},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4027077257633209},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3543507.3583215","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3543507.3583215","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583215","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2023","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3543507.3583215","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3543507.3583215","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583215","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2023","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3748656914","display_name":null,"funder_award_id":"Norway","funder_id":"https://openalex.org/F4320323299","funder_display_name":"Norges Forskningsr\u00e5d"},{"id":"https://openalex.org/G5156750161","display_name":null,"funder_award_id":"2019YFE0105500","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G6396165537","display_name":null,"funder_award_id":"309494","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G6611912945","display_name":null,"funder_award_id":"309494","funder_id":"https://openalex.org/F4320323299","funder_display_name":"Norges Forskningsr\u00e5d"}],"funders":[{"id":"https://openalex.org/F4320323299","display_name":"Norges Forskningsr\u00e5d","ror":"https://ror.org/00epmv149"},{"id":"https://openalex.org/F4320329777","display_name":"Beijing National Research Center For Information Science And Technology","ror":null},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4367046692.pdf","grobid_xml":"https://content.openalex.org/works/W4367046692.grobid-xml"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W2102632804","https://openalex.org/W2122646361","https://openalex.org/W2508465325","https://openalex.org/W2747329762","https://openalex.org/W2767094836","https://openalex.org/W2785362611","https://openalex.org/W2804315071","https://openalex.org/W2912083425","https://openalex.org/W2918465401","https://openalex.org/W2963196945","https://openalex.org/W2970266365","https://openalex.org/W2990537780","https://openalex.org/W3005397433","https://openalex.org/W3089756992","https://openalex.org/W3098957257","https://openalex.org/W3100178186","https://openalex.org/W3162150435","https://openalex.org/W3170937175","https://openalex.org/W3197377865","https://openalex.org/W3206349396","https://openalex.org/W4213191759","https://openalex.org/W4284688717","https://openalex.org/W4313547544"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"The":[0],"microservice":[1,81],"architecture":[2],"is":[3,24],"widely":[4],"employed":[5],"in":[6,45],"large":[7],"Internet":[8,177],"systems.":[9],"For":[10],"each":[11,39],"user":[12],"request,":[13],"a":[14,22,69,92,175],"few":[15],"of":[16,88,101],"the":[17,28,35,85,99,112,126],"microservices":[18,33],"are":[19,43],"called,":[20],"and":[21,34,60,133,167],"trace":[23,157,172],"formed":[25],"to":[26,56,151],"record":[27],"tree-like":[29],"call":[30,40],"dependencies":[31],"among":[32],"time":[36,86],"consumption":[37,87],"at":[38],"node.":[41],"Traces":[42],"useful":[44],"diagnosing":[46],"system":[47],"failures,":[48],"but":[49],"their":[50,58,62],"complex":[51],"structures":[52],"make":[53],"it":[54],"difficult":[55],"model":[57],"patterns":[59],"detect":[61],"anomalies.":[63],"In":[64],"this":[65,153],"paper,":[66],"we":[67,90,122],"propose":[68,91,148],"novel":[70,93],"dual-variable":[71],"graph":[72],"variational":[73],"autoencoder":[74],"(VAE)":[75],"for":[76,106,116,156],"unsupervised":[77],"anomaly":[78,113,117,158],"detection":[79],"on":[80],"traces.":[82],"To":[83,119],"reconstruct":[84],"nodes,":[89],"dispatching":[94],"layer.":[95],"We":[96,147],"find":[97],"that":[98,125],"inversion":[100],"negative":[102],"log-likelihood":[103],"(NLL)":[104],"appears":[105],"some":[107],"anomalous":[108],"samples,":[109],"which":[110],"makes":[111],"score":[114],"infeasible":[115],"detection.":[118],"address":[120],"this,":[121],"point":[123],"out":[124],"NLL":[127],"can":[128,139],"be":[129],"decomposed":[130],"into":[131],"KL-divergence":[132],"data":[134],"entropy,":[135],"whereas":[136],"lower-dimensional":[137],"anomalies":[138],"introduce":[140],"an":[141],"entropy":[142,154],"gap":[143,155],"with":[144],"normal":[145],"inputs.":[146],"three":[149],"techniques":[150],"mitigate":[152],"detection:":[159],"Bernoulli":[160],"&":[161],"Categorical":[162],"Scaling,":[163],"Node":[164],"Count":[165],"Normalization,":[166],"Gaussian":[168],"Std-Limit.":[169],"On":[170],"five":[171],"datasets":[173],"from":[174],"top":[176],"company,":[178],"our":[179],"proposed":[180],"TraceVAE":[181],"achieves":[182],"excellent":[183],"F-scores.":[184]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":4}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}
