{"id":"https://openalex.org/W4391558391","doi":"https://doi.org/10.1145/3597503.3623308","title":"Deep Learning or Classical Machine Learning? An Empirical Study on Log-Based Anomaly Detection","display_name":"Deep Learning or Classical Machine Learning? An Empirical Study on Log-Based Anomaly Detection","publication_year":2024,"publication_date":"2024-02-06","ids":{"openalex":"https://openalex.org/W4391558391","doi":"https://doi.org/10.1145/3597503.3623308"},"language":"en","primary_location":{"id":"doi:10.1145/3597503.3623308","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3597503.3623308","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057321039","display_name":"Boxi Yu","orcid":"https://orcid.org/0000-0001-5213-7189"},"institutions":[{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Boxi Yu","raw_affiliation_strings":["The Chinese University of Hong Kong, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0001-5213-7189","affiliations":[{"raw_affiliation_string":"The Chinese University of Hong Kong, Shenzhen, China","institution_ids":["https://openalex.org/I4210116924"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058454592","display_name":"Jiayi Yao","orcid":"https://orcid.org/0000-0002-8588-4356"},"institutions":[{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiayi Yao","raw_affiliation_strings":["The Chinese University of Hong Kong, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-8588-4356","affiliations":[{"raw_affiliation_string":"The Chinese University of Hong Kong, Shenzhen, China","institution_ids":["https://openalex.org/I4210116924"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028701506","display_name":"Qiuai Fu","orcid":"https://orcid.org/0000-0002-2420-955X"},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiuai Fu","raw_affiliation_strings":["Huawei Cloud Computing Technologies Co., Ltd., Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-2420-955X","affiliations":[{"raw_affiliation_string":"Huawei Cloud Computing Technologies Co., Ltd., Shenzhen, China","institution_ids":["https://openalex.org/I2250955327"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057949305","display_name":"Zhiqing Zhong","orcid":"https://orcid.org/0000-0003-2304-9619"},"institutions":[{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiqing Zhong","raw_affiliation_strings":["The Chinese University of Hong Kong, Shenzhen, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-2304-9619","affiliations":[{"raw_affiliation_string":"The Chinese University of Hong Kong, Shenzhen, Shenzhen, China","institution_ids":["https://openalex.org/I4210116924"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083402596","display_name":"Haotian Xie","orcid":"https://orcid.org/0009-0005-0708-0415"},"institutions":[{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haotian Xie","raw_affiliation_strings":["The Chinese University of Hong Kong, Shenzhen, Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0005-0708-0415","affiliations":[{"raw_affiliation_string":"The Chinese University of Hong Kong, Shenzhen, Shenzhen, China","institution_ids":["https://openalex.org/I4210116924"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034687813","display_name":"Y.C. Wu","orcid":"https://orcid.org/0009-0001-7923-7689"},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yaoliang Wu","raw_affiliation_strings":["Huawei Cloud Computing Technologies Co., Ltd., Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0001-7923-7689","affiliations":[{"raw_affiliation_string":"Huawei Cloud Computing Technologies Co., Ltd., Shenzhen, China","institution_ids":["https://openalex.org/I2250955327"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048525009","display_name":"Yuchi Ma","orcid":"https://orcid.org/0009-0002-3304-1389"},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuchi Ma","raw_affiliation_strings":["Huawei Cloud Computing Technologies Co., Ltd., Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0002-3304-1389","affiliations":[{"raw_affiliation_string":"Huawei Cloud Computing Technologies Co., Ltd., Shenzhen, China","institution_ids":["https://openalex.org/I2250955327"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101941950","display_name":"Pinjia He","orcid":"https://orcid.org/0000-0003-3377-8129"},"institutions":[{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pinjia He","raw_affiliation_strings":["The Chinese University of Hong Kong, Shenzhen, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-3377-8129","affiliations":[{"raw_affiliation_string":"The Chinese University of Hong Kong, Shenzhen, Shenzhen, China","institution_ids":["https://openalex.org/I4210116924"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":15.6105,"has_fulltext":false,"cited_by_count":50,"citation_normalized_percentile":{"value":0.99362002,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"13"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9812999963760376,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.972599983215332,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7473698854446411},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7359349727630615},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.728014349937439},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5951170921325684},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5814750790596008},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5799078941345215},{"id":"https://openalex.org/keywords/preprocessor","display_name":"Preprocessor","score":0.5455791354179382},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.510452389717102},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5043643712997437},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.4874610900878906},{"id":"https://openalex.org/keywords/relation","display_name":"Relation (database)","score":0.4805451035499573},{"id":"https://openalex.org/keywords/online-learning","display_name":"Online learning","score":0.43906351923942566},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.4144241213798523},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37562260031700134},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.10263165831565857},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.07407671213150024}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7473698854446411},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7359349727630615},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.728014349937439},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5951170921325684},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5814750790596008},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5799078941345215},{"id":"https://openalex.org/C34736171","wikidata":"https://www.wikidata.org/wiki/Q918333","display_name":"Preprocessor","level":2,"score":0.5455791354179382},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.510452389717102},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5043643712997437},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.4874610900878906},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.4805451035499573},{"id":"https://openalex.org/C2986087404","wikidata":"https://www.wikidata.org/wiki/Q15946010","display_name":"Online learning","level":2,"score":0.43906351923942566},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.4144241213798523},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37562260031700134},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10263165831565857},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.07407671213150024},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3597503.3623308","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3597503.3623308","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8710987931","display_name":null,"funder_award_id":"62102340","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":61,"referenced_works":["https://openalex.org/W1661413208","https://openalex.org/W1865547007","https://openalex.org/W1963574127","https://openalex.org/W1967320885","https://openalex.org/W2063566496","https://openalex.org/W2084932984","https://openalex.org/W2094924503","https://openalex.org/W2099834293","https://openalex.org/W2100595623","https://openalex.org/W2101234009","https://openalex.org/W2105454049","https://openalex.org/W2115056012","https://openalex.org/W2121879602","https://openalex.org/W2136814173","https://openalex.org/W2141041105","https://openalex.org/W2150990363","https://openalex.org/W2158903965","https://openalex.org/W2170114245","https://openalex.org/W2208211896","https://openalex.org/W2362941995","https://openalex.org/W2401686019","https://openalex.org/W2460584250","https://openalex.org/W2560021099","https://openalex.org/W2583874385","https://openalex.org/W2593675739","https://openalex.org/W2618689158","https://openalex.org/W2734941459","https://openalex.org/W2754665629","https://openalex.org/W2763526563","https://openalex.org/W2767094836","https://openalex.org/W2792207129","https://openalex.org/W2899279326","https://openalex.org/W2903799441","https://openalex.org/W2947815220","https://openalex.org/W2963999143","https://openalex.org/W2965838158","https://openalex.org/W2966971704","https://openalex.org/W2999799926","https://openalex.org/W3003372411","https://openalex.org/W3040197085","https://openalex.org/W3127712067","https://openalex.org/W3143573050","https://openalex.org/W3149943567","https://openalex.org/W3162546773","https://openalex.org/W3178329914","https://openalex.org/W3183619936","https://openalex.org/W3194274259","https://openalex.org/W3198081460","https://openalex.org/W4205965165","https://openalex.org/W4226394169","https://openalex.org/W4237335675","https://openalex.org/W4245744969","https://openalex.org/W4246903272","https://openalex.org/W4251954952","https://openalex.org/W4254182148","https://openalex.org/W4254691308","https://openalex.org/W4255845613","https://openalex.org/W4282591816","https://openalex.org/W4284692184","https://openalex.org/W4376288669","https://openalex.org/W6675354045"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W2972971679"],"abstract_inverted_index":{"While":[0],"deep":[1],"learning":[2],"(DL)":[3],"has":[4],"emerged":[5],"as":[6],"a":[7],"powerful":[8],"technique,":[9],"its":[10],"benefits":[11],"must":[12],"be":[13],"carefully":[14],"considered":[15],"in":[16,29,49],"relation":[17],"to":[18],"computational":[19],"costs.":[20],"Specifically,":[21],"although":[22],"DL":[23],"methods":[24],"have":[25],"achieved":[26],"strong":[27],"performance":[28],"log":[30,39,59],"anomaly":[31,60],"detection,":[32],"they":[33],"often":[34],"require":[35,55],"extended":[36],"time":[37],"for":[38],"preprocessing,":[40],"model":[41,44],"training,":[42],"and":[43],"inference,":[45],"hindering":[46],"their":[47],"adoption":[48],"online":[50],"distributed":[51],"cloud":[52],"systems":[53],"that":[54],"rapid":[56],"deployment":[57],"of":[58],"detection":[61],"service.":[62]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":34},{"year":2024,"cited_by_count":9}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}