{"id":"https://openalex.org/W4399657288","doi":"https://doi.org/10.1145/3637528.3671725","title":"Multivariate Log-based Anomaly Detection for Distributed Database","display_name":"Multivariate Log-based Anomaly Detection for Distributed Database","publication_year":2024,"publication_date":"2024-08-24","ids":{"openalex":"https://openalex.org/W4399657288","doi":"https://doi.org/10.1145/3637528.3671725"},"language":"en","primary_location":{"id":"doi:10.1145/3637528.3671725","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3637528.3671725","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","raw_type":"proceedings-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2406.07976","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028483464","display_name":"Lingzhe Zhang","orcid":"https://orcid.org/0009-0005-9500-4489"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Lingzhe Zhang","raw_affiliation_strings":["Peking University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069358025","display_name":"Tong Jia","orcid":"https://orcid.org/0000-0002-5946-9829"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tong Jia","raw_affiliation_strings":["Peking University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074366979","display_name":"Mengxi Jia","orcid":"https://orcid.org/0000-0002-0979-9803"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mengxi Jia","raw_affiliation_strings":["Peking University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100414277","display_name":"Ying Li","orcid":"https://orcid.org/0000-0002-6278-2357"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ying Li","raw_affiliation_strings":["Peking University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100670362","display_name":"Yong Yang","orcid":"https://orcid.org/0000-0001-9667-2423"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Yang","raw_affiliation_strings":["Peking University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041563693","display_name":"Zhonghai Wu","orcid":"https://orcid.org/0000-0003-1268-836X"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhonghai Wu","raw_affiliation_strings":["Peking University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5028483464"],"corresponding_institution_ids":["https://openalex.org/I20231570"],"apc_list":null,"apc_paid":null,"fwci":4.4588,"has_fulltext":true,"cited_by_count":13,"citation_normalized_percentile":{"value":0.95003079,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"4256","last_page":"4267"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9911999702453613,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7533622980117798},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6821351051330566},{"id":"https://openalex.org/keywords/multivariate-statistics","display_name":"Multivariate statistics","score":0.5934362411499023},{"id":"https://openalex.org/keywords/distributed-database","display_name":"Distributed database","score":0.5570258498191833},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5246142148971558},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.4920911192893982},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.4498259425163269},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.12856817245483398}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7533622980117798},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6821351051330566},{"id":"https://openalex.org/C161584116","wikidata":"https://www.wikidata.org/wiki/Q1952580","display_name":"Multivariate statistics","level":2,"score":0.5934362411499023},{"id":"https://openalex.org/C70061542","wikidata":"https://www.wikidata.org/wiki/Q989016","display_name":"Distributed database","level":2,"score":0.5570258498191833},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5246142148971558},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.4920911192893982},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.4498259425163269},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.12856817245483398},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3637528.3671725","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3637528.3671725","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2406.07976","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2406.07976","pdf_url":"https://arxiv.org/pdf/2406.07976","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2406.07976","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2406.07976","pdf_url":"https://arxiv.org/pdf/2406.07976","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6200000047683716,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4399657288.pdf"},"referenced_works_count":51,"referenced_works":["https://openalex.org/W1972020324","https://openalex.org/W1990867478","https://openalex.org/W2028604378","https://openalex.org/W2039157918","https://openalex.org/W2068739275","https://openalex.org/W2093089874","https://openalex.org/W2094924503","https://openalex.org/W2105454049","https://openalex.org/W2115056012","https://openalex.org/W2141041105","https://openalex.org/W2250539671","https://openalex.org/W2401686019","https://openalex.org/W2439673131","https://openalex.org/W2754665629","https://openalex.org/W2755791218","https://openalex.org/W2767094836","https://openalex.org/W2903799441","https://openalex.org/W2921369950","https://openalex.org/W2947815220","https://openalex.org/W2963999143","https://openalex.org/W2965838158","https://openalex.org/W3006243790","https://openalex.org/W3083560262","https://openalex.org/W3085924233","https://openalex.org/W3086099593","https://openalex.org/W3086558596","https://openalex.org/W3089589468","https://openalex.org/W3097861059","https://openalex.org/W3099584179","https://openalex.org/W3100214273","https://openalex.org/W3137759927","https://openalex.org/W3154834090","https://openalex.org/W3157457932","https://openalex.org/W3161254931","https://openalex.org/W3196849431","https://openalex.org/W3197204476","https://openalex.org/W3197917898","https://openalex.org/W3210131940","https://openalex.org/W4211008139","https://openalex.org/W4221079409","https://openalex.org/W4226128225","https://openalex.org/W4255128646","https://openalex.org/W4255845613","https://openalex.org/W4289533942","https://openalex.org/W4290878423","https://openalex.org/W4312357089","https://openalex.org/W4376288669","https://openalex.org/W4385270119","https://openalex.org/W4386858668","https://openalex.org/W4388679869","https://openalex.org/W4395454036"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W2972971679"],"abstract_inverted_index":{"Distributed":[0],"databases":[1,18],"are":[2,71],"fundamental":[3],"infrastructures":[4],"of":[5,33,54,80,108,144],"today's":[6],"large-scale":[7],"software":[8,23],"systems":[9],"such":[10],"as":[11],"cloud":[12],"systems.":[13],"Detecting":[14],"anomalies":[15,104,138],"in":[16,89,110],"distributed":[17,43,74,111,124,171,188],"is":[19,164],"essential":[20],"for":[21,68,73,166,187],"maintaining":[22],"availability.":[24],"Existing":[25],"approaches,":[26],"predominantly":[27],"developed":[28],"using":[29,148],"Loghub-a":[30],"comprehensive":[31,118],"collection":[32],"log":[34,150],"datasets":[35,39,55],"from":[36,123,160],"various":[37],"systems-lack":[38],"specifically":[40],"tailored":[41,186],"to":[42,94,134,140],"databases,":[44,75],"which":[45],"exhibit":[46],"unique":[47,103],"anomalies.":[48],"Additionally,":[49],"there's":[50],"a":[51,90,95,161],"notable":[52],"absence":[53],"encompassing":[56],"multi-anomaly,":[57],"multi-node":[58],"logs.":[59],"Consequently,":[60],"models":[61],"built":[62],"upon":[63],"these":[64,174],"datasets,":[65],"primarily":[66],"designed":[67],"standalone":[69],"systems,":[70],"inadequate":[72],"and":[76,105,139],"the":[77,102,115,142],"prevalent":[78],"method":[79],"deeming":[81],"an":[82,131,179],"entire":[83],"cluster":[84],"anomalous":[85],"based":[86,192],"on":[87,158,170,193],"irregularities":[88],"single":[91,162],"node":[92,163],"leads":[93],"high":[96],"false-positive":[97],"rate.":[98],"This":[99],"paper":[100],"addresses":[101],"multivariate":[106,121,149,181],"nature":[107],"logs":[109,122,159],"databases.":[112,125,189],"We":[113],"expose":[114],"first":[116],"open-sourced,":[117],"dataset":[119],"with":[120],"Utilizing":[126],"this":[127,194],"dataset,":[128,196],"we":[129,176],"conduct":[130],"extensive":[132],"study":[133],"identify":[135],"multiple":[136],"database":[137],"assess":[141],"effectiveness":[143],"state-of-the-art":[145,202],"anomaly":[146,168,183],"detection":[147,169,184],"data.":[151],"Our":[152,190],"findings":[153],"reveal":[154],"that":[155],"relying":[156],"solely":[157],"insufficient":[165],"accurate":[167],"database.":[172],"Leveraging":[173],"insights,":[175],"propose":[177],"MultiLog,":[178],"innovative":[180],"log-based":[182],"approach":[185],"experiments,":[191],"novel":[195],"demonstrate":[197],"MultiLog's":[198],"superiority,":[199],"outperforming":[200],"existing":[201],"methods":[203],"by":[204],"approximately":[205],"12%.":[206]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":2}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}
