{"id":"https://openalex.org/W4398252541","doi":"https://doi.org/10.1145/3639478.3643084","title":"Graph Neural Networks based Log Anomaly Detection and Explanation","display_name":"Graph Neural Networks based Log Anomaly Detection and Explanation","publication_year":2024,"publication_date":"2024-04-14","ids":{"openalex":"https://openalex.org/W4398252541","doi":"https://doi.org/10.1145/3639478.3643084"},"language":"en","primary_location":{"id":"doi:10.1145/3639478.3643084","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3639478.3643084","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3639478.3643084","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 IEEE/ACM 46th International Conference on Software Engineering: Companion Proceedings","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3639478.3643084","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100428658","display_name":"Zhong Li","orcid":"https://orcid.org/0000-0003-1124-5778"},"institutions":[{"id":"https://openalex.org/I121797337","display_name":"Leiden University","ror":"https://ror.org/027bh9e22","country_code":"NL","type":"education","lineage":["https://openalex.org/I121797337"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Zhong Li","raw_affiliation_strings":["Leiden University, Leiden, Netherlands"],"raw_orcid":"https://orcid.org/0000-0003-1124-5778","affiliations":[{"raw_affiliation_string":"Leiden University, Leiden, Netherlands","institution_ids":["https://openalex.org/I121797337"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071898836","display_name":"Jiayang Shi","orcid":"https://orcid.org/0000-0002-7014-0805"},"institutions":[{"id":"https://openalex.org/I121797337","display_name":"Leiden University","ror":"https://ror.org/027bh9e22","country_code":"NL","type":"education","lineage":["https://openalex.org/I121797337"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Jiayang Shi","raw_affiliation_strings":["Leiden University, Leiden, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-7014-0805","affiliations":[{"raw_affiliation_string":"Leiden University, Leiden, Netherlands","institution_ids":["https://openalex.org/I121797337"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022646570","display_name":"Matthijs van Leeuwen","orcid":"https://orcid.org/0000-0002-0510-3549"},"institutions":[{"id":"https://openalex.org/I121797337","display_name":"Leiden University","ror":"https://ror.org/027bh9e22","country_code":"NL","type":"education","lineage":["https://openalex.org/I121797337"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Matthijs Van Leeuwen","raw_affiliation_strings":["Leiden University, Leiden, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-0510-3549","affiliations":[{"raw_affiliation_string":"Leiden University, Leiden, Netherlands","institution_ids":["https://openalex.org/I121797337"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I121797337"],"apc_list":null,"apc_paid":null,"fwci":17.3134,"has_fulltext":true,"cited_by_count":31,"citation_normalized_percentile":{"value":0.99651261,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"306","last_page":"307"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9848999977111816,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9811999797821045,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8217633366584778},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6743500232696533},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5785942077636719},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5472755432128906},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.47018492221832275},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4349759519100189},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.43406322598457336},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.43200698494911194},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.22045323252677917}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8217633366584778},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6743500232696533},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5785942077636719},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5472755432128906},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.47018492221832275},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4349759519100189},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.43406322598457336},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43200698494911194},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.22045323252677917},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3639478.3643084","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3639478.3643084","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3639478.3643084","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 IEEE/ACM 46th International Conference on Software Engineering: Companion Proceedings","raw_type":"proceedings-article"},{"id":"pmh:oai:scholarlypublications.universiteitleiden.nl:item_4254985","is_oa":true,"landing_page_url":"https://hdl.handle.net/1887/4254985","pdf_url":"https://scholarlypublications.universiteitleiden.nl/access/item%3A4254986/view","source":{"id":"https://openalex.org/S4306400850","display_name":"Leiden Repository (Leiden University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I121797337","host_organization_name":"Leiden University","host_organization_lineage":["https://openalex.org/I121797337"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ICSE-Companion '24","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1145/3639478.3643084","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3639478.3643084","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3639478.3643084","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 IEEE/ACM 46th International Conference on Software Engineering: Companion Proceedings","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321800","display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek","ror":"https://ror.org/04jsz6e67"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4398252541.pdf"},"referenced_works_count":8,"referenced_works":["https://openalex.org/W1787224781","https://openalex.org/W2039157918","https://openalex.org/W2754665629","https://openalex.org/W2756452435","https://openalex.org/W2767094836","https://openalex.org/W2965838158","https://openalex.org/W3161236358","https://openalex.org/W4384407578"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W2972971679"],"abstract_inverted_index":{"Event":[0],"logs":[1,37],"are":[2,116],"widely":[3],"used":[4],"to":[5,50],"record":[6],"the":[7,80],"status":[8],"of":[9,72,113],"high-tech":[10],"systems,":[11],"making":[12],"log":[13,28,141],"anomaly":[14,29,53,84,97,142],"detection":[15,85,103,143],"important":[16],"for":[17,26,65,96,124],"monitoring":[18],"those":[19],"systems.":[20],"We":[21],"propose":[22],"a":[23,59,70,90,101,111],"graph-based":[24],"method":[25],"unsupervised":[27],"detection,":[30,98],"dubbed":[31],"Logs2Graphs,":[32],"which":[33],"first":[34],"converts":[35],"event":[36],"into":[38],"attributed,":[39,73],"directed,":[40,74],"and":[41,44,75,83,148],"weighted":[42,76],"graphs,":[43],"then":[45],"leverages":[46],"graph":[47,61,81],"neural":[48,62],"networks":[49],"perform":[51],"graph-level":[52,67],"detection.":[54],"Specifically,":[55],"we":[56,109],"introduce":[57],"OCDiGCN,":[58],"novel":[60],"network":[63],"model":[64],"detecting":[66],"anomalies":[68],"in":[69,100,118],"collection":[71],"graphs.":[77],"By":[78],"coupling":[79],"representation":[82,91],"steps,":[86],"OCDiGCN":[87],"can":[88],"learn":[89],"that":[92,115,134],"is":[93],"especially":[94],"suited":[95],"resulting":[99],"high":[102],"accuracy.":[104],"For":[105],"each":[106],"detected":[107],"anomaly,":[108],"provide":[110],"subset":[112],"nodes":[114],"crucial":[117],"OCDiGCN's":[119],"predictions,":[120],"offering":[121],"useful":[122],"insights":[123],"root":[125],"cause":[126],"diagnosis.":[127],"Experiments":[128],"on":[129,145,152],"five":[130],"benchmark":[131],"datasets":[132,147],"show":[133],"Logs2Graphs":[135],"matches":[136],"or":[137],"exceeds":[138],"current":[139],"top":[140],"methods":[144],"simple":[146],"largely":[149],"outperforms":[150],"them":[151],"complex":[153],"ones.":[154]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":4}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}