{"id":"https://openalex.org/W4410049476","doi":"https://doi.org/10.1145/3680256.3721259","title":"Kernel-Level Event-Based Performance Anomaly Detection in Software Systems under Varying Load Conditions","display_name":"Kernel-Level Event-Based Performance Anomaly Detection in Software Systems under Varying Load Conditions","publication_year":2025,"publication_date":"2025-05-03","ids":{"openalex":"https://openalex.org/W4410049476","doi":"https://doi.org/10.1145/3680256.3721259"},"language":"en","primary_location":{"id":"doi:10.1145/3680256.3721259","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3680256.3721259","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Companion of the 16th ACM/SPEC International Conference on Performance Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5095066445","display_name":"Anthonia Oluchukwu Njoku","orcid":"https://orcid.org/0009-0005-7556-7129"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Anthonia Njoku","raw_affiliation_strings":["Polytechnique Montreal, Montreal, Quebec, Canada"],"raw_orcid":"https://orcid.org/0009-0005-7556-7129","affiliations":[{"raw_affiliation_string":"Polytechnique Montreal, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100338781","display_name":"Heng Li","orcid":"https://orcid.org/0000-0001-5441-6763"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Heng Li","raw_affiliation_strings":["MOOSE Lab., Polytechnique Montreal, Montreal, Quebec, Canada"],"raw_orcid":"https://orcid.org/0000-0001-5441-6763","affiliations":[{"raw_affiliation_string":"MOOSE Lab., Polytechnique Montreal, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071052367","display_name":"Foutse Khomh","orcid":"https://orcid.org/0000-0002-5704-4173"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Foutse Khomh","raw_affiliation_strings":["SWAT Lab., Polytechnique Montr\u00e9al, Montreal, Quebec, Canada"],"raw_orcid":"https://orcid.org/0000-0002-5704-4173","affiliations":[{"raw_affiliation_string":"SWAT Lab., Polytechnique Montr\u00e9al, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I45683168"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I45683168"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"26","last_page":"30"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7160900831222534},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.6997499465942383},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6710227131843567},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5346936583518982},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.49258047342300415},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.44603657722473145},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3370903730392456},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.27561235427856445},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.17168065905570984},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09428000450134277}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7160900831222534},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.6997499465942383},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6710227131843567},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5346936583518982},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.49258047342300415},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.44603657722473145},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3370903730392456},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27561235427856445},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17168065905570984},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09428000450134277},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3680256.3721259","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3680256.3721259","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Companion of the 16th ACM/SPEC International Conference on Performance Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:publications.polymtl.ca:66398","is_oa":false,"landing_page_url":"https://publications.polymtl.ca/66398/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Communication de conf\u00e9rence"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W2022916695","https://openalex.org/W2053449529","https://openalex.org/W2094059719","https://openalex.org/W2560021099","https://openalex.org/W2810550035","https://openalex.org/W2911938026","https://openalex.org/W2930325348","https://openalex.org/W2962874122","https://openalex.org/W3006241384","https://openalex.org/W3008578055","https://openalex.org/W3091899017","https://openalex.org/W4312346306","https://openalex.org/W4312845318","https://openalex.org/W4376288669","https://openalex.org/W4394805312","https://openalex.org/W4399294975","https://openalex.org/W4400583065"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"Performance":[0],"anomalies":[1,45,105],"in":[2,46,69,102],"software":[3,47],"systems":[4,48],"can":[5],"lead":[6],"to":[7,33],"significant":[8,145],"disruptions":[9],"and":[10,57,85,113,135,153,175,182],"reduced":[11],"user":[12],"satisfaction.":[13],"Traditional":[14],"methods":[15],"of":[16,43,65,76,99,140,156,168],"anomaly":[17,173],"detection":[18,42,174],"rely":[19],"on":[20],"log":[21],"events":[22,80],"that":[23,129],"capture":[24],"higher-level":[25],"system":[26,70,150,180],"activities":[27],"but":[28],"may":[29],"lack":[30],"the":[31,41,97,107,154,166],"details":[32],"effectively":[34],"pinpoint":[35],"root":[36],"causes.":[37],"This":[38],"study":[39],"investigates":[40],"performance":[44,104,141,183],"using":[49],"kernel-level":[50,169],"event":[51],"data.":[52],"By":[53],"leveraging":[54],"both":[55],"classical":[56],"deep":[58],"learning":[59],"approaches,":[60],"we":[61],"developed":[62],"models":[63,121],"capable":[64],"identifying":[66],"anomalous":[67],"patterns":[68],"behavior.":[71],"The":[72],"experimental":[73],"dataset,":[74],"consisting":[75],"over":[77],"24":[78],"million":[79],"collected":[81],"under":[82],"various":[83],"noise":[84],"workload":[86,151],"conditions,":[87],"provided":[88],"a":[89,144],"comprehensive":[90],"basis":[91],"for":[92,171,178],"analysis.":[93],"Our":[94],"results":[95],"show":[96],"robustness":[98],"ensemble":[100,114],"techniques":[101],"predicting":[103],"with":[106],"random":[108],"forest":[109],"(accuracy":[110],"=":[111],"89%)":[112],"stacking":[115],"(F1":[116],"score=":[117],"0.76,":[118],"AUC=":[119],"0.84)":[120],"outperforming":[122],"other":[123],"classifiers.":[124],"Feature":[125],"importance":[126],"analysis":[127],"revealed":[128],"CPU-bound":[130],"events,":[131],"such":[132],"as":[133,158],"sched_switch":[134],"sched_wakeup,":[136],"are":[137],"key":[138],"indicators":[139],"anomalies.":[142],"Additionally,":[143],"relationship":[146],"was":[147],"identified":[148],"between":[149],"conditions":[152],"likelihood":[155],"anomalies,":[157],"confirmed":[159],"by":[160],"statistical":[161],"testing.":[162],"These":[163],"findings":[164],"highlight":[165],"potential":[167],"data":[170],"precise":[172],"provide":[176],"insights":[177],"optimizing":[179],"monitoring":[181],"management.":[184]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}