{"id":"https://openalex.org/W7131884796","doi":"https://doi.org/10.3390/info17030228","title":"Investigating the Impact of Log-Sequence Embeddings on Anomaly Detection: A Systematic Study","display_name":"Investigating the Impact of Log-Sequence Embeddings on Anomaly Detection: A Systematic Study","publication_year":2026,"publication_date":"2026-02-27","ids":{"openalex":"https://openalex.org/W7131884796","doi":"https://doi.org/10.3390/info17030228"},"language":"en","primary_location":{"id":"doi:10.3390/info17030228","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info17030228","pdf_url":"https://www.mdpi.com/2078-2489/17/3/228/pdf","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2078-2489/17/3/228/pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067213628","display_name":"Musaad Alzahrani","orcid":"https://orcid.org/0000-0002-6585-4483"},"institutions":[{"id":"https://openalex.org/I52207611","display_name":"Al Baha University","ror":"https://ror.org/0403jak37","country_code":"SA","type":"education","lineage":["https://openalex.org/I52207611"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Musaad Alzahrani","raw_affiliation_strings":["Department of Computer Science, Al-Baha University, Al-Baha 65779, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-6585-4483","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Al-Baha University, Al-Baha 65779, Saudi Arabia","institution_ids":["https://openalex.org/I52207611"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5067213628"],"corresponding_institution_ids":["https://openalex.org/I52207611"],"apc_list":{"value":1400,"currency":"CHF","value_usd":1515},"apc_paid":{"value":1400,"currency":"CHF","value_usd":1515},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.23092035,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"17","issue":"3","first_page":"228","last_page":"228"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.6069999933242798,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.6069999933242798,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.2700999975204468,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.02410000003874302,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.676800012588501},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6157000064849854},{"id":"https://openalex.org/keywords/parsing","display_name":"Parsing","score":0.6035000085830688},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.5351999998092651},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5181000232696533},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.45329999923706055},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.421999990940094},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.3817000091075897},{"id":"https://openalex.org/keywords/precision-and-recall","display_name":"Precision and recall","score":0.36980000138282776}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6776000261306763},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.676800012588501},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6157000064849854},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.6035000085830688},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.5351999998092651},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5181000232696533},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.501800000667572},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.45329999923706055},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.421999990940094},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3919999897480011},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.3817000091075897},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.36980000138282776},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.367900013923645},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3296000063419342},{"id":"https://openalex.org/C35639132","wikidata":"https://www.wikidata.org/wiki/Q7452468","display_name":"Sequence labeling","level":3,"score":0.3257000148296356},{"id":"https://openalex.org/C164883195","wikidata":"https://www.wikidata.org/wiki/Q674834","display_name":"Dependency grammar","level":3,"score":0.32199999690055847},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3116999864578247},{"id":"https://openalex.org/C2781121862","wikidata":"https://www.wikidata.org/wiki/Q256","display_name":"Turkish","level":2,"score":0.30300000309944153},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2896000146865845},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C45493050","wikidata":"https://www.wikidata.org/wiki/Q7884934","display_name":"Unified Model","level":2,"score":0.2874999940395355},{"id":"https://openalex.org/C2779135771","wikidata":"https://www.wikidata.org/wiki/Q403574","display_name":"Named-entity recognition","level":3,"score":0.2815000116825104},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2750999927520752},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.26330000162124634},{"id":"https://openalex.org/C2987098735","wikidata":"https://www.wikidata.org/wiki/Q3808900","display_name":"Recall rate","level":2,"score":0.2572000026702881},{"id":"https://openalex.org/C149441793","wikidata":"https://www.wikidata.org/wiki/Q200726","display_name":"Probability distribution","level":2,"score":0.25529998540878296}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/info17030228","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info17030228","pdf_url":"https://www.mdpi.com/2078-2489/17/3/228/pdf","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:29364eccfbe24be195a18d5092ed6dfc","is_oa":true,"landing_page_url":"https://doaj.org/article/29364eccfbe24be195a18d5092ed6dfc","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Information, Vol 17, Iss 3, p 228 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/info17030228","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info17030228","pdf_url":"https://www.mdpi.com/2078-2489/17/3/228/pdf","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/4","score":0.49830707907676697,"display_name":"Quality Education"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7131884796.pdf","grobid_xml":"https://content.openalex.org/works/W7131884796.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Operational":[0],"logs":[1],"are":[2,144],"a":[3,56],"central":[4],"information":[5,12],"source":[6],"for":[7,41],"monitoring":[8],"and":[9,38,52,71,80,101,108,112,132,146],"diagnosing":[10],"complex":[11],"systems,":[13],"yet":[14],"the":[15,94],"effect":[16],"of":[17,30,96],"log-sequence":[18],"representation":[19,119],"on":[20,64],"anomaly":[21,43],"detection":[22,124],"remains":[23],"underexplored.":[24],"This":[25],"paper":[26],"investigates":[27],"three":[28],"families":[29],"sequence":[31,97],"embeddings,":[32],"E1":[33],"(template-ID":[34],"lookup),":[35],"E2":[36],"(semantic),":[37],"E3":[39],"(hybrid),":[40],"log-based":[42],"detection.":[44],"Each":[45],"embedding":[46],"is":[47],"paired":[48],"with":[49,85],"CNN,":[50],"LSTM,":[51],"Transformer":[53],"heads":[54],"under":[55,127,150],"unified":[57],"training":[58],"protocol.":[59],"We":[60,74],"conduct":[61],"controlled":[62],"experiments":[63],"diverse":[65],"public":[66],"corpora":[67],"to":[68,138],"assess":[69],"in-domain":[70],"cross-dataset":[72,152],"generalization.":[73],"report":[75],"PR\u2013AUC":[76],"(primary),":[77],"AUROC,":[78],"F1,":[79],"precision":[81],"at":[82,105],"recall":[83],"\u22650.9,":[84],"95%":[86],"bootstrap":[87],"confidence":[88],"intervals.":[89],"Beyond":[90],"accuracy,":[91],"we":[92],"analyze":[93],"impact":[95],"length,":[98],"parser":[99],"choice,":[100],"out-of-vocabulary":[102],"(OOV)":[103],"rates":[104],"both":[106],"token":[107],"template":[109],"levels":[110],"within":[111],"across":[113],"datasets.":[114],"The":[115],"results":[116],"suggest":[117],"that":[118],"choice":[120],"can":[121,135],"meaningfully":[122],"influence":[123],"performance,":[125],"particularly":[126],"distribution":[128],"shift.":[129],"Open-vocabulary":[130],"semantic":[131],"hybrid":[133],"embeddings":[134],"improve":[136],"robustness":[137],"OOV":[139],"effects,":[140],"but":[141],"transfer":[142],"gains":[143],"inconsistent,":[145],"degradation":[147],"often":[148],"persists":[149],"strict":[151],"transfer.":[153]},"counts_by_year":[],"updated_date":"2026-06-13T06:13:01.061226","created_date":"2026-02-28T00:00:00"}