{"id":"https://openalex.org/W7154447980","doi":"https://doi.org/10.48550/arxiv.2604.13024","title":"CLAD: Efficient Log Anomaly Detection Directly on Compressed Representations","display_name":"CLAD: Efficient Log Anomaly Detection Directly on Compressed Representations","publication_year":2026,"publication_date":"2026-04-14","ids":{"openalex":"https://openalex.org/W7154447980","doi":"https://doi.org/10.48550/arxiv.2604.13024"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.13024","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.13024","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.13024","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101349908","display_name":"Benzhao Tang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tang, Benzhao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133723411","display_name":"Shiyu Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Shiyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9643999934196472,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9643999934196472,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.0044999998062849045,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.004399999976158142,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.7904999852180481},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5924999713897705},{"id":"https://openalex.org/keywords/compression","display_name":"Compression (physics)","score":0.5920000076293945},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5575000047683716},{"id":"https://openalex.org/keywords/data-compression","display_name":"Data compression","score":0.5085999965667725},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.47620001435279846},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.46869999170303345},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.44999998807907104},{"id":"https://openalex.org/keywords/explosive-material","display_name":"Explosive material","score":0.412200003862381}],"concepts":[{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.7904999852180481},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.746999979019165},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5924999713897705},{"id":"https://openalex.org/C180016635","wikidata":"https://www.wikidata.org/wiki/Q2712821","display_name":"Compression (physics)","level":2,"score":0.5920000076293945},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5575000047683716},{"id":"https://openalex.org/C78548338","wikidata":"https://www.wikidata.org/wiki/Q2493","display_name":"Data compression","level":2,"score":0.5085999965667725},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.47620001435279846},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4749999940395355},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.46869999170303345},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.44999998807907104},{"id":"https://openalex.org/C154238967","wikidata":"https://www.wikidata.org/wiki/Q12870","display_name":"Explosive material","level":2,"score":0.412200003862381},{"id":"https://openalex.org/C81081738","wikidata":"https://www.wikidata.org/wiki/Q55542","display_name":"Lossless compression","level":3,"score":0.4120999872684479},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.4106000065803528},{"id":"https://openalex.org/C25797200","wikidata":"https://www.wikidata.org/wiki/Q828137","display_name":"Compression ratio","level":3,"score":0.39809998869895935},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.38670000433921814},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.38580000400543213},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3418000042438507},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.3400000035762787},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2989000082015991},{"id":"https://openalex.org/C94835093","wikidata":"https://www.wikidata.org/wiki/Q3113333","display_name":"Data compression ratio","level":5,"score":0.28529998660087585},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.2842000126838684},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.2732999920845032},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2696000039577484},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.26600000262260437},{"id":"https://openalex.org/C2778067643","wikidata":"https://www.wikidata.org/wiki/Q166507","display_name":"Interval (graph theory)","level":2,"score":0.2653000056743622},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.26019999384880066},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2549999952316284},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.2522999942302704}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.13024","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.13024","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.13024","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.13024","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"explosive":[1],"growth":[2],"of":[3,98,120],"system":[4],"logs":[5,53],"makes":[6],"streaming":[7,150],"compression":[8],"essential,":[9],"yet":[10],"existing":[11],"log":[12],"anomaly":[13],"detection":[14],"(LAD)":[15],"methods":[16],"incur":[17],"severe":[18,107],"pre-processing":[19],"overhead":[20],"by":[21,47,127],"requiring":[22],"full":[23],"decompression":[24,138],"and":[25,86,101,122,139],"parsing.":[26],"We":[27],"introduce":[28],"CLAD,":[29],"the":[30,124],"first":[31],"deep":[32],"learning":[33],"framework":[34],"to":[35,104,148],"perform":[36],"LAD":[37],"directly":[38],"on":[39],"compressed":[40],"byte":[41,57,81],"streams.":[42],"CLAD":[43,114],"bypasses":[44],"these":[45,66],"bottlenecks":[46],"exploiting":[48],"a":[49,74,78,83,94,116,143],"key":[50],"insight:":[51],"normal":[52],"compress":[54],"into":[55],"regular":[56],"patterns,":[58],"while":[59,135],"anomalies":[60],"systematically":[61],"disrupt":[62],"them.":[63],"To":[64],"extract":[65],"multi-scale":[67],"deviations":[68],"from":[69],"opaque":[70],"bytes,":[71],"we":[72],"propose":[73],"purpose-built":[75],"architecture":[76],"integrating":[77],"dilated":[79],"convolutional":[80],"encoder,":[82],"hybrid":[84],"Transformer--mLSTM,":[85],"four-way":[87],"aggregation":[88],"pooling.":[89],"This":[90],"is":[91],"coupled":[92],"with":[93],"two-stage":[95],"training":[96],"strategy":[97],"masked":[99],"pre-training":[100],"focal-contrastive":[102],"fine-tuning":[103],"effectively":[105],"handle":[106],"class":[108],"imbalance.":[109],"Evaluated":[110],"across":[111],"five":[112],"datasets,":[113],"achieves":[115],"state-of-the-art":[117],"average":[118],"F1-score":[119],"0.9909":[121],"outperforms":[123],"best":[125],"baseline":[126],"2.72":[128],"percentage":[129],"points.":[130],"It":[131],"delivers":[132],"superior":[133],"accuracy":[134],"completely":[136],"eliminating":[137],"parsing":[140],"overheads,":[141],"offering":[142],"robust":[144],"solution":[145],"that":[146],"generalizes":[147],"structured":[149],"compressors.":[151]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-16T00:00:00"}