The DOI matches its DataCite record; 24 of the 24 references it cites were found in a registry or an index.
LogBERT: Log Anomaly Detection via BERT
Open accessAbstract
Detecting anomalous events in online computer systems is crucial to protect the systems from malicious attacks or malfunctions. System logs, which record detailed information of computational events, are widely used for system status analysis. In this paper, we propose LogBERT, a self-supervised framework for log anomaly detection based on Bidirectional Encoder Representations from Transformers (BERT). LogBERT learns the patterns of normal log sequences by two novel self-supervised training tasks and is able to detect anomalies where the underlying patterns deviate from normal log sequences. The experimental results on three log datasets show that LogBERT outperforms state-of-the-art approaches for anomaly detection.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The cited source doesn’t support the claim as written.
In the citing paper
“Classical unsupervised techniques, including PCA and Isolation Forest, obtained F1-scores of 0.741 and 0.718, respectively, on the HDFs dataset [6].”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Checked by a reasoning model — may be wrong.
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“While LogBERT has demonstrated state-of-the-art performance on structured and labeled datasets -such as Hadoop Distributed File System (HDFS), BlueGene/L (BGL), and Thunderbird -its applicability to heterogeneous and unlabeled Linux syslogs remains underexplored in the literature.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Guo et al. [6] followed a similar approach but with larger time windows between 1 to 5 min, and instead of following our buffering technique, they just dropped windows shorter than 10 tokens.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Similarly to what [6] did, we conducted training and validation using 100% of the available training windows, with a 10% split reserved for validation during training.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“The selection of these models aligns with the existing literature [6,14,15,22] and supports a balanced comparison between unsupervised and supervised approaches.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measured
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Additionally, Guo et al. [6] demonstrated that moderate mask ratios preserved semantic context while still being challenging for the model to reconstruct the missing information.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“The study builds upon the LogBERT architecture [6], a transformer-based model leveraging self-supervised learning to detect anomalies in unstructured logs.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Notably, LogBERT [6] employs a self-supervised masked language modeling objective combined with hypersphere minimization to detect deviations from expected patterns.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“In addition, the masking-and-reconstruction objective provides a principled anomaly score based on unexpected token predictions, which is suitable when explicit anomaly categories are unavailable.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Its performance on datasets like HDFS, BGL, and Thunderbird surpasses classical models such as PCA, DeepLog, and LogAnomaly [6], making it well-suited for operational deployment under resource constraints.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“These labels were used solely to split the datasets in the next stages so that LogBERT's [6] unsupervised training could be restricted to only sequences that contained normal events.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Although LogBERT [6] itself is trained in a completely unsupervised way, using only normal log sequences, labels are nevertheless computed at this stage for splitting purposes.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“We followed the same splitting approach as [6].”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Our evaluation confirmed the validity of the experimental design because it reproduced the performance that Guo et al. [6] reported on the HDFS, BGL, and Thunderbird datasets, where F1-scores reached 82.32%, 90.83%, and 96.64%, respectively.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“We ensured reproducibility by adopting an unsupervised training pipeline consistent with prior work [6].”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“Initially, inspired by the approach of Guo et al. [6], who deleted log sequences with fewer than 10 tokens, potentially omitting valuable anomalies, we replicated their setup with a modification.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A. N., Kaiser, L., & Polosukhin, I. (2017) · arXiv · doi:10.48550/arxiv.1706.03762 · Cited by 120,404
BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding
Devlin, J., Chang, M.-W., Lee, K., & Toutanova, K. (2019) · Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long and Short Papers) · doi:10.18653/v1/n19-1423 · Cited by 54,325
Nonlinear Dimensionality Reduction by Locally Linear Embedding
Roweis, S. T., & Saul, L. K. (2000) · Science · doi:10.1126/science.290.5500.2323 · Cited by 14,965
Liu, F. T., Ting, K. M., & Zhou, Z.-H. (2008) · 2008 Eighth IEEE International Conference on Data Mining · doi:10.1109/icdm.2008.17 · Cited by 6,601
Estimating the Support of a High-Dimensional Distribution
Schölkopf, B., Platt, J. C., Shawe-Taylor, J., Smola, A. J., & Williamson, R. C. (2001) · Neural Computation · doi:10.1162/089976601750264965 · Cited by 6,168
DeepLog: Anomaly Detection and Diagnosis from System Logs through Deep Learning
Du, M., Li, F., Zheng, G., & Srikumar, V. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3134015 · Cited by 1,835
Ruff, L., Vandermeulen, R. A., Görnitz, N., Deecke, L., Siddiqui, S. A., Binder, A., Müller, E., & Kloft, M. (2018) · International Conference on Machine Learning · Cited by 1,719
Detecting large-scale system problems by mining console logs
Xu, W., Huang, L., Fox, A., Patterson, D., & Jordan, M. I. (2009) · Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles · doi:10.1145/1629575.1629587 · Cited by 1,332
Drain: an online log parsing approach with fixed depth tree
He, P., Zhu, J., Zheng, Z., & Lyu, M. R. (2017) · 2017 IEEE International Conference on Web Services (ICWS) · doi:10.1109/icws.2017.13 · Cited by 943
Robust log-based anomaly detection on unstable log data
Zhang, X., Xu, Y., Lin, Q., Qiao, B., Zhang, H., Dang, Y., Xie, C., Yang, X., Cheng, Q., Li, Z., et al. (2019) · Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering · doi:10.1145/3338906.3338931 · Cited by 761
Flagged first, then by citations
Research works printed but not linked: 2
- [20]20. Yen, T.F., Oprea, A., Onarlioglu, K., Leetham, T., Robertson, W., Juels, A., Kirda, E.: Beehive: Large-scale log analysis for detecting suspicious activity in enterprise networks. In: Proceedings of the 29th Annual Computer Security Applications Conference. pp. 199-208 (2013)
- [24]24. He, S., Zhu, J., He, P., Lyu, M.R.: Loghub: A Large Collection of System Log Datasets towards Automated Log Analytics. arXiv:2008.06448 [cs] (Aug 2020) · arXiv
Cited by
Sorted by citations
Items 101–200 of 561
A novel malware detection method based on audit logs and graph neural network
Zhen, Y., Tian, D., Fu, X., & Hu, C. (2025) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2025.110524 · Cited by 13
Adapting Large Language Models for Parameter-Efficient Log Anomaly Detection
Lim, Y. F., Zhu, J., & Pang, G. (2025) · Lecture notes in computer science · doi:10.1007/978-981-96-8298-0_26 · Cited by 13
Cyber Intrusion Detection using Natural Language Processing on Windows Event Logs
Steverson, K., Carlin, C., Mullin, J., & Ahiskali, M. (2021) · International Conference on Military Communications and Information Systems (ICMCIS) · doi:10.1109/icmcis52405.2021.9486307 · Cited by 13
Unsupervised Log Anomaly Detection Method Based on Multi-Feature
He, S., Deng, T., Chen, B., Sherratt, R. S., & Wang, J. (2023) · Computers, materials & continua/Computers, materials & continua (Print) · doi:10.32604/cmc.2023.037392 · Cited by 13
Transformer-based Sentiment Analysis for Anomaly Detection on Drone Forensic Timeline
Silalahi, S., Ahmad, T., & Studiawan, H. (2023) · International Symposium on Digital Forensics and Security (ISDFS) · doi:10.1109/isdfs58141.2023.10131749 · Cited by 12
SpikeLog: Log-Based Anomaly Detection via Potential-Assisted Spiking Neuron Network
Qi, J., Luan, Z., Huang, S., Fung, C., Yang, H., & Qian, D. (2023) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2023.3347695 · Cited by 12
LogETA: Time-aware cross-system log-based anomaly detection with inter-class boundary optimization
Gong, K., Luo, S., Pan, L., Zhang, L., Zhang, Y., & Yu, H. (2024) · Future Generation Computer Systems · doi:10.1016/j.future.2024.03.028 · Cited by 12
Qiu, K., Zhang, Y., Feng, Y., & Chen, F. (2025) · Journal of Network and Systems Management · doi:10.1007/s10922-025-09912-5 · Cited by 12
Liu, H., Liu, M., Han, L., Sun, H., & Fu, C. (2025) · Computers & Security · doi:10.1016/j.cose.2025.104387 · Cited by 12
Maasaoui, Z., Merzouki, M., Battou, A., & Lbath, A. (2025) · Platforms · doi:10.3390/platforms3020007 · Cited by 12
LUK: Empowering Log Understanding With Expert Knowledge From Large Language Models
Ma, L., Yang, W., Jiang, S., Fei, B., Zhou, M., Li, S., Zhao, M., Xu, B., & Xiao, Y. (2025) · IEEE Transactions on Software Engineering · doi:10.1109/tse.2025.3594046 · Cited by 12
SemiSMAC: A semi-supervised framework for log anomaly detection with automated hyperparameter tuning
Sun, Y., Keung, J., Yang, Z., Liu, S., & Liao, Y. (2025) · Information and Software Technology · doi:10.1016/j.infsof.2025.107869 · Cited by 12
ADALog: Adaptive Unsupervised Anomaly detection in Logs with Self-attention Masked Language Model
Pospieszny, P., Mormul, W., Szyndler, K., & Kumar, S. (2025) · International Conference on Machine Learning Technologies (ICMLT) · doi:10.1109/icmlt65785.2025.11193311 · Cited by 12
Self-Supervised Learning of Graph Representations for Network Intrusion Detection
Guerra, L., Chapuis, T., Duc, G., Mozharovskyi, P., & Nguyen, V.-T. (2025) · neural information processing systems · doi:10.52202/085713-3653 · Cited by 12
Unsupervised Anomaly Detection in Sequential Process Data
Bulut, O., Gorgun, G., & He, S. (2024) · Zeitschrift für Psychologie · doi:10.1027/2151-2604/a000558 · Cited by 12
An Event Log Repair Method Based on Masked Transformer Model
Wu, P., Fang, X., Fang, H., Gong, Z., & Kan, D. (2024) · Applied Artificial Intelligence · doi:10.1080/08839514.2024.2346059 · Cited by 11
Interpretable Spatial–Temporal Graph Convolutional Network for System Log Anomaly Detection
Xu, R., & Li, Y. (2024) · Advanced Engineering Informatics · doi:10.1016/j.aei.2024.102803 · Cited by 11
From Logs to Causal Inference: Diagnosing Large Systems
Markakis, M., Youngmann, B., Gao, T., Zhang, Z., Shahout, R., Chen, P. B., Liu, C., Sabek, I., & Cafarella, M. (2024) · Proceedings of the VLDB Endowment · doi:10.14778/3705829.3705836 · Cited by 11
MKF-ADS: Multi-Knowledge Fusion Based Anomaly Detection System in Vehicular Control Area Networks
Cheng, P., Liu, S., Wu, Z., Tan, L., & Liu, G. (2025) · IEEE Transactions on Vehicular Technology · doi:10.1109/tvt.2025.3564575 · Cited by 11
Threshold based Technique to Detect Anomalies using Log Files
Akande, T. D., Kaur, B., Dadkhah, S., & Ghorbani, A. A. (2022) · International Conference on Machine Learning Technologies (ICMLT) · doi:10.1145/3529399.3529430 · Cited by 11
Time-Aware Attention-Based Transformer (TAAT) for Cloud Computing System Failure Prediction
Deng, L., Wang, Y., Wang, H., Ma, X., Du, X., Zheng, X., & Wu, D. (2024) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3637528.3671547 · Cited by 10
Ahmad, B., Li, Y., Wu, Z., Rehman, S. U., & Huang, Y. (2025) · Expert Systems with Applications · doi:10.1016/j.eswa.2025.129021 · Cited by 10
Software Failure Log Analysis for Engineers—Review
Dobrowolski, W., Nikodem, M., & Unold, O. (2023) · Electronics · doi:10.3390/electronics12102260 · Cited by 10
LogBD: A Log Anomaly Detection Method Based on Pretrained Models and Domain Adaptation
Deng, L., Liu, S., Xu, H., & Wang, W. (2023) · Applied Sciences · doi:10.3390/app13137739 · Cited by 10
Detecting Anomalies in System Logs With a Compact Convolutional Transformer
Larisch, R., Vitay, J., & Hamker, F. H. (2023) · IEEE Access · doi:10.1109/access.2023.3323252 · Cited by 10
Yu, Z., Yang, S., Li, Z., Li, L., Luo, H., & Yang, F. (2024) · Frontiers in Physics · doi:10.3389/fphy.2024.1401857 · Cited by 9
Collaborative anomaly detection in log data: Comparative analysis and evaluation framework
Gómez, A., Landauer, M., Wurzenberger, M., Skopik, F., & Weippl, E. R. (2025) · Future Generation Computer Systems · doi:10.1016/j.future.2025.108090 · Cited by 9
Yicheng, S. U. N., Keung, J., Yang, Z., Liu, S., Zhang, J., & Liao, Y. (2025) · Automated Software Engineering · doi:10.1007/s10515-025-00548-y · Cited by 9
K 4 : Online Log Anomaly Detection Via Unsupervised Typicality Learning
Chen, W., Singh, V., Rahmani, Z., Ganguly, D., Hariri, M., & Chaudhary, V. (2025) · IEEE International Conference on High Performance Computing, Data, and Analytics · doi:10.1109/hipc66333.2025.00019 · Cited by 9
Fuzzy CNN Autoencoder for Unsupervised Anomaly Detection in Log Data
Gorohov, O., Petrovskiy, M., Машечкин, И. В., & Kazachuk, M. (2023) · Mathematics · doi:10.3390/math11183995 · Cited by 9
AugLog: System Log Anomaly Detection Based on Contrastive Learning and Data Augmentation
Zhou, J., & Qian, Y. (2022) · International Conference on Data Science and Information Technology (DSIT) · doi:10.1109/dsit55514.2022.9943918 · Cited by 9
Log anomaly detection based on BERT
Tang, P., & Guan, Y. (2024) · Signal Image and Video Processing · doi:10.1007/s11760-024-03327-6 · Cited by 8
LogContrast: Log-based Anomaly Detection Using BERT and Contrastive Learning
Yuan, W., Sun, H., Pang, M., Wang, H., Wu, G., & Zhang, Y. (2024) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom63139.2024.00349 · Cited by 8
PULL: Reactive Log Anomaly Detection Based On Iterative PU Learning
Wittkopp, T., Scheinert, D., Wiesner, P., Acker, A., & Kao, O. (2023) · Hawaii International Conference on System Sciences (HICSS) · doi:10.24251/hicss.2023.172 · Cited by 8
Anomaly Detection in Security Logs using Sequence Modeling
Gökstorp, S., Nyberg, J., Kim, Y., Johnson, P., & Dán, G. (2024) · IEEE/IFIP Network Operations and Management Symposium (NOMS) · doi:10.1109/noms59830.2024.10575561 · Cited by 8
SIERRA: Ranking Anomalous Activities in Enterprise Networks
Lee, J.-H., Tang, F., Thet, P. M., Yeoh, D., Rybczynski, M., & Divakaran, D. M. (2022) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp53844.2022.00011 · Cited by 8
PoSBert: Log Classification via Modified Bert Based on Part-of-Speech Weight
Zhang, J., Li, Z., Zhang, X., Lin, F., Wang, C., & Cai, X. (2022) · International Conference on Pattern Recognition and Artificial Intelligence (PRAI) · doi:10.1109/prai55851.2022.9904207 · Cited by 8
Logformer: Cascaded Transformer for System Log Anomaly Detection
Hang, F., Guo, W., Chen, H., Xie, L., Zhou, C., & Liu, Y. (2023) · Computer Modeling in Engineering & Sciences · doi:10.32604/cmes.2023.025774 · Cited by 8
LADDERS: Log Based Anomaly Detection and Diagnosis for Enterprise Systems
Mondal, S. A., Rv, P., Rao, S., & Menon, A. (2023) · Annals of Data Science · doi:10.1007/s40745-023-00471-7 · Cited by 8
Detecting Forged Receipts with Domain-Specific Ontology-Based Entities & Relations
Tornés, B. M., Boroş, E., Doucet, A., Gomez‐Krämer, P., & Ogier, J.-M. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-41682-8_12 · Cited by 8
LogBASA: Log Anomaly Detection Based on System Behavior Analysis and Global Semantic Awareness
Liao, L., Zhu, K., Luo, J., & Cai, J. (2023) · International Journal of Intelligent Systems · doi:10.1155/2023/3777826 · Cited by 8
LogShield: A Transformer-based APT Detection System Leveraging Self-AttentionPreprint
Afnan, S., Sadia, M., Iqbal, S., & Iqbal, A. (2023) · arXiv (Cornell University) · doi:10.48550/arxiv.2311.05733 · Cited by 8
Ndichu, S., Ban, T., Ozawa, S., Takahashi, T., & Inoue, D. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2605.08316 · Cited by 8
Log-based Anomaly Detection of Enterprise Software: An Empirical Study
Wijesinghe, N., & Hemmati, H. (2023) · IEEE International Conference on Software Quality, Reliability and Security (QRS) · doi:10.1109/qrs60937.2023.00012 · Cited by 7
Corbelle, C., Carneiro, V., & Cacheda, F. (2024) · Applied Sciences · doi:10.3390/app14135388 · Cited by 7
Gorgun, G., & Yildirim‐Erbasli, S. N. (2024) · Journal of Educational Measurement · doi:10.1111/jedm.12420 · Cited by 7
Domain Tailored Large Language Models for Log Mask Prediction in Cellular Network Diagnostics
Taheri, S., Ihalage, A. A., Mishra, P., Coaker, S., Faris, M., & Al-Raweshidy, H. S. (2025) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2025.3541384 · Cited by 7
ALPHA: LLM-Enabled Active Learning for Human-Free Network Anomaly Detection
Luo, X., Jha, S. M. N., Sinha, A., Li, Z., & Liu, Y. (2025) · IEEE International Performance, Computing, and Communications Conference · doi:10.1109/ipccc66453.2025.11304694 · Cited by 7
Feature Selection for Fault Detection and Prediction based on Event Log Analysis
Li, Z., & van Leeuwen, M. (2022) · ACM SIGKDD Explorations Newsletter · doi:10.1145/3575637.3575652 · Cited by 7
Towards Detecting Anomalies in Log-Event Sequences with Deep Learning: Open Research Challenges
Himler, P., Landauer, M., Skopik, F., & Wurzenberger, M. (2023) · European Interdisciplinary Cybersecurity Conference (EICC) · doi:10.1145/3590777.3590789 · Cited by 7
DeepUserLog: Deep Anomaly Detection on User Log Using Semantic Analysis and Key-Value Data
Wang, W., Lu, S., Luo, J., & Wu, C. (2023) · Proceedings/Proceedings - International Symposium on Software Reliability Engineering · doi:10.1109/issre59848.2023.00046 · Cited by 7
Progressing from Anomaly Detection to Automated Log Labeling and Pioneering Root Cause Analysis
Wittkopp, T., Acker, A., & Kao, O. (2023) · IEEE ... International Conference on Data Mining workshops · doi:10.1109/icdmw60847.2023.00160 · Cited by 7
MLAD: A Unified Model for Multi-system Log Anomaly DetectionPreprint
Zang, R., Guo, H., Yang, J., Liu, J., Li, Z., Zheng, T., Shi, X., Zheng, L., & Zhang, B. (2024) · arXiv (Cornell University) · doi:10.48550/arxiv.2401.07655 · Cited by 7
Self-citationSystem log anomaly detection based on contrastive learning and retrieval augmented
Li, W., Wu, Y., Huang, W., Zhou, F., Ou, W., Wang, H., & Deng, L. (2025) · Scientific Reports · doi:10.1038/s41598-025-22208-7 · Cited by 6
Anomaly Detection Algorithms for Real-Time Log Data Analysis at Scale
Horváth, A., Oláh, A., Pintér, A., Siklósi, B., Lukács, G., Reguly, I. Z., Tornai, K., Zsedrovits, T., & Máthé, Z. (2025) · IEEE Access · doi:10.1109/access.2025.3594469 · Cited by 6
Xiao, P., Duan, C., He, M., Jia, T., Wu, Y., Xu, J., Gao, G., Zhang, L., Hong, W., Li, Y., et al. (2025) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1109/ase63991.2025.00097 · Cited by 6
Okafor, E., & Lee, S. (2026) · Applied Sciences · doi:10.3390/app16041884 · Cited by 6
Landscape and Taxonomy of Online Parser-Supported Log Anomaly Detection Methods
Lupton, S., Washizaki, H., Yoshioka, N., & Fukazawa, Y. (2024) · IEEE Access · doi:10.1109/access.2024.3387287 · Cited by 6
Log-TF-IDF for Anomaly Detection in Network Switches
Nam, S., Yoo, J., & Hong, J. W. (2024) · IEEE/IFIP Network Operations and Management Symposium (NOMS) · doi:10.1109/noms59830.2024.10575624 · Cited by 6
Lightweight Multi-Task Learning Method for System Log Anomaly Detection
Pham, T.-A., & Lee, J. (2024) · IEEE Access · doi:10.1109/access.2024.3425369 · Cited by 6
Pluto: Sample Selection for Robust Anomaly Detection on Polluted Log Data
Ma, L., Cao, L., VanNostrand, P. M., Hofmann, D. M., Su, Y., & Rundensteiner, E. A. (2024) · Proceedings of the ACM on Management of Data · doi:10.1145/3677139 · Cited by 6
Ladle: a method for unsupervised anomaly detection across log types
Mylläri, J., Aalto, T., & Nurminen, J. K. (2025) · Automated Software Engineering · doi:10.1007/s10515-025-00504-w · Cited by 6
Research Opportunity of Insider Threat Detection based on Machine Learning Methods
Prajitno, N. T. M., Hadiyanto, H., & Rochim, A. F. (2023) · International Conference on Artificial Intelligence in Information and Communication (ICAIIC) · doi:10.1109/icaiic57133.2023.10067010 · Cited by 6
Application of AI and ML in the Field of DevSecOps
Panda, K. C., & Agrawal, S. (2022) · Journal of Artificial Intelligence & Cloud Computing · doi:10.47363/jaicc/2022(1)280 · Cited by 6
LogCTBL: a hybrid deep learning model for log-based anomaly detection
Huang, H., Luo, W., Wang, Y., Zhou, Y., & Huang, W. T. (2025) · The Journal of Supercomputing · doi:10.1007/s11227-025-06926-3 · Cited by 6
Log Anomaly Detection Based on Hierarchical Graph Neural Network and Label Contrastive Coding
Fang, Y., Zhao, Z., Xu, Y., & Liu, Z. (2022) · Computers, materials & continua/Computers, materials & continua (Print) · doi:10.32604/cmc.2023.033124 · Cited by 6
HEART: Heterogeneous Log Anomaly Detection Using Robust Transformers
Mvula, P. K., Branco, P., Jourdan, G.-V., & Viktor, H. L. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-45275-8_45 · Cited by 6
Robust Fraud Detection via Supervised Contrastive Learning
Vinay, M. S., Yuan, S., & Wu, X. (2023) · IEEE International Conference on Big Data (BigData) · doi:10.1109/bigdata59044.2023.10386925 · Cited by 6
Self-citationCLogLLM: A Large Language Model Enabled Approach to Cybersecurity Log Anomaly Analysis
Ren, H., Lan, K., Sun, Z., & Liao, S. (2024) · 2024 4th International Conference on Electronic Information Engineering and Computer Communication (EIECC) · doi:10.1109/eiecc64539.2024.10929078 · Cited by 5
Talasso, G. U., Souza, A. M. D., Guidoni, D. L., Cerqueira, E., & Villas, L. A. (2025) · doi:10.5753/sbrc.2025.5859 · Cited by 5
Log Anomaly Detection via Transformers Pre-Trained on Massive Unlabeled Data
Yan, S., Shi, L., Ren, J., Wang, W., Sun, L., & Zhang, W. (2026) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2026.3654089 · Cited by 5
LogBERT-BiLSTM: Detecting Malicious Web Requests
Júnior, L. S. R., Macêdo, D., Oliveira, A. L. I., & Zanchettin, C. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-15934-3_58 · Cited by 5
Log Based Anomaly Detection: Relation Between The Logs
Sunil, S., Suresh, A., & Hemamalini, V. (2023) · International Conference on Networking and Communications (ICNWC) · doi:10.1109/icnwc57852.2023.10127571 · Cited by 5
Robust Analysis of IT Infrastructure's Log Data with BERT Language Model
Bhanage, D. A., & Pawar, A. (2023) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2023.0140675 · Cited by 5
Bhanage, D. A., Pawar, A., Kotecha, K. V., & Abraham, A. (2023) · IEEE Access · doi:10.1109/access.2023.3319438 · Cited by 5
Block, J. E., Chen, Y., Budharapu, A., Anthony, L., & Dorr, B. J. (2023) · Workshop on Evaluation and Comparison of NLP Systems (Eval4NLP) · doi:10.18653/v1/2023.eval4nlp-1.7 · Cited by 5
Log-Based Anomaly Detection with Transformers Pre-Trained on Large-Scale Unlabeled Data
Yan, S., Shi, L., Ren, J., Wang, W., Liu, Y., Sun, L., Wang, X., & Zhang, W. (2024) · International Conference on Communications · doi:10.1109/icc51166.2024.10623067 · Cited by 5
LogOW: A semi-supervised log anomaly detection model in open-world setting
Ye, J., Liu, C., Gu, Z., Zhang, Z., Meng, X., Zhang, W., & Zhang, Y. (2024) · Journal of Systems and Software · doi:10.1016/j.jss.2024.112305 · Cited by 5
ELFA-Log: Cross-System Log Anomaly Detection via Enhanced Pseudo-Labeling and Feature Alignment
Zhao, X., Guo, K., Huang, M., Qiu, S., & Lu, L. (2025) · Computers · doi:10.3390/computers14070272 · Cited by 5
Aziz, Z., & Abed, A. (2025) · International Journal of Mechatronics Robotics and Artificial Intelligence · doi:10.33971/ijmrai.1.1.8 · Cited by 5
Explainable Sequential Anomaly Detection via Prototypes
Cheng, H., Xu, D., & Yuan, S. (2023) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn54540.2023.10191703 · Cited by 5
Self-citationAn Intelligent Framework for Log Anomaly Detection Based on Log Template Extraction
Pan, L., & Zhu, H. (2023) · Journal of Cases on Information Technology · doi:10.4018/jcit.330145 · Cited by 5
Ihalage, A. A., Taheri, S., Faris, M., & Al-Raweshidy, H. S. (2025) · IEEE Access · doi:10.1109/access.2025.3587029 · Cited by 5
Contrastive Learning for Fraud Detection from Noisy Labels
Vinay, M. S., Yuan, S., & Wu, X. (2024) · IEEE International Conference on Data Engineering (ICDE) · doi:10.1109/icde60146.2024.00117 · Cited by 4
Self-citationAn Unsupervised Malicious Web Request Detection Based on Transformer and Contrastive Learning
He, S., Zhang, Y., Liang, D., & Sharma, P. K. (2025) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2025.3563089 · Cited by 4
System Log Anomaly Detection With Noise-Contrastive Learning and Pattern Feature
Luo, P., Deng, D., Xie, M., Yang, G., Chu, J., Soong, B., & Yuen, C. (2025) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2025.3579809 · Cited by 4
Aljumaily, M. S., & Abd, H. (2025) · International Journal of Mechatronics Robotics and Artificial Intelligence · doi:10.33971/ijmrai.1.2.11 · Cited by 4
Mapping Cyber Bot Behaviors: Understanding Payload Patterns in Honeypot Traffic
Wang, S., Tu, C. S., Zhang, Y., Zhang, M., & Xue, P. (2025) · Sensors · doi:10.3390/s26010011 · Cited by 4
LogPPO: A Log-Based Anomaly Detector Aided with Proximal Policy Optimization Algorithms
Wang, Z., Dong, J., & Yang, C. (2025) · Smart Cities · doi:10.3390/smartcities9010005 · Cited by 4
A survey of anomaly detection in HPC systems using machine learning
Lu, Y., Zhang, W., Yang, L., Dai, Y., Wu, H., Wu, Z., Tian, H., Li, Y., Chen, J. B., Liu, C., et al. (2026) · CCF Transactions on High Performance Computing · doi:10.1007/s42514-025-00266-7 · Cited by 4
Rhee, M., Zou, J., & Qin, Y. (2024) · AI and Data Science Journal · doi:10.61784/adsj4039 · Cited by 4
TeleDAL: a regression-based template-less unsupervised method for finding anomalies in log sequences
Horväth, G., Mészáros, A., & Szilágyi, P. (2023) · The Journal of Supercomputing · doi:10.1007/s11227-023-05379-w · Cited by 4
VEDRANDO: A Novel Way to Reveal Stealthy Attack Steps on Android through Memory Forensics
Bellizzi, J., Losiouk, E., Conti, M., Colombo, C., & Vella, M. (2023) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp3030019 · Cited by 4
Zheng, H., Chu, G., Sun, H., Wang, J., Tao, S., & Yang, H. (2023) · International Middleware Conference · doi:10.1145/3626562.3626830 · Cited by 4
Log‐TF‐IDF and NETCONF‐Based Network Switch Anomaly Detection
Nam, S., Jeong, E., & Hong, J. W. (2025) · International Journal of Network Management · doi:10.1002/nem.2322 · Cited by 4
E-Log: Fine-Grained Elastic Log-Based Anomaly Detection and Diagnosis for Databases
Zhang, L., Jia, T., Tan, X., Huang, X., Jia, M., Liu, H., Wu, Z., & Li, Y. (2025) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2025.3594870 · Cited by 4
AetherLog: Log-based Root Cause Analysis by Integrating Large Language Models with Knowledge Graphs
Cui, T., Fu, R., Liu, C., Ji, Y., Gu, W., Zhang, S., Sun, Y., & Pei, D. (2025) · Proceedings/Proceedings - International Symposium on Software Reliability Engineering · doi:10.1109/issre66568.2025.00019 · Cited by 4
Using Transformer Models and Textual Analysis for Log Parsing
Bertalan, V. G. F., & Aloise, D. (2023) · Proceedings/Proceedings - International Symposium on Software Reliability Engineering · doi:10.1109/issre59848.2023.00037 · Cited by 4
Exploring Semantic vs. Syntactic Features for Unsupervised Learning on Application Log Files
Karlsen, E., Copstein, R., Luo, X., Schwartzentruber, J., Niblett, B., Johnston, A., Heywood, M. I., & Zincir-Heywood, N. (2023) · Cyber Security in Networking Conference (CSNet) · doi:10.1109/csnet59123.2023.10339765 · Cited by 4
A Taxonomy of Anomalies in Log Data
Wittkopp, T., Wiesner, P., Scheinert, D., & Kao, O. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-14135-5_12 · Cited by 4
Metadata
- Authors
- Guo, H., Yuan, S., & Wu, X.
- Affiliations
- Utah State University (US)
- University of Arkansas at Fayetteville (US)
- ORCID
- Wu, Xintao
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2021
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 2103.04475
- OpenAlex
- W3134847483
- Cited by
- 7
- References
- 24
- Citations by year
- 2026: 1 · 2024: 2 · 2023: 2 · 2021: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Licence
- Locations
- arXiv (Cornell University) (submittedVersion, cc-by)
- Digital Commons - USU (Utah State University) (submittedVersion)
- arXiv (Cornell University) (cc-by)
- Digital Commons - USU (Utah State University)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Software System Performance and Reliability
- Physical Sciences › Computer Science › Artificial Intelligence › Anomaly Detection Techniques and Applications
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- log anomaly detection, system logs, BERT, self-supervised learning, intrusion detection, cybersecurity
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
