The DOI matches its DataCite record; 24 of the 24 references it cites were found in a registry or an index.
LogBERT: Log Anomaly Detection via BERT
Open accessAbstract
Detecting anomalous events in online computer systems is crucial to protect the systems from malicious attacks or malfunctions. System logs, which record detailed information of computational events, are widely used for system status analysis. In this paper, we propose LogBERT, a self-supervised framework for log anomaly detection based on Bidirectional Encoder Representations from Transformers (BERT). LogBERT learns the patterns of normal log sequences by two novel self-supervised training tasks and is able to detect anomalies where the underlying patterns deviate from normal log sequences. The experimental results on three log datasets show that LogBERT outperforms state-of-the-art approaches for anomaly detection.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The cited source doesn’t support the claim as written.
In the citing paper
“Classical unsupervised techniques, including PCA and Isolation Forest, obtained F1-scores of 0.741 and 0.718, respectively, on the HDFs dataset [6].”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Checked by a reasoning model — may be wrong.
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“While LogBERT has demonstrated state-of-the-art performance on structured and labeled datasets -such as Hadoop Distributed File System (HDFS), BlueGene/L (BGL), and Thunderbird -its applicability to heterogeneous and unlabeled Linux syslogs remains underexplored in the literature.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Guo et al. [6] followed a similar approach but with larger time windows between 1 to 5 min, and instead of following our buffering technique, they just dropped windows shorter than 10 tokens.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Similarly to what [6] did, we conducted training and validation using 100% of the available training windows, with a 10% split reserved for validation during training.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“The selection of these models aligns with the existing literature [6,14,15,22] and supports a balanced comparison between unsupervised and supervised approaches.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measured
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Additionally, Guo et al. [6] demonstrated that moderate mask ratios preserved semantic context while still being challenging for the model to reconstruct the missing information.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“The study builds upon the LogBERT architecture [6], a transformer-based model leveraging self-supervised learning to detect anomalies in unstructured logs.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Notably, LogBERT [6] employs a self-supervised masked language modeling objective combined with hypersphere minimization to detect deviations from expected patterns.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“In addition, the masking-and-reconstruction objective provides a principled anomaly score based on unexpected token predictions, which is suitable when explicit anomaly categories are unavailable.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Its performance on datasets like HDFS, BGL, and Thunderbird surpasses classical models such as PCA, DeepLog, and LogAnomaly [6], making it well-suited for operational deployment under resource constraints.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“These labels were used solely to split the datasets in the next stages so that LogBERT's [6] unsupervised training could be restricted to only sequences that contained normal events.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Although LogBERT [6] itself is trained in a completely unsupervised way, using only normal log sequences, labels are nevertheless computed at this stage for splitting purposes.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“We followed the same splitting approach as [6].”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Our evaluation confirmed the validity of the experimental design because it reproduced the performance that Guo et al. [6] reported on the HDFS, BGL, and Thunderbird datasets, where F1-scores reached 82.32%, 90.83%, and 96.64%, respectively.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“We ensured reproducibility by adopting an unsupervised training pipeline consistent with prior work [6].”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“Initially, inspired by the approach of Guo et al. [6], who deleted log sequences with fewer than 10 tokens, potentially omitting valuable anomalies, we replicated their setup with a modification.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A. N., Kaiser, L., & Polosukhin, I. (2017) · arXiv · doi:10.48550/arxiv.1706.03762 · Cited by 120,404
BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding
Devlin, J., Chang, M.-W., Lee, K., & Toutanova, K. (2019) · Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long and Short Papers) · doi:10.18653/v1/n19-1423 · Cited by 54,325
Nonlinear Dimensionality Reduction by Locally Linear Embedding
Roweis, S. T., & Saul, L. K. (2000) · Science · doi:10.1126/science.290.5500.2323 · Cited by 14,965
Liu, F. T., Ting, K. M., & Zhou, Z.-H. (2008) · 2008 Eighth IEEE International Conference on Data Mining · doi:10.1109/icdm.2008.17 · Cited by 6,601
Estimating the Support of a High-Dimensional Distribution
Schölkopf, B., Platt, J. C., Shawe-Taylor, J., Smola, A. J., & Williamson, R. C. (2001) · Neural Computation · doi:10.1162/089976601750264965 · Cited by 6,168
DeepLog: Anomaly Detection and Diagnosis from System Logs through Deep Learning
Du, M., Li, F., Zheng, G., & Srikumar, V. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3134015 · Cited by 1,835
Ruff, L., Vandermeulen, R. A., Görnitz, N., Deecke, L., Siddiqui, S. A., Binder, A., Müller, E., & Kloft, M. (2018) · International Conference on Machine Learning · Cited by 1,719
Detecting large-scale system problems by mining console logs
Xu, W., Huang, L., Fox, A., Patterson, D., & Jordan, M. I. (2009) · Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles · doi:10.1145/1629575.1629587 · Cited by 1,332
Drain: an online log parsing approach with fixed depth tree
He, P., Zhu, J., Zheng, Z., & Lyu, M. R. (2017) · 2017 IEEE International Conference on Web Services (ICWS) · doi:10.1109/icws.2017.13 · Cited by 943
Robust log-based anomaly detection on unstable log data
Zhang, X., Xu, Y., Lin, Q., Qiao, B., Zhang, H., Dang, Y., Xie, C., Yang, X., Cheng, Q., Li, Z., et al. (2019) · Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering · doi:10.1145/3338906.3338931 · Cited by 761
Research works printed but not linked: 2
- [20]20. Yen, T.F., Oprea, A., Onarlioglu, K., Leetham, T., Robertson, W., Juels, A., Kirda, E.: Beehive: Large-scale log analysis for detecting suspicious activity in enterprise networks. In: Proceedings of the 29th Annual Computer Security Applications Conference. pp. 199-208 (2013)
- [24]24. He, S., Zhu, J., He, P., Lyu, M.R.: Loghub: A Large Collection of System Log Datasets towards Automated Log Analytics. arXiv:2008.06448 [cs] (Aug 2020) · arXiv
Cited by
Sorted by citations
Items 201–300 of 561
LGLog: Semi-supervised Graph Representation Learning for Anomaly Detection based on System Logs
Liu, J., Tang, Y., Liu, J., Zhao, K., & Chen, W. (2023) · IEEE International Conference on Software Quality, Reliability and Security (QRS) · doi:10.1109/qrs60937.2023.00014 · Cited by 4
Drone Flight Log Anomaly Severity Classification via Sentence Embedding
Silalahi, S., Ahmad, T., & Studiawan, H. (2023) · International Conference on Artificial Intelligence, Blockchain, Cloud Computing, and Data Analytics (ICoABCD) · doi:10.1109/icoabcd59879.2023.10390959 · Cited by 4
Transformers for Orbit Determination Anomaly Detection and Classification
Parrish, N. L., Popplewell, M., Caudill, M., Sullivan, T., Hanf, T., Tatman, B., Parmar, K., Presser, T., Chikine, S., Grant, M., et al. (2024) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw63382.2024.00675 · Cited by 3
Nipa, N. A., Bouguila, N., & Patterson, Z. (2025) · IEEE International Symposium on Industrial Electronics (ISIE) · doi:10.1109/isie62713.2025.11124715 · Cited by 3
Nasirzadeh, M., Tahmoresnezhad, J., & Khazaee, P. R. (2025) · Scientific Reports · doi:10.1038/s41598-025-27693-4 · Cited by 3
Mohamed, M. S. M., & Arabo, A. (2025) · doi:10.20944/preprints202511.1003.v1 · Cited by 3
AI-Augmented Automated Triage for System Error Reporting Using Log and Memory Dump Analysis
Li, Y. (2026) · International Conference on Big Data & Artificial Intelligence & Software Engineering (ICBASE) · doi:10.1109/icbase70763.2026.11619420 · Cited by 3
Backdoor Attack Against One-Class Sequential Anomaly Detection Models
Cheng, H., & Yuan, S. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-2259-4_20 · Cited by 3
Self-citationLeveraging Deep Learning for Fault Detection and Localization in Distributed Systems
Ghosh, D., & Singh, J. P. (2025) · IEEE Access · doi:10.1109/access.2025.3587529 · Cited by 3
HAMS: an AI-driven framework for real-time failure detection in HPC system logs
Bang, B., Kim, J., Song, U., Lee, J., & Ma, J. (2025) · The Journal of Supercomputing · doi:10.1007/s11227-025-07849-9 · Cited by 3
Zhang, H. (2024) · Journal of Advanced Computing Systems · doi:10.69987/jacs.2024.40305 · Cited by 3
A Transformer-based Model for Older Adult Behavior Change Detection
Akbari, F., & Sartipi, K. (2022) · IEEE International Conference on Healthcare Informatics (ICHI) · doi:10.1109/ichi54592.2022.00016 · Cited by 3
Detecting Malicious HTTP Requests Without Log Parser Using RequestBERT-BiLSTM
Júnior, L. S. R., Macêdo, D., Oliveira, A. L. I., & Zanchettin, C. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-21689-3_24 · Cited by 3
Anomaly Detection from Log Data Sequences with Perturbations
Chen, Y., Ye, L., Ye, Y., Zhang, P., & Tan, Q. (2022) · IEEE International Conference on Data Science in Cyberspace · doi:10.1109/dsc55868.2022.00031 · Cited by 3
Detecting log anomaly using subword attention encoder and probabilistic feature selection
Hariharan, M., Mishra, A., Ravi, S., Sharma, A., Tanwar, A., Sundaresan, K., Ganesan, P., & Karthik, R. (2023) · Applied Intelligence · doi:10.1007/s10489-023-04674-6 · Cited by 3
Ensemble Deep Learning based Real-time Log Anomaly Detection
Puranik, A., Akkihal, A. V., Suhas, R. K., Patel, Y. P. D., & Mahesh, H. B. (2023) · International Conference on Digital Applications, Transformation & Economy (ICDATE) · doi:10.1109/icdate58146.2023.10248821 · Cited by 3
LogContrast: A Weakly Supervised Anomaly Detection Method Leveraging Contrastive Learning
Zhang, T., Huang, X., Zhao, W. P., Mo, G., & Bian, S. (2023) · IEEE International Conference on Software Quality, Reliability and Security (QRS) · doi:10.1109/qrs60937.2023.00015 · Cited by 3
DLLog: An Online Log Parsing Approach for Large-Scale System
Cheng, H., Ying, S., Duan, X., & Yuan, W. (2024) · International Journal of Intelligent Systems · doi:10.1155/2024/5961993 · Cited by 3
TinyLog: Log Anomaly Detection with Lightweight Temporal Convolutional Network for Edge Device
Meng, C., & Chen, N. (2024) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn60899.2024.10651312 · Cited by 3
Qian, B., Zhu, M., Yang, M., Wu, E., Xie, G., Liang, Y., & Zheng, X. (2024) · IEEE International Conference on Web Services (ICWS) · doi:10.1109/icws62655.2024.00041 · Cited by 3
Log anomaly detection in AIOps: A real-world implementation using Large Language Models
De la Cruz Cabello, M., Sales, T. P., & Machado, M. R. (2026) · Systems and Soft Computing · doi:10.1016/j.sasc.2026.200475 · Cited by 4
Robustness test-time augmentation via learnable aggregation and anomaly detection
Xiong, H., Yang, L., Fang, G., Li, J., Xiang, Y., & Zhang, Y. (2024) · Journal of Intelligent & Fuzzy Systems · doi:10.3233/jifs-236010 · Cited by 2
TWLog: Task Workflow-Based Log Anomaly Detection
Zhang, S., Fan, D., He, L., Liu, Y., & Chen, D. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-7244-5_1 · Cited by 2
TPLAD: Template-Parsed Log Anomaly Detection for Electrical Database Systems
Li, H., Peng, X., Wang, D., An, S., Zhang, C., & Shi, W. (2024) · International Journal of High Speed Electronics and Systems · doi:10.1142/s0129156424401165 · Cited by 2
An Incremental Multi-Level, Multi-Scale Approach to Assessment of Multifidelity HPC Systems
Shilpika, S., Lusch, B., Vishwanath, V., & Papka, M. E. (2024) · International Conference for High Performance Computing, Networking, Storage and Analysis (SC) · doi:10.1109/scw63240.2024.00197 · Cited by 2
Wang, P., Zhang, X., & Cao, Z. (2025) · The Journal of Supercomputing · doi:10.1007/s11227-024-06850-y · Cited by 2
Madeline: Continuous and Low-cost Monitoring with Graph-free Representations to Combat Cyber Threats
Song, W., Ding, H., Meng, N., Gao, P., & Yao, D. D. (2024) · Annual Computer Security Applications Conference · doi:10.1109/acsac63791.2024.00075 · Cited by 2
Wu, X., Li, H., & Khomh, F. (2025) · Automated Software Engineering · doi:10.1007/s10515-025-00527-3 · Cited by 2
Self-citationGELog: a GPT-Enhanced Log Representation Method for Anomaly Detection
Xu, W., Wang, P., Shi, H., Zhou, G., Yao, J., & Zhang, X. (2025) · IEEE International Conference on Program Comprehension (ICPC) · doi:10.1109/icpc66645.2025.00062 · Cited by 2
ALogSCAN: A Self-Supervised Dual Network for Adaptive and Timely Log Anomaly Detection in Clouds
Raeiszadeh, M., Estrada‐Solano, F., Glitho, R., Eker, J., & Mini, R. A. F. (2025) · IEEE Transactions on Machine Learning in Communications and Networking · doi:10.1109/tmlcn.2025.3594653 · Cited by 2
A Log Anomaly Detection Method Based on the Pre-Training and Fine-Tuning Framework
Li, G., Mo, J., Zhou, G., & Li, C. (2025) · IEEE China Conference on System Simulation Technology and its Applications (CCSSTA) · doi:10.1109/ieeeconf65522.2025.11136981 · Cited by 2
Ngwenya, D., Ismail, D. K. B., & Wong, P. (2025) · IEEE International Conference on Cluster Computing Workshops (CLUSTER Workshops) · doi:10.1109/clusterworkshops65972.2025.11164207 · Cited by 2
Yang, W., Ou, W., Li, W., & Wang, H. (2025) · Journal of Network and Systems Management · doi:10.1007/s10922-025-09995-0 · Cited by 2
LLMs for Intrusion Detection Systems: A Review
Arife Gülşah, E. R. O. L., & Demirci, S. (2025) · doi:10.1109/isctrkiye68593.2025.11224813 · Cited by 2
HPCLOG: A Transformer-Based Log Anomaly Detection Framework for Distributed Systems
Shi, Q., Yang, Z., & Shao, S. (2025) · IEEE International Conference on Parallel and Distributed Systems (ICPADS) · doi:10.1109/icpads67057.2025.11323005 · Cited by 2
Krone: Hierarchical and Modular Log Anomaly Detection
Ma, L., Liu, J., Zhang, T., VanNostrand, P. M., Hofmann, D. M., Cao, L., Rundensteiner, E. A., & Chen, J. (2026) · IEEE International Conference on Data Engineering (ICDE) · doi:10.1109/icde65706.2026.00135 · Cited by 2
Investigating the Impact of Log-Sequence Embeddings on Anomaly Detection: A Systematic Study
Alzahrani, M. (2026) · Information · doi:10.3390/info17030228 · Cited by 2
Abdulrazzaq, M. A., & Toker, Ş. (2026) · International Informatics and Software Engineering Conference (IISEC) · doi:10.1109/iisec69317.2026.11418406 · Cited by 2
Janus: A Dual-Mask Attention Transformer for Log-based Anomaly Detection in Cellular Networks
Kulkarni, U., & Fahmy, S. (2026) · Proceedings of the ACM on Measurement and Analysis of Computing Systems · doi:10.1145/3788096 · Cited by 2
Beyond the prompt: Log-based threat detection and attribution for multi-Agent LLMs
Rabieinejad, E., Zarrinkalam, F., & Dehghantanha, A. (2026) · Information Processing & Management · doi:10.1016/j.ipm.2026.104768 · Cited by 2
Lightweight Techniques for Federated Anomaly Detection in Log Data
Pustozerova, A., Gómez, A. G., Landauer, M., Wurzenberger, M., Skopik, F., Weippl, E. R., Mayer, R. L., & Ekelhart, A. (2026) · IEEE Transactions on Reliability · doi:10.1109/tr.2026.3677674 · Cited by 2
Constructing an Ensemble Stacking Model for Detecting DDoS Attacks
Chen, C., & Lee, W.-J. (2026) · Telecom · doi:10.3390/telecom7030051 · Cited by 2
A semantic and behavioral AI framework for detecting invoice fraud in automated accounts payable
Alim, I., Meghla, R. N., Matin, T. F., & Prodhan, T. M. M. H. (2026) · International Journal of Science and Research Archive · doi:10.30574/ijsra.2026.19.2.1114 · Cited by 2
Next-Gen Mobile Forensics Tool: Timeline Reconstruction from Android Digital Evidence
Pathirana, S., Dushmantha, R., Jayarathna, C., Thilakarathna, B., Senarathna, A. N., & Wijesooriya, A. (2026) · International Congress on Human-Computer Interaction, Optimization and Robotic Applications (ICHORA) · doi:10.1109/ichora69329.2026.11536997 · Cited by 2
The Sub-Sequence Summary Method for Detecting Anomalies in Logs
Horväth, G., Kádár, A., & Szilágyi, P. (2023) · IEEE Access · doi:10.1109/access.2023.3266990 · Cited by 2
LogKT: Hybrid Log Anomaly Detection Method for Cloud Data Center
Ou, X., & Liu, J. (2023) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/compsac57700.2023.00030 · Cited by 2
Sutthipanyo, T., Lamsan, T., Thawornsusin, W., & Susutti, W. (2023) · IEEE Region 10 Conference (TENCON) · doi:10.1109/tencon58879.2023.10322478 · Cited by 2
Optimizing Software Release Management with GPT-Enabled Log Anomaly Detection
Mannam, P. K. (2023) · International Conference on Computer and Information Technology (ICCIT) · doi:10.1109/iccit60459.2023.10441522 · Cited by 2
SemLog: A Semantics-based Approach for Anomaly Detection in Big Data System Logs
Tan, X., Han, N., Lu, S., Chen, W., & Wang, D. (2023) · IEEE International Conference on Parallel and Distributed Systems (ICPADS) · doi:10.1109/icpads60453.2023.00174 · Cited by 2
Machine Learning and Anomaly Detection for an Automated Monitoring of Log Data
Falzone, S., Gühring, G., & Jung, B. (2024) · Springer eBooks · doi:10.1007/978-3-031-57452-8_13 · Cited by 2
Unsupervised Microservice Log Anomaly Detection Method Based on Graph Neural Network
Liang, X., Li, L., & Peng, H. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-7184-4_17 · Cited by 2
Learning the Structure of Commands by Retraining a Language Model
Hussain, Z., Myllyaho, L., & Nurminen, J. K. (2024) · International Conference on Machine Learning Technologies (ICMLT) · doi:10.1145/3674029.3674067 · Cited by 2
Semi-supervised Configuration and Optimization of Anomaly Detection Algorithms on Log Data
Beck, V., Landauer, M., Wurzenberger, M., Skopik, F., & Rauber, A. (2024) · IEEE International Conference on Big Data (BigData) · doi:10.1109/bigdata62323.2024.10825202 · Cited by 2
Yadav, G., Deepak, S., Sharma, H., Sharma, D., & Rai, A. K. (2024) · International Conference on Advances in Computation, Communication and Information Technology (ICAICCIT) · doi:10.1109/icaiccit64383.2024.10912228 · Cited by 2
Responsible generative AI for telecom
Chergui, H. (2025) · Elsevier eBooks · doi:10.1016/b978-0-44-329135-7.00017-5 · Cited by 2
Large Language Models Empowered Online Log Anomaly Detection in AIOps
Zhang, S., Fan, D., & He, L. (2024) · Asia-Pacific Software Engineering Conference (APSEC) · doi:10.1109/apsec65559.2024.00051 · Cited by 2
CGP-Mamba: An Intrusion Detection Method Based on State Space Model
He, J., Wang, G., Liu, N., & Kong, L. (2025) · Communications in computer and information science · doi:10.1007/978-981-96-4509-1_18 · Cited by 2
Anomaly Detection in 6G Networks Using Large Language Models (LLMs)
Abasi, A. K., Aloqaily, M., & Guizani, M. (2025) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1109/iwcmc65282.2025.11059535 · Cited by 2
Enhanced anomaly detection in log-based systems using GAN-based models
Farjamfard, E., & Shameli‐Sendi, A. (2025) · Cluster Computing · doi:10.1007/s10586-025-05535-2 · Cited by 3
Antić, J., Costa, J. P., Černivec, A., Cankar, M., Martinčič, T., Potočnik, A., Benguria, G., Leligou, H. C., & Boigues, I. T. (2023) · International Conference on the Design of Reliable Communication Networks (DRCN) · doi:10.1109/drcn57075.2023.10108105 · Cited by 2
FastPacket: Towards Pre-trained Packets Embedding based on FastText for nextgeneration NIDS
(2023) · Journal of Current Trends in Computer Science Research · doi:10.33140/jctcsr.02.01.07 · Cited by 2
Towards Anomaly Detection using Multiple Instances of Micro-Cluster Detection
Copstein, R., Niblett, B., Johnston, A., Schwartzentruber, J., Heywood, M. I., & Zincir-Heywood, N. (2023) · Cyber Security in Networking Conference (CSNet) · doi:10.1109/csnet59123.2023.10339735 · Cited by 2
Enhancing Log Anomaly Detection through Knowledge Graph Integration
Chen, G.-F., Yang, T.-J., & Chen, C. C. (2024) · IEEE International Conference on Semantic Computing (ICSC) · doi:10.1109/icsc59802.2024.00038 · Cited by 2
0A Comprehensive Review on Anomaly Detection Techniques for Web Data Logging
Dalal, R., Goel, N., Darbari, R., Chauhan, O., Samal, S., & Khari, M. (2024) · Lecture notes in networks and systems · doi:10.1007/978-981-97-1260-1_18 · Cited by 2
Automated Fault Detection in 5G Core Networks Using Large Language ModelsPreprint
Hatami, P., Majlesara, A., Majlesi, A., & Khalaj, B. H. (2025) · arXiv (Cornell University) · doi:10.48550/arxiv.2512.19697 · Cited by 2
System Log Anomaly Detection Based on Spiking Neural Network Trained with Backpropagation
Zheng, J., & Wang, Z. (2023) · International Conference on Intelligent Communications and Computing (ICICC) · doi:10.1109/icc59986.2023.10421435 · Cited by 1
LogFold: Enhancing Log Anomaly Detection Through Sequence Folding and Reconstruction
Shi, X., Li, R., Du, Q., He, C., & Tian, F. (2023) · Asia-Pacific Software Engineering Conference (APSEC) · doi:10.1109/apsec60848.2023.00028 · Cited by 1
Log anomaly detection based on parallel fusion of CNN and GRU
Cheng, L., Mo, J., Zhou, G., & Li, G. (2024) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn60899.2024.10650038 · Cited by 1
Event-level Anomaly Detection on Software logs: Role of Algorithm, Threshold, and Window Size
Nyyssölä, J., & Mäntylä, M. (2024) · IEEE International Conference on Software Quality, Reliability and Security (QRS) · doi:10.1109/qrs62785.2024.00070 · Cited by 1
Pre-LogMGAE: Identification of Log Anomalies Using a Pre-Trained Masked Graph Autoencoder
Wu, A., & Kwon, Y. (2024) · IEEE Symposium on Reliable Distributed Systems (SRDS) · doi:10.1109/srds64841.2024.00036 · Cited by 1
LogESP: Enhancing Log Semantic Representation With Word Position for Anomaly Detection
Ni, Z., Di, X., Liu, X., Chang, L., Li, J., & Tang, Q. (2024) · IEEE International Symposium on Parallel and Distributed Processing with Applications (ISPA) · doi:10.1109/ispa63168.2024.00261 · Cited by 1
LogSI: A Benchmark for System-Incremental Log Analysis
Zhou, M., Yang, W., Ma, L., Jiang, S., Xu, B., & Xiao, Y. (2025) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp49660.2025.10890641 · Cited by 1
Qiu, J., Shu, L., & Zhang, Y. (2025) · Journal of Organizational and End User Computing · doi:10.4018/joeuc.382092 · Cited by 1
Comparing Transformer-Based Log Anomaly Detection With LLM Explainability In CI/CD Pipelines
Al-Aqrabi, Q. M., Al-Aqrabi, H. M., & Solayman, M. M. (2025) · Intelligent Methods, Systems, and Applications (IMSA) · doi:10.1109/imsa65733.2025.11167168 · Cited by 1
Towards Context-Aware Log Anomaly Detection Using Fine-Tuned Large Language Models
Breniaux, H., & Mouheb, D. (2025) · Lecture notes in computer science · doi:10.1007/978-3-032-07884-1_5 · Cited by 1
X-HEART: eXplainable heterogeneous log anomaly detection using robust transformers
Mvula, P. K., Branco, P., Jourdan, G.-V., & Viktor, H. L. (2025) · Knowledge and Information Systems · doi:10.1007/s10115-025-02604-1 · Cited by 1
Anomaly Detection in Windows Event Logs for Ransomware Identification
Nashivochnikov, N., Vitkova, L., Lukashin, A., & Chechulin, A. A. (2025) · International Ural Conference on Electrical Power Engineering (UralCon) · doi:10.1109/uralcon67204.2025.11206632 · Cited by 1
GSTGPT: A GPT-Based Framework for Multi-Source Data Anomaly Detection
Liu, J., Fang, M., Zhang, S., Shan, F., & Li, J. (2025) · Information · doi:10.3390/info16110959 · Cited by 1
FedLAD: A Modular and Adaptive Testbed for Federated Log Anomaly Detection
Liao, Y., Keung, J., Mao, Z., Zhang, J., & Li, J. (2025) · IEEE International Conference on Autonomic Computing and Self-Organizing Systems Companion (ACSOS-C) · doi:10.1109/acsos-c66519.2025.00066 · Cited by 1
AI-Augmented Dynamic Performance Engineering: A Hybrid Platform Architecture
Gaddam, R. R. (2025) · Journal of Information Systems Engineering & Management · doi:10.52783/jisem.v10i63s.13804 · Cited by 1
Automated Fault Diagnosis in IoT Systems Through Semantic Analysis of Long-Form Textual Data
Mamanpoosh, A., & Karshenas, H. (2025) · International Conference on the Internet of Things (IoT) · doi:10.1109/iot69654.2025.11297608 · Cited by 1
Log Anomaly Detection on Edge Devices Using Robust Principal Component Analysis
Yang, R., Deng, F., Liu, T., & Han, A. (2025) · International Conference on Computer Systems (ICCS) · doi:10.1109/iccs67844.2025.11292191 · Cited by 1
Anomaly Detection in Log Data: A Comparative Study
Sedláček, O., Žádník, M., & Bartoš, V. (2025) · International Conference on Network and Service Management (CNSM) · doi:10.23919/cnsm67658.2025.11297503 · Cited by 1
GLU-PM: A Pretrained Model Toward Generalized Log Understanding
Liu, X., Zheng, S., Zou, H., Yu, H., & Gao, S. (2025) · IEEE Transactions on Reliability · doi:10.1109/tr.2025.3642425 · Cited by 1
Detecting anomalies in log files using the Damerau-Levenshtein distance metric
Horváth, G., Mészáros, A., Charaf, K., & Szilágyi, P. (2026) · Data Mining and Knowledge Discovery · doi:10.1007/s10618-025-01182-8 · Cited by 1
Scalable Anomaly Detection in Cloud Logs with Sparse Transformer
Anu, V. R. (2025) · IEEE Recent Advances in Intelligent Computational Systems · doi:10.1109/raics66191.2025.11332589 · Cited by 1
RELog: Robust and Efficient Anomaly Detection Based on Complete Logs for Large-Scale Systems
Chai, X., Feng, X., Lou, Z., Sun, Y., & Guizani, M. (2026) · IEEE Transactions on Computers · doi:10.1109/tc.2026.3654206 · Cited by 1
A Semantic-Aware Network Intelligence Framework for Anomaly Detection using Large Language Models
Li, W., Li, J., Shao, H., Li, J., & Zhang, W. (2025) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom66490.2025.00389 · Cited by 1
Unsupervised Anomaly Detection in OpenStack Logs via Fine-Tuned RoBERTa Embeddings
Rajkarnikar, J., Poudel, N., & Rahimi, N. (2025) · Journal of Cybersecurity Digital Forensics and Jurisprudence · doi:10.65879/3070-5789.2025.01.02 · Cited by 1
HybridLog: LLM-Powered Log Anomaly Analysis with Heterogeneous Semantic Collaboration Training
Zuo, H., Tang, F., Li, Y., Zhao, M., Wang, R., & Liu, J. (2025) · IEEE Smart World Congress (SWC) · doi:10.1109/swc65939.2025.00123 · Cited by 1
TraceHG: An Unsupervised Dual-View Framework for Microservice Anomaly Detection
Han, N., Lu, S., Lin, Z., Li, B., Wang, N., & Luo, X. (2026) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2026.3667576 · Cited by 1
Efficient System Log Analysis via Quantized On-Device Anomaly Detection and Response
Shi, Q., Yang, Z., & Shao, S. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-18268-5_16 · Cited by 1
GPT-based self-supervised anomaly detection in command lines
Li, M. Q., Keutchayan, J., Charest, F., & Fung, B. C. M. (2026) · Journal of Computer Virology and Hacking Techniques · doi:10.1007/s11416-026-00606-3 · Cited by 1
Enhancing Graph-Based Advanced Persistent Threat Detection with LLM Sentence Embedding
Sakamaki, S., Kanezashi, H., Suzumura, T., & Kudoh, T. (2025) · IEEE ... International Conference on Data Mining workshops · doi:10.1109/icdmw69685.2025.00146 · Cited by 1
Log-based anomaly detection for evolving software: An incremental deep-learning approach
Wei, X., Sun, C., Zhang, X., & Towey, D. (2026) · Information and Software Technology · doi:10.1016/j.infsof.2026.108199 · Cited by 1
LogMUSE: Log Anomaly Detection via Multi-Scale Semantic Representation
Liu, M., Wang, T., Zhao, Y., Xia, C., Zeng, Y., & Tao, Y. (2026) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2026.3700403 · Cited by 1
MINES: Explainable Anomaly Detection through Web API Invariant Inference
Zhang, W., Lin, Y., Kwok, C. F. A., Teoh, X., Xie, X., Liauw, F., Zhang, H., & Dong, J. S. (2026) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1145/3744916.3773160 · Cited by 1
Instruction-Tuned LLMs for Parsing and Mining Unstructured Logs on Leadership HPC Systems
Karimi, A. M., Choi, J. Y., Cao, C., & Khan, A. (2026) · ISC High Performance (ISC) · doi:10.23919/isc.2026.11520489 · Cited by 1
Amanmadov, N., Iskanderov, J., Bellamkonda, N., Jalan, P., & Oyebode, O. (2026) · International Conference on Multimedia Computing, Networking and Applications (MCNA) · doi:10.1109/mcna69896.2026.11574338 · Cited by 1
Metadata
- Authors
- Guo, H., Yuan, S., & Wu, X.
- Affiliations
- Utah State University (US)
- University of Arkansas at Fayetteville (US)
- ORCID
- Wu, Xintao
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2021
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 2103.04475
- OpenAlex
- W3134847483
- Cited by
- 7
- References
- 24
- Citations by year
- 2026: 1 · 2024: 2 · 2023: 2 · 2021: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Licence
- Locations
- arXiv (Cornell University) (submittedVersion, cc-by)
- Digital Commons - USU (Utah State University) (submittedVersion)
- arXiv (Cornell University) (cc-by)
- Digital Commons - USU (Utah State University)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Software System Performance and Reliability
- Physical Sciences › Computer Science › Artificial Intelligence › Anomaly Detection Techniques and Applications
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- log anomaly detection, system logs, BERT, self-supervised learning, intrusion detection, cybersecurity
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
