The DOI matches its DataCite record; 24 of the 24 references it cites were found in a registry or an index.
LogBERT: Log Anomaly Detection via BERT
Open accessAbstract
Detecting anomalous events in online computer systems is crucial to protect the systems from malicious attacks or malfunctions. System logs, which record detailed information of computational events, are widely used for system status analysis. In this paper, we propose LogBERT, a self-supervised framework for log anomaly detection based on Bidirectional Encoder Representations from Transformers (BERT). LogBERT learns the patterns of normal log sequences by two novel self-supervised training tasks and is able to detect anomalies where the underlying patterns deviate from normal log sequences. The experimental results on three log datasets show that LogBERT outperforms state-of-the-art approaches for anomaly detection.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The cited source doesn’t support the claim as written.
In the citing paper
“Classical unsupervised techniques, including PCA and Isolation Forest, obtained F1-scores of 0.741 and 0.718, respectively, on the HDFs dataset [6].”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Checked by a reasoning model — may be wrong.
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“While LogBERT has demonstrated state-of-the-art performance on structured and labeled datasets -such as Hadoop Distributed File System (HDFS), BlueGene/L (BGL), and Thunderbird -its applicability to heterogeneous and unlabeled Linux syslogs remains underexplored in the literature.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Guo et al. [6] followed a similar approach but with larger time windows between 1 to 5 min, and instead of following our buffering technique, they just dropped windows shorter than 10 tokens.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Similarly to what [6] did, we conducted training and validation using 100% of the available training windows, with a 10% split reserved for validation during training.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“The selection of these models aligns with the existing literature [6,14,15,22] and supports a balanced comparison between unsupervised and supervised approaches.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measured
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Additionally, Guo et al. [6] demonstrated that moderate mask ratios preserved semantic context while still being challenging for the model to reconstruct the missing information.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“The study builds upon the LogBERT architecture [6], a transformer-based model leveraging self-supervised learning to detect anomalies in unstructured logs.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Notably, LogBERT [6] employs a self-supervised masked language modeling objective combined with hypersphere minimization to detect deviations from expected patterns.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“In addition, the masking-and-reconstruction objective provides a principled anomaly score based on unexpected token predictions, which is suitable when explicit anomaly categories are unavailable.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Its performance on datasets like HDFS, BGL, and Thunderbird surpasses classical models such as PCA, DeepLog, and LogAnomaly [6], making it well-suited for operational deployment under resource constraints.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“These labels were used solely to split the datasets in the next stages so that LogBERT's [6] unsupervised training could be restricted to only sequences that contained normal events.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Although LogBERT [6] itself is trained in a completely unsupervised way, using only normal log sequences, labels are nevertheless computed at this stage for splitting purposes.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“We followed the same splitting approach as [6].”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“Our evaluation confirmed the validity of the experimental design because it reproduced the performance that Guo et al. [6] reported on the HDFS, BGL, and Thunderbird datasets, where F1-scores reached 82.32%, 90.83%, and 96.64%, respectively.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The cited source says what the claim attributes to it.
In the citing paper
“We ensured reproducibility by adopting an unsupervised training pipeline consistent with prior work [6].”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“Initially, inspired by the approach of Guo et al. [6], who deleted log sequences with fewer than 10 tokens, potentially omitting valuable anomalies, we replicated their setup with a modification.”
From Log anomaly detection in AIOps: A real-world implementation using Large Language Models (2026) · cites this paper as [6]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A. N., Kaiser, L., & Polosukhin, I. (2017) · arXiv · doi:10.48550/arxiv.1706.03762 · Cited by 120,404
BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding
Devlin, J., Chang, M.-W., Lee, K., & Toutanova, K. (2019) · Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long and Short Papers) · doi:10.18653/v1/n19-1423 · Cited by 54,325
Nonlinear Dimensionality Reduction by Locally Linear Embedding
Roweis, S. T., & Saul, L. K. (2000) · Science · doi:10.1126/science.290.5500.2323 · Cited by 14,965
Liu, F. T., Ting, K. M., & Zhou, Z.-H. (2008) · 2008 Eighth IEEE International Conference on Data Mining · doi:10.1109/icdm.2008.17 · Cited by 6,601
Estimating the Support of a High-Dimensional Distribution
Schölkopf, B., Platt, J. C., Shawe-Taylor, J., Smola, A. J., & Williamson, R. C. (2001) · Neural Computation · doi:10.1162/089976601750264965 · Cited by 6,168
DeepLog: Anomaly Detection and Diagnosis from System Logs through Deep Learning
Du, M., Li, F., Zheng, G., & Srikumar, V. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3134015 · Cited by 1,835
Ruff, L., Vandermeulen, R. A., Görnitz, N., Deecke, L., Siddiqui, S. A., Binder, A., Müller, E., & Kloft, M. (2018) · International Conference on Machine Learning · Cited by 1,719
Detecting large-scale system problems by mining console logs
Xu, W., Huang, L., Fox, A., Patterson, D., & Jordan, M. I. (2009) · Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles · doi:10.1145/1629575.1629587 · Cited by 1,332
Drain: an online log parsing approach with fixed depth tree
He, P., Zhu, J., Zheng, Z., & Lyu, M. R. (2017) · 2017 IEEE International Conference on Web Services (ICWS) · doi:10.1109/icws.2017.13 · Cited by 943
Robust log-based anomaly detection on unstable log data
Zhang, X., Xu, Y., Lin, Q., Qiao, B., Zhang, H., Dang, Y., Xie, C., Yang, X., Cheng, Q., Li, Z., et al. (2019) · Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering · doi:10.1145/3338906.3338931 · Cited by 761
Flagged first, then by citations
Research works printed but not linked: 2
- [20]20. Yen, T.F., Oprea, A., Onarlioglu, K., Leetham, T., Robertson, W., Juels, A., Kirda, E.: Beehive: Large-scale log analysis for detecting suspicious activity in enterprise networks. In: Proceedings of the 29th Annual Computer Security Applications Conference. pp. 199-208 (2013)
- [24]24. He, S., Zhu, J., He, P., Lyu, M.R.: Loghub: A Large Collection of System Log Datasets towards Automated Log Analytics. arXiv:2008.06448 [cs] (Aug 2020) · arXiv
Cited by
Sorted by citations
Items 301–400 of 561
Small Is Beautiful: A Practical and Efficient Log Parsing Framework
Wang, M., & Huo, Y. (2026) · Proceedings of the ACM on software engineering. · doi:10.1145/3797145 · Cited by 1
AIDA: Accelerating Root Cause Analysis for Multi-Vendor Device Failures with LLM-Powered Reasoning
Xu, H., Zeng, X., Zhang, X., Zhang, X., Lv, Y., Zhang, P., Guo, D., & Zhai, E. (2026) · ACM SIGCOMM Conference (SIGCOMM) · doi:10.1145/3789240.3829126 · Cited by 1
NovaADLS: Semi-supervised Anomaly Detection in Log Series
Roqaya, N., Jabeen, H., & Papenbrock, T. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-32726-0_14 · Cited by 1
Chitnis, P., & Asthana, A. (2023) · IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) · doi:10.1109/issrew60843.2023.00064 · Cited by 1
Efficient Log Anomaly Detection Based on Dimension Reduction and Attention Aware TCN
Xu, Z., Shi, Y., Su, Z., Song, L., Zhang, J., Wang, X., & Li, H. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-2303-4_33 · Cited by 1
Unsupervised Log Sequence Segmentation
Dobrowolski, W., Libura, M., Nikodem, M., & Unold, O. (2024) · IEEE Access · doi:10.1109/access.2024.3409425 · Cited by 1
Advanced Anomaly Detection in Cloud Security Using Gini Impurity and ML
Saikiran, N., Reddy, K. Y., Reddy, C. P., & Karthik, S. (2024) · International Conference on Applied Artificial Intelligence and Computing (ICAAIC) · doi:10.1109/icaaic60222.2024.10575757 · Cited by 1
IPLog: An Efficient Log Parsing Method Based on Few-Shot Learning
Liu, S., Yun, L., Nie, S., Zhang, G., & Li, W. (2024) · Electronics · doi:10.3390/electronics13163324 · Cited by 1
LogTIW:A log anomaly detection model based on TF-IDF weighted semantic features
Kang, J., Zhao, J., & Li, Z. (2024) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn60899.2024.10651316 · Cited by 1
A Review of Software Testing Process Log Parsing and Mining
Xue, K., Han, Q., Sheng, H., Shi, Z., & Qiao, Y. (2024) · IEEE International Conference on Software Services Engineering (SSE) · doi:10.1109/sse62657.2024.00055 · Cited by 1
Optimizing Software Release Management with GPT-Enabled Log Anomaly Detection
Setu, J. H., Hossain, M. S., Halder, N., Islam, A., & Amin, M. A. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-78166-7_23 · Cited by 1
VCRLog: Variable Contents Relationship Perception for Log-based Anomaly Detection
Wang, J., Li, T., Zhang, R., Tang, Z., Wu, D., & Yang, Z. (2024) · Proceedings/Proceedings - International Symposium on Software Reliability Engineering · doi:10.1109/issre62328.2024.00025 · Cited by 1
Early Detection of Malicious Activity in Log Event Sequences Using Deep Learning
Ralbovský, A., & Kotuliak, I. (2025) · Conference of Open Innovations Association (FRUCT) · doi:10.23919/fruct65909.2025.11008245 · Cited by 1
Sun, Y., Keung, J., Yu, H. K., Liu, S., Liao, Y., & Zhang, J. (2025) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/compsac65507.2025.00173 · Cited by 1
FastPacket: Towards Pre-trained Packets Embedding based on FastText for next-generation NIDSPreprint
Jallad, K. A. (2021) · Research Square · doi:10.21203/rs.3.rs-555961/v1 · Cited by 1
LLM-SrcLog: Towards Proactive and Unified Log Template Extraction via Large Language ModelsPreprint
Sun, J., Li, W., Zhang, H., Ding, C., Qian, S., Cao, J., & Xue, G. (2025) · arXiv (Cornell University) · doi:10.48550/arxiv.2512.04474 · Cited by 1
Mining Software Logs with Machine Learning Techniques
Afshinpour, B. (2023) · theses.fr (ABES) · doi:10.70675/f595bf6fze8d2z402cz9df2z57e79276130d · Cited by 1
Network anomaly detection based on keyword embedding log
Song, Y. I., Yan, Z., Qin, Y., Xie, Y., Ye, X., & Ouyang, Y. (2022) · ITU Journal on Future and Evolving Technologies · doi:10.52953/icxq5497
Jaafar, F., Avellaneda, F., Timo, O. N., Beaulieu, M., & Landry, D. (2023) · Technologie et innovation · doi:10.21494/iste.op.2023.0911
MDAP: Module Dependency based Anomaly Prediction
Borse, H., Sahoo, B. R., Chanda, P., Sinha, S., Mondal, M., & Mitra, B. (2023) · Computer Communications · doi:10.1016/j.comcom.2023.05.023
Maldonado, F., Tian, J., Areal, R., & Sohanpall, S. (2023) · SSRN Electronic Journal · doi:10.2139/ssrn.4502480
SSADLog: Whole Lifecycle Tuning Anomaly Detection with Small Sample LogsPreprint
Zhou, Z., Zhou, M., Wu, A., Xia, J., & Liu, W. (2023) · Research Square · doi:10.21203/rs.3.rs-3588406/v1
Jiaqi, S., Chen, W., Weiming, T., & Long, P. (2024) · Lecture notes in electrical engineering · doi:10.1007/978-981-97-1447-6_75
Open-Set Text Recognition Implementations(III): Open-set Predictor
Yin, X.-C., Yang, C. H., & Liu, C. (2024) · SpringerBriefs in computer science · doi:10.1007/978-981-97-0361-6_6
SSADLog: Whole Lifecycle Tuning Anomaly Detection with Small Sample LogsPreprint
Zhou, Z., Zhou, M., Wu, A., Xia, J., & Liu, W. (2024) · Research Square · doi:10.21203/rs.3.rs-3588406/v2
Threat Hunting basado en técnicas de Inteligencia Artificial
Lozano, M. A. (2024) · RiuNet (Universitat Politècnica de València) · doi:10.4995/thesis/10251/204427
Addressing a Malicious Tampering Attack on the Default Isolation Level in DBMS
Alhajri, A., & Jhumka, A. (2023) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom60117.2023.00371
Kg-Lad: A Knowledge Graph-Augmented Approach for Effective Log Anomaly DetectionPreprint
Chen, C. C., Yang, T.-J., & Chen, G.-F. (2024) · SSRN Electronic Journal · doi:10.2139/ssrn.4900197
Semantic-Aware Log Understanding and Analysis
Huang, S., & Luan, Z. (2024) · ACM International Symposium on High-Performance Parallel and Distributed Computing (HPDC) · doi:10.1145/3625549.3658830
HiparaLog: Improving Log-based Anomaly Detection through Parameter Feature Integration
Li, G., Mo, J., Zhou, G., & Li, C. (2024) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn60899.2024.10650376
Yu, H. C., Sun, W., Liu, J., & Gao, P. (2024) · IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech) · doi:10.1109/cyberscitech64112.2024.00038
Power system log anomaly detection based on spatiotemporal combined GAT-BiGRU
Shi, B., Zhao, C., Zhang, Y., & Zhang, Y. (2024) · International Symposium on Computer Engineering and Intelligent Communications (ISCEIC) · doi:10.1109/isceic63613.2024.10810187
Anomaly Detection of Unstable Log Data Based on Contrastive Learning
Liu, L., Huang, Z., Lin, J., He, K., & Hui, Z. (2024) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-73699-5_10
Improving Real-Time Anomaly Detection using Multiple Instances of Micro-Cluster Detection
Copstein, R., Zincir-Heywood, N., & Heywood, M. I. (2024) · International Conference on Network and Service Management (CNSM) · doi:10.23919/cnsm62983.2024.10814578
LLM for Automated Root Cause Analysis in Microservices Architectures
Mhatre, A. S. A. (2025) · Journal of Information Systems Engineering & Management · doi:10.52783/jisem.v10i13s.2100
Generalizable and Robust Log Anomaly Detection Based on Transformer
Lou, Z., Chai, X., Shang, C., & Sun, Y. (2025) · Communications in computer and information science · doi:10.1007/978-981-96-2186-6_14
Log-Based System Failure Prediction with Dual-Aspect Feature AugmentationPreprint
Tian, Y., & Ying, S. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5169133
Hierarchical Prompt Tuning for System-Incremental Log Analysis
Zhou, M., Yang, W., Ma, L., Jiang, S., Xu, B., & Xiao, Y. (2025) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp49660.2025.10890029
Log Anomaly Detection Method Based On Multi-Feature Graph Embedding
Liu, J., & Li, L. (2024) · International Conference on Electronic Information Engineering and Computer Communication (EIECC) · doi:10.1109/eiecc64539.2024.10929241
System Abnormality Detection by Deep Learning and Joint Histogram Analysis
Cheng, C., & Lin, C. (2024) · International Conference on Machine Learning and Cybernetics · doi:10.1109/icmlc63072.2024.10935150
An Intrusion Detection System for Heterogeneous OT-Enabled Networks Using Hybrid Deep Learning Model
Chen, C.-M., Cai, Z.-X., Lai, G.-H., & Ou, Y.-H. (2025) · Communications in computer and information science · doi:10.1007/978-981-96-4589-3_14
LogABC: A Log Anomaly Detection Model Based on Deep Learning
Li, Z., & Huang, H. (2024) · International Conference on Image Processing, Computer Vision and Machine Learning (ICICML) · doi:10.1109/icicml63543.2024.10957891
False Information Mitigation Using Pattern-Based Anomaly Detection for Secure Vehicular Networks
Borah, A., & Paranjothi, A. (2025) · Electronics · doi:10.3390/electronics14091848
AI Based Anomaly Detection in Endpoint Logs
Unni.A, A., Sriram, A. L., Priya.N.R., A., & Lakshmi Priya, S. (2025) · International Research Journal on Advanced Engineering Hub (IRJAEH) · doi:10.47392/irjaeh.2025.0342
A Graph-Based Unsupervised Log Anomaly Detection Based on the Magnetic Laplacian
Yan, K., & Jiang, Y. (2025) · International Conference on Software Engineering and Computer Science (CSECS) · doi:10.1109/csecs64665.2025.11010043
LOMOS: An AI-Based Runtime Security Monitoring System Fit for the Cloud Continuum
Costa, J. P., Ratkajec, H., Vladušič, D., Martinčič, T., Černivec, A., Činkelj, J., Davi, R., Favrin, S., Gorza, L., & di Marco, G. (2025) · Lecture notes in computer science · doi:10.1007/978-3-031-90203-1_1
Unsupervised Multi-Target Cross-Service Log Anomaly Detection
He, S., Liu, R., Chen, B., Xie, K., & Wen, J. (2025) · IEEE Transactions on Sustainable Computing · doi:10.1109/tsusc.2025.3578517
An Effective Log Sequence Anomaly Detection Method Guided by Large Language Models
Xie, Z., Chai, X., Luo, H. Y., & Sun, Y. (2025) · International Conference on Computer Supported Cooperative Work in Design (CSCWD) · doi:10.1109/cscwd64889.2025.11033638
LogMT: A Self-supervised Log Anomaly Detection Method Based on Multi-Tasks
Xie, W., & Ni, Q. (2025) · International Conference on Computer Supported Cooperative Work in Design (CSCWD) · doi:10.1109/cscwd64889.2025.11033424
LogMoE: Optimizing Mixture of Experts for Log Anomaly Detection via Knowledge Distillation
Chen, D., Guo, Z., Shen, Y., & Wang, M. (2025) · Lecture notes in computer science · doi:10.1007/978-981-96-6582-2_6
Xu, T., Li, J., Liu, C., Zhao, Y., Li, J., Wang, K., & Huang, Z. (2025) · Communications in computer and information science · doi:10.1007/978-981-96-9946-9_5
OPTIMIZATION OF INCIDENT PROCESSING IN CONDITIONS OF HIGH EVENT ACTIVITY USING LLM TECHNOLOGIES
Mikhalap, S. (2025) · Наука і техніка сьогодні · doi:10.52058/2786-6025-2025-7(48)-1141-1162
Tang, P., & Guan, Y. (2025) · Future Generation Computer Systems · doi:10.1016/j.future.2025.108022
Bandlamudi, A. K., & Pachala, S. (2025) · Lecture notes in networks and systems · doi:10.1007/978-981-96-6063-6_10
Large Language Model Framework for Log Sequence Anomaly Detection
Reis, J., Areias, M., & Barbosa, J. G. (2025) · Lecture notes in computer science · doi:10.1007/978-3-032-05176-9_25
Sistema de detecção e categorização de falhas de infraestrutura
Santos, D. H., & Costa, K. (2024) · doi:10.11606/003225174
AI-Assisted Triage of Flaky Test Failures from System Logs: A Practical Pipeline for CI at Scale
Baranetska, Y. (2025) · Journal of Artificial Intelligence General science (JAIGS) · doi:10.60087/jaigs.v8i02.416
Guo, A., & Farooque, M. (2025) · International Conference on Machine Learning and Applications · doi:10.1109/icmla66185.2025.00145
Log Anomaly detection in IoT networks using DeBERTa-V3
Haralambie, F., Bratu, A., Raluca-Ioana, P., Nicolae, G., & Vasilăţeanu, A. (2025) · IEEE International Conference on Blockchain, Smart Healthcare and Emerging Technologies (SmartBlock4Health) · doi:10.1109/smartblock4health64843.2025.11189737
BGformer: An Abnormal Event Detection Model For Distributed Software Operation And Maintenance Logs
Zhang, X., & Wang, Y. (2025) · International Conference on Natural Computation, Fuzzy Systems and Knowledge Discovery (ICNC-FSKD) · doi:10.1109/icnc-fskd67701.2025.11197991
CAPTOR: Cyber Attack Protection via Temporal Online Graph Representation Learning
Lakha, B., Layne, J., Serra, E., Gullo, F., & Jajodia, S. (2025) · IEEE Transactions on Big Data · doi:10.1109/tbdata.2025.3621145
Trojan Vulnerabilities in Host-Based Intrusion Detection Systems
Cheung, M., Venkatesan, S., & Izmailov, R. (2025) · Communications in computer and information science · doi:10.1007/978-3-032-04339-9_9
A Data-Driven Framework for Anomaly Detection in Industrial Systems Using Log Data
Hewing, M., Zhao, Y., Vossel, M., Nieschler, P., & Kleinert, T. (2025) · Annual Conference of the IEEE Industrial Electronics Society (IECON) · doi:10.1109/iecon58223.2025.11221513
LogReader: General-Purpose Log Analysis via Open-Source Large Language Models
Qi, J., Luan, Z., Huang, S., Lu, Y. H., Yang, H., & Qian, D. (2025) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn64981.2025.11227375
Systematic Mapping of Fault Monitoring Techniques Based on Data Mining
Rodrigues, P. R. F., & Lelli, V. (2025) · Brazilian Symposium on Multimedia and the Web · doi:10.5753/webmedia.2025.16105
LogAL-Prefix: Parameter-Efficient Log Anomaly Detection Based on Active Learning and Prefix
He, S., Wu, Y., Lei, Y., Gan, W., & Kun, X. (2025) · IEEE International Symposium on Parallel and Distributed Processing with Applications (ISPA) · doi:10.1109/ispa67752.2025.00057
Leveraging Large Language Models for Anomaly Detection in Microservices Architectures
Pedroso, D. F., Almeida, L., Aisawa, W. A. A., Dutra, I., & Bruschi, S. M. (2025) · International Symposium on Computer Architecture and High Performance Computing Workshops (SBAC-PADW) · doi:10.1109/sbac-padw69789.2025.00021
Qian, B., Zhu, M., Bao, L., Yang, M., Xu, G., Liu, J., Zhou, K., & Zheng, X. (2025) · Service Oriented Computing and Applications · doi:10.1007/s11761-025-00484-5
Tibrewala, A. (2025) · IEEE International Conference on Cyber Security and Cloud Computing (CSCloud) · doi:10.1109/cscloud66326.2025.00029
Zhang, R., Zhang, R., Wang, S., Yang, K., Xu, M., Qiao, D., & Hu, X. (2025) · Electronics · doi:10.3390/electronics14234754
Ji, B., Ji, F., Li, X., & Ruan, J. (2025) · International Conference on Electronic Information Engineering and Computer Science (EIECS) · doi:10.1109/eiecs67708.2025.11283218
LogMerge: improved log parsing based on two-step clustering combined with low-level token processing
Le, H.-V., Nguyen, H., Huynh, N. K., & Phan, H. D. (2025) · International Journal of Information Technology · doi:10.1007/s41870-025-02911-4
Predictive diagnostics of computer systems logs using natural language processing techniques
Kiriachek Vladislav, A., & Salpagarov, S. I. (2025) · Вестник Российского университета дружбы народов. Серия: Математика, информатика, физика · doi:10.22363/2658-4670-2025-33-2-172-183
Gholamian, S. (2022) · UWSpace (University of Waterloo)
Secure Container-based High Performance Computing Architecture
Gantikow, H. (2024) · Repository of Futwangen University of Applied Sciences (Furtwangen University)
From Logs to Causal Analysis: A Guided User Interface for Causal Graph Discovery
Gao, T. (2024) · DSpace@MIT (Massachusetts Institute of Technology)
Jämförelse av anomaly detection tekniker på offline och onlinelog data
Arthur, C., & Thulin, C. (2025) · KTH Publication Database DiVA (KTH Royal Institute of Technology)
Machine Learning-Assisted Log Analysis for Uncovering Anomalies
Rurling, S. (2024) · DiVA at Umeå University (Umeå University)
Clasificación jerárquica semántica aplicada a la detección de anomalías mediante logs de sistemas
Corbelle Suárez, C. (2024) · RUC (Universidade Da Coruña)
Machine Learning for Anomaly Detection in Kernel Traces
Fournier, Q. (2022) · PolyPublie (École Polytechnique de Montréal)
Utilizing deep learning models to detect log anomalies during software development
Дивенко, А. С., & Divenko, A. S. (2024) · Electronic scientific archive of UrFU (Ural Federal University)
Structural Knowledge-Enhanced Approach for Network Device Log Understanding
曹, 祥. (2025) · Software Engineering and Applications · doi:10.12677/sea.2025.145090
Modelos de inteligência artificial para análise de eventos em logs
Castro, P., Santos, F., & Lopes, P. (2025) · Scientific Repository of Open Access of Portugal (RCAAP) · doi:10.29352/mill0220e.41569
CLlog: A collaborative learning-based anomalous log detection model
Lu, J., Yu, K., Liu, Z., & Liu, X. (2025) · Computer Networks · doi:10.1016/j.comnet.2025.111943
Analysis of Modern Methods for Monitoring Anomalies in Server-Based Software Systems in Real Time
Hnatiuk, D. A. (2025) · Èlektronnoe modelirovanie · doi:10.15407/emodel.47.06.011
An Empirical Study of a PCA-Based Multivariate Framework for Interpretable Log Anomaly Detection
Setinský, J., & Žádník, M. (2025) · International Conference on Network and Service Management (CNSM) · doi:10.23919/cnsm67658.2025.11297507
Detection of Information Leaks and Anomalies Based on NetFlow Analysis and BERT Model
Golokov, V. V., & Ложников, П. С. (2025) · Dynamics of Systems Mechanisms and Machines · doi:10.1109/dynamics68764.2025.11302185
Fast Unsupervised Anomaly Detection Methods on Software Logs - An Empirical StudyPreprint
Nyyssölä, J., Mäntylä, M., & Wang, Y. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.6035780
Universidad, U. T. E., Velasco, F. J. C., Beltrán, G. M. G., & Universidad, U. T. E. (2026) · NOVASINERGIA REVISTA DIGITAL DE CIENCIA INGENIERÍA Y TECNOLOGÍA · doi:10.37135/ns.01.17.01
Dida, J. D., & Akbar, I. A. (2025) · International Conference on Computer Engineering, Network, and Intelligent Multimedia (CENIM) · doi:10.1109/cenim67940.2025.11325812
Modified Metaheuristic Optimization: An Application in Cloud Log Anomaly Detection
Bačanin, N., Jovanović, L., Anetic, S., Radomirović, B., Zivkovic, M. Z., & Varsandán, C. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-13177-5_16
Mitigating Cybersecurity Risks in LAN Environments Using AI Techniques
Gambo, M., Riddle, K., Abiona, O. O., & Onime, C. (2026) · International Journal of Communications Network and System Sciences · doi:10.4236/ijcns.2026.191001
Intelligent it supports systems based on statistical log analysis and machine learning models
Oluwatobi, B. C., Cyril, O. N., Julius, O. K., & Makinde, O. A. (2026) · International Journal of Science and Research Archive · doi:10.30574/ijsra.2026.18.1.0116
Hybrid NLP-Driven Cybersecurity: Transformer-Based Threat Detection Enhanced with Explainable AI
Kavya, G., Nambiar, P. K. A., Anil, P., Akash, V., & Radhika, G. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-14038-8_9
Leveraging large language models for SQL behavior-based database intrusion detection
Shlezinger, M., Akirav, S., Zhou, L., Guo, L., Kessel, A., & Li, G. (2025) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom66490.2025.00035
Sun, M., Chang, Y., Wang, X., & Sun, Y. (2025) · International Conference on Advanced Cloud and Big Data · doi:10.1109/cbd69312.2025.00037
A Blockchain-Enabled Deep Learning Framework for Secure Omics Data Sharing and Attack Detection
Roosan, D., Ashakin, M. R., Khan, R., & Karim, M. (2025) · Journal of Cybersecurity Digital Forensics and Jurisprudence · doi:10.65879/3070-5789.2025.01.04
Improving Log-Based Anomaly Detection with Deep Learning Models
Ghazi, A., Nassih, B., & Amine, A. (2026) · Communications in computer and information science · doi:10.1007/978-3-032-16281-6_25
STLAD: Sparse-Attention and Temporal- Decomposition for Scalable Log Anomaly Detection
Xie, Y., Wang, Y., Feng, K., Chen, L., & Wang, J. (2026) · IEEE Access · doi:10.1109/access.2026.3662060
Metadata
- Authors
- Guo, H., Yuan, S., & Wu, X.
- Affiliations
- Utah State University (US)
- University of Arkansas at Fayetteville (US)
- ORCID
- Wu, Xintao
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2021
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 2103.04475
- OpenAlex
- W3134847483
- Cited by
- 7
- References
- 24
- Citations by year
- 2026: 1 · 2024: 2 · 2023: 2 · 2021: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Licence
- Locations
- arXiv (Cornell University) (submittedVersion, cc-by)
- Digital Commons - USU (Utah State University) (submittedVersion)
- arXiv (Cornell University) (cc-by)
- Digital Commons - USU (Utah State University)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Software System Performance and Reliability
- Physical Sciences › Computer Science › Artificial Intelligence › Anomaly Detection Techniques and Applications
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- log anomaly detection, system logs, BERT, self-supervised learning, intrusion detection, cybersecurity
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
