{"id":"https://openalex.org/W2901588159","doi":"https://doi.org/10.1109/edcc.2018.00033","title":"Contextual anomaly detection for a critical industrial system based on logs and metrics","display_name":"Contextual anomaly detection for a critical industrial system based on logs and metrics","publication_year":2018,"publication_date":"2018-09-01","ids":{"openalex":"https://openalex.org/W2901588159","doi":"https://doi.org/10.1109/edcc.2018.00033","mag":"2901588159"},"language":"en","primary_location":{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/edcc.2018.00033","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},"type":"article","type_crossref":"proceedings-article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071843790","display_name":"Mostafa Farshchi","orcid":null},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mostafa Farshchi","raw_affiliation_strings":["Data61, CSIRO, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"Data61, CSIRO, Sydney, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071642549","display_name":"Ingo Weber","orcid":"https://orcid.org/0000-0002-4833-5921"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ingo Weber","raw_affiliation_strings":["Data61, CSIRO, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"Data61, CSIRO, Sydney, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024043230","display_name":"Raffaele Della Corte","orcid":null},"institutions":[],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Raffaele Della Corte","raw_affiliation_strings":["Federico II University of Naples, Italy"],"affiliations":[{"raw_affiliation_string":"Federico II University of Naples, Italy","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028725987","display_name":"Antonio Pecchia","orcid":"https://orcid.org/0000-0003-2869-8423"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Antonio Pecchia","raw_affiliation_strings":["Federico II Univ. of Naples, Naples, Italy"],"affiliations":[{"raw_affiliation_string":"Federico II Univ. of Naples, Naples, Italy","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064715170","display_name":"Marcello Cinque","orcid":"https://orcid.org/0000-0003-1455-8614"},"institutions":[],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Marcello Cinque","raw_affiliation_strings":["Federico II University of Naples, Italy"],"affiliations":[{"raw_affiliation_string":"Federico II University of Naples, Italy","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076543742","display_name":"Jean-Guy Schneider","orcid":"https://orcid.org/0000-0002-9827-5496"},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jean-Guy Schneider","raw_affiliation_strings":["Data61, CSIRO, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"Data61, CSIRO, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082913979","display_name":"John Grundy","orcid":"https://orcid.org/0000-0003-4928-7076"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"John Grundy","raw_affiliation_strings":["Monash University, Melbourne, Australia"],"affiliations":[{"raw_affiliation_string":"Monash University, Melbourne, Australia","institution_ids":["https://openalex.org/I56590836"]}]}],"institution_assertions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.667,"has_fulltext":true,"fulltext_origin":"ngrams","cited_by_count":15,"citation_normalized_percentile":{"value":0.999858,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":89},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9997,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9997,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9997,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9973,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5456335}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8431026},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.77647555},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6154691},{"id":"https://openalex.org/C169468491","wikidata":"https://www.wikidata.org/wiki/Q146923","display_name":"Middleware (distributed applications)","level":2,"score":0.55482453},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5456335},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4779075},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.4590207},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.43270564},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.42599368},{"id":"https://openalex.org/C20556612","wikidata":"https://www.wikidata.org/wiki/Q4469374","display_name":"Volume (thermodynamics)","level":2,"score":0.41053656},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.36944327},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2295875},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09249285},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/edcc.2018.00033","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/8","display_name":"Decent work and economic growth","score":0.49}],"grants":[],"datasets":[],"versions":[],"referenced_works_count":9,"referenced_works":["https://openalex.org/W1184354083","https://openalex.org/W1985471550","https://openalex.org/W2003797551","https://openalex.org/W2122646361","https://openalex.org/W2137576376","https://openalex.org/W2145071552","https://openalex.org/W2440416811","https://openalex.org/W2562383263","https://openalex.org/W2598269246"],"related_works":["https://openalex.org/W4377864969","https://openalex.org/W4300558037","https://openalex.org/W4290647774","https://openalex.org/W3210364259","https://openalex.org/W3207797160","https://openalex.org/W3189286258","https://openalex.org/W3030345572","https://openalex.org/W2912112202","https://openalex.org/W2806741695","https://openalex.org/W2667207928"],"abstract_inverted_index":{"Recent":[0],"advances":[1],"in":[2,53],"contextual":[3,49,111],"anomaly":[4,50,112],"detection":[5,51,102],"attempt":[6],"to":[7,14,70],"combine":[8],"resource":[9],"metrics":[10],"and":[11,37,81,93,104],"event":[12],"logs":[13],"uncover":[15],"unexpected":[16],"system":[17],"behaviors":[18],"at":[19],"run-time.":[20],"This":[21],"is":[22,31],"highly":[23],"relevant":[24],"for":[25,56],"critical":[26],"software":[27],"systems,":[28],"where":[29],"monitoring":[30,83],"often":[32],"mandated":[33],"by":[34,87],"international":[35],"standards":[36],"guidelines.":[38],"In":[39],"this":[40],"paper,":[41],"we":[42,91],"analyze":[43],"the":[44,64,105],"effectiveness":[45],"of":[46,66,79,107],"a":[47,54,71,76,100],"metrics-logs":[48],"technique":[52],"middleware":[55],"Air":[57],"Traffic":[58],"Control":[59],"systems.":[60],"Our":[61],"study":[62,74],"addresses":[63],"challenges":[65],"applying":[67],"such":[68],"techniques":[69],"new":[72],"case":[73],"with":[75],"dense":[77],"volume":[78],"logs,":[80],"finer":[82],"sampling":[84],"rate.":[85],"Guided":[86],"our":[88],"experimental":[89],"results,":[90],"propose":[92],"evaluate":[94],"several":[95],"actionable":[96],"improvements,":[97],"which":[98],"include":[99],"change":[101],"algorithm":[103],"use":[106],"time":[108],"windows":[109],"on":[110],"detection.":[113]},"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W2901588159","counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":1}],"updated_date":"2024-12-12T17:11:48.936532","created_date":"2018-11-29"}