{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T02:07:14Z","timestamp":1779156434282,"version":"3.51.4"},"publisher-location":"Cham","reference-count":30,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032234490","type":"print"},{"value":"9783032234506","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-23450-6_24","type":"book-chapter","created":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T01:32:08Z","timestamp":1779154328000},"page":"470-487","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Log Anomaly Detection Based on\u00a0Time-Delta Sequential Feature"],"prefix":"10.1007","author":[{"given":"Jigang","family":"Wen","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chenying","family":"Ma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shiming","family":"He","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kun","family":"Xie","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yong","family":"Xie","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuxiang","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaoxiao","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,5,19]]},"reference":[{"key":"24_CR1","doi-asserted-by":"crossref","unstructured":"Bodik, P., Goldszmidt, M., Fox, A., Woodard, D.B., Andersen, H.: Fingerprinting the datacenter: automated classification of performance crises. In: Proceedings of the 5th European Conference on Computer Systems, pp. 111\u2013124 (2010)","DOI":"10.1145\/1755913.1755926"},{"key":"24_CR2","doi-asserted-by":"crossref","unstructured":"Chen, M., Zheng, A.X., Lloyd, J., Jordan, M.I., Brewer, E.: Failure diagnosis using decision trees. In: International Conference on Autonomic Computing 2004, Proceedings, pp. 36\u201343. IEEE (2004)","DOI":"10.1109\/ICAC.2004.1301345"},{"key":"24_CR3","unstructured":"Chen, Z., Liu, J., Gu, W., Su, Y., Lyu, M.R.: Experience report: deep learning-based system log analysis for anomaly detection. arXiv preprint: arXiv:2107.05908 (2021)"},{"key":"24_CR4","doi-asserted-by":"publisher","unstructured":"Du, M., Li, F., Zheng, G., Srikumar, V.: DeepLog: anomaly detection and diagnosis from system logs through deep learning. In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, CCS \u201917, pp. 1285\u20131298. Association for Computing Machinery, New York (2017). https:\/\/doi.org\/10.1145\/3133956.3134015","DOI":"10.1145\/3133956.3134015"},{"issue":"3","key":"24_CR5","doi-asserted-by":"publisher","first-page":"229","DOI":"10.1016\/j.icte.2020.06.003","volume":"6","author":"A Farzad","year":"2020","unstructured":"Farzad, A., Gulliver, T.A.: Unsupervised log message anomaly detection. ICT Express 6(3), 229\u2013237 (2020). https:\/\/doi.org\/10.1016\/j.icte.2020.06.003","journal-title":"ICT Express"},{"key":"24_CR6","doi-asserted-by":"crossref","unstructured":"Guo, H., Yuan, S., Wu, X.: LogBERT: log anomaly detection via BERT. In: 2021 International Joint Conference on Neural Networks (IJCNN), pp.\u00a01\u20138. IEEE (2021)","DOI":"10.1109\/IJCNN52387.2021.9534113"},{"key":"24_CR7","doi-asserted-by":"crossref","unstructured":"He, S., Zhu, J., He, P., Lyu, M.R.: Experience report: system log analysis for anomaly detection. In: 2016 IEEE 27th International Symposium on Software Reliability Engineering (ISSRE), pp. 207\u2013218. IEEE (2016)","DOI":"10.1109\/ISSRE.2016.21"},{"key":"24_CR8","doi-asserted-by":"crossref","unstructured":"He, S., Deng, T., Chen, B., Wang, J., et\u00a0al.: Unsupervised log anomaly detection method based on multi-feature. Comput., Mater. Continua 76(1) (2023)","DOI":"10.32604\/cmc.2023.037392"},{"key":"24_CR9","doi-asserted-by":"publisher","unstructured":"He, S., Lei, Y., Zhang, Y., Xie, K., Sharma, P.K.: Parameter-efficient log anomaly detection based on pre-training model and lora. In: 2023 IEEE 34th International Symposium on Software Reliability Engineering (ISSRE), pp. 207\u2013217 (2023). https:\/\/doi.org\/10.1109\/ISSRE59848.2023.00038","DOI":"10.1109\/ISSRE59848.2023.00038"},{"issue":"4","key":"24_CR10","doi-asserted-by":"publisher","first-page":"2064","DOI":"10.1109\/TNSM.2020.3034647","volume":"17","author":"S Huang","year":"2020","unstructured":"Huang, S., et al.: HitAnomaly: hierarchical transformers for anomaly detection in system log. IEEE Trans. Netw. Serv. Manag. 17(4), 2064\u20132076 (2020)","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"24_CR11","unstructured":"Huang, Z., Xu, W., Yu, K.: Bidirectional LSTM-CRF models for sequence tagging. arXiv preprint: arXiv:1508.01991 (2015)"},{"key":"24_CR12","doi-asserted-by":"crossref","unstructured":"Le, V.H., Zhang, H.: Log-based anomaly detection without log parsing. In: 2021 36th IEEE\/ACM International Conference on Automated Software Engineering (ASE), pp. 492\u2013504. IEEE (2021)","DOI":"10.1109\/ASE51524.2021.9678773"},{"key":"24_CR13","doi-asserted-by":"crossref","unstructured":"Liang, Y., Zhang, Y., Xiong, H., Sahoo, R.: Failure prediction in IBM BlueGene\/L event logs. In: Seventh IEEE International Conference on Data Mining (ICDM 2007), pp. 583\u2013588. IEEE (2007)","DOI":"10.1109\/ICDM.2007.46"},{"key":"24_CR14","doi-asserted-by":"crossref","unstructured":"Lin, Q., Zhang, H., Lou, J.G., Zhang, Y., Chen, X.: Log clustering based problem identification for online service systems. In: Proceedings of the 38th International Conference on Software Engineering Companion, pp. 102\u2013111 (2016)","DOI":"10.1145\/2889160.2889232"},{"key":"24_CR15","unstructured":"Lou, J.G., Fu, Q., Yang, S., Xu, Y., Li, J.: Mining invariants from console logs for system problem detection. In: 2010 USENIX Annual Technical Conference (USENIX ATC 10) (2010)"},{"key":"24_CR16","doi-asserted-by":"crossref","unstructured":"Lu, S., Wei, X., Li, Y., Wang, L.: Detecting anomaly in big data system logs using convolutional neural network. In: 2018 IEEE 16th Intl Conf on Dependable, Autonomic and Secure Computing, 16th Intl Conf on Pervasive Intelligence and Computing, 4th Intl Conf on Big Data Intelligence and Computing and Cyber Science and Technology Congress (DASC\/PiCom\/DataCom\/CyberSciTech), pp. 151\u2013158. IEEE (2018)","DOI":"10.1109\/DASC\/PiCom\/DataCom\/CyberSciTec.2018.00037"},{"key":"24_CR17","doi-asserted-by":"crossref","unstructured":"Meng, W., et al.: LogAnomaly: unsupervised detection of sequential and quantitative anomalies in unstructured logs. In: Proceedings of the 28th International Joint Conference on Artificial Intelligence, IJCAI\u201919, pp. 4739\u20134745. AAAI Press (2019)","DOI":"10.24963\/ijcai.2019\/658"},{"key":"24_CR18","doi-asserted-by":"publisher","unstructured":"Nedelkoski, S., Bogatinovski, J., Acker, A., Cardoso, J., Kao, O.: Self-attentive classification-based anomaly detection in unstructured logs. In: 2020 IEEE International Conference on Data Mining (ICDM), pp. 1196\u20131201 (2020). https:\/\/doi.org\/10.1109\/ICDM50108.2020.00148","DOI":"10.1109\/ICDM50108.2020.00148"},{"key":"24_CR19","doi-asserted-by":"publisher","unstructured":"Nguyen, K.A., Schulte\u00a0im Walde, S., Vu, N.T.: Integrating distributional lexical contrast into word embeddings for antonym-synonym distinction. In: Erk, K., Smith, N.A. (eds.) Proceedings of the 54th Annual Meeting of the Association for Computational Linguistics (Volume 2: Short Papers), pp. 454\u2013459. Association for Computational Linguistics, Berlin (2016). https:\/\/doi.org\/10.18653\/v1\/P16-2074","DOI":"10.18653\/v1\/P16-2074"},{"key":"24_CR20","doi-asserted-by":"publisher","unstructured":"Oliner, A., Stearley, J.: What supercomputers say: a study of five system logs. In: 37th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN\u201907), pp. 575\u2013584 (2007). https:\/\/doi.org\/10.1109\/DSN.2007.103","DOI":"10.1109\/DSN.2007.103"},{"issue":"5","key":"24_CR21","doi-asserted-by":"publisher","first-page":"513","DOI":"10.1016\/0306-4573(88)90021-0","volume":"24","author":"G Salton","year":"1988","unstructured":"Salton, G., Buckley, C.: Term-weighting approaches in automatic text retrieval. Inf. Process. Manage. 24(5), 513\u2013523 (1988)","journal-title":"Inf. Process. Manage."},{"issue":"3","key":"24_CR22","doi-asserted-by":"publisher","first-page":"1207","DOI":"10.32604\/csse.2022.022365","volume":"41","author":"J Wang","year":"2022","unstructured":"Wang, J., Zhao, C., He, S., Gu, Y., Alfarraj, O., Abugabah, A.: LogUAD: log unsupervised anomaly detection based on Word2Vec. Comput. Syst. Sci. Eng. 41(3), 1207 (2022)","journal-title":"Comput. Syst. Sci. Eng."},{"key":"24_CR23","doi-asserted-by":"crossref","unstructured":"Wei, M., et al.: TCMS: a multi-sequence log parsing method based on token conversion. IEEE Trans. Dependable Secure Comput. (2024)","DOI":"10.1109\/TDSC.2024.3520628"},{"key":"24_CR24","doi-asserted-by":"publisher","unstructured":"Wen, J., et al.: Efficient log parsing method based on log locality features. Tsinghua Sci. Technol. (2024). https:\/\/doi.org\/10.26599\/TST.2024.9010192","DOI":"10.26599\/TST.2024.9010192"},{"key":"24_CR25","doi-asserted-by":"publisher","unstructured":"Xu, W., Huang, L., Fox, A., Patterson, D., Jordan, M.I.: Detecting large-scale system problems by mining console logs. In: Proceedings of the ACM SIGOPS 22nd Symposium on Operating Systems Principles, SOSP \u201909, pp. 117\u2013132. Association for Computing Machinery, New York (2009). https:\/\/doi.org\/10.1145\/1629575.1629587","DOI":"10.1145\/1629575.1629587"},{"key":"24_CR26","doi-asserted-by":"crossref","unstructured":"Yang, L., et al.: Semi-supervised log-based anomaly detection via probabilistic label estimation. In: 2021 IEEE\/ACM 43rd International Conference on Software Engineering (ICSE), pp. 1448\u20131460. IEEE (2021)","DOI":"10.1109\/ICSE43902.2021.00130"},{"key":"24_CR27","doi-asserted-by":"publisher","first-page":"181152","DOI":"10.1109\/ACCESS.2019.2953981","volume":"7","author":"R Yang","year":"2019","unstructured":"Yang, R., Qu, D., Gao, Y., Qian, Y., Tang, Y.: nLSALog: an anomaly detection framework for log sequence in security management. IEEE Access 7, 181152\u2013181164 (2019)","journal-title":"IEEE Access"},{"key":"24_CR28","doi-asserted-by":"crossref","unstructured":"Yuan, Y., Adhatarao, S.S., Lin, M., Yuan, Y., Liu, Z., Fu, X.: ADA: adaptive deep log anomaly detector. In: IEEE Infocom 2020-IEEE Conference on Computer Communications, pp. 2449\u20132458. IEEE (2020)","DOI":"10.1109\/INFOCOM41043.2020.9155487"},{"key":"24_CR29","doi-asserted-by":"crossref","unstructured":"Zhang, X., et al.: Robust log-based anomaly detection on unstable log data. In: 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC\/FSE 2019), pp. 807\u2013817 (2019)","DOI":"10.1145\/3338906.3338931"},{"key":"24_CR30","doi-asserted-by":"crossref","unstructured":"Zhu, B., Li, J., Gu, R., Wang, L.: An approach to cloud platform log anomaly detection based on natural language processing and LSTM. In: Proceedings of the 2020 3rd International Conference on Algorithms, Computing and Artificial Intelligence, pp.\u00a01\u20137 (2020)","DOI":"10.1145\/3446132.3446415"}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","Security and Privacy in Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-23450-6_24","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T01:32:22Z","timestamp":1779154342000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-23450-6_24"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032234490","9783032234506"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-23450-6_24","relation":{},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"value":"1867-8211","type":"print"},{"value":"1867-822X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"19 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SecureComm","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Security and Privacy in Communication Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Xiangtan","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 July 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6 July 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"securecomm2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/securecomm.eai-conferences.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}