{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T02:07:15Z","timestamp":1779156435066,"version":"3.51.4"},"publisher-location":"Cham","reference-count":21,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032234490","type":"print"},{"value":"9783032234506","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-23450-6_25","type":"book-chapter","created":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T01:33:27Z","timestamp":1779154407000},"page":"488-509","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Log Semantic Parsing Based on\u00a0Sequence Annotation in\u00a0Security Operations"],"prefix":"10.1007","author":[{"given":"Shiming","family":"He","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Siru","family":"Long","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gan","family":"Wu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Diqing","family":"Liang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kun","family":"Xie","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,5,19]]},"reference":[{"key":"25_CR1","doi-asserted-by":"publisher","unstructured":"Jiang, Z.M., Hassan, A.E., Flora, P., Hamann, G.: Abstracting execution logs to execution events for enterprise applications (short paper). In: 2008 The Eighth International Conference on Quality Software, pp. 181\u2013186 (2008). https:\/\/doi.org\/10.1109\/QSIC.2008.50","DOI":"10.1109\/QSIC.2008.50"},{"key":"25_CR2","doi-asserted-by":"publisher","unstructured":"Makanju, A.A., Zincir-Heywood, A.N., Milios, E.E.: Clustering event logs using iterative partitioning. In: Proceedings of the 15th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, KDD 2009, pp. 1255\u20131264. Association for Computing Machinery, New York (2009). https:\/\/doi.org\/10.1145\/1557019.1557154","DOI":"10.1145\/1557019.1557154"},{"key":"25_CR3","doi-asserted-by":"publisher","unstructured":"Du, M., Li, F.: Spell: Streaming parsing of system event logs. In: 2016 IEEE 16th International Conference on Data Mining (ICDM), pp. 859\u2013864 (2016). https:\/\/doi.org\/10.1109\/ICDM.2016.0103","DOI":"10.1109\/ICDM.2016.0103"},{"key":"25_CR4","doi-asserted-by":"crossref","unstructured":"He, P., Zhu, J., Zheng, Z., Lyu, M.R.: Drain: an online log parsing approach with fixed depth tree. In: IEEE International Conference on Web Services, pp. 33\u201340 (2017)","DOI":"10.1109\/ICWS.2017.13"},{"key":"25_CR5","doi-asserted-by":"crossref","unstructured":"Messaoudi, S., Panichella, A., Bianculli, D., Briand, L., Sasnauskas, R.: A search-based approach for accurate identification of log message formats. In: 2018 IEEE\/ACM 26th International Conference on Program Comprehension (ICPC), pp. 167\u201316710 (2018)","DOI":"10.1145\/3196321.3196340"},{"issue":"5","key":"25_CR6","doi-asserted-by":"publisher","first-page":"3224","DOI":"10.1109\/TSC.2023.3270566","volume":"16","author":"S Yu","year":"2023","unstructured":"Yu, S., He, P., Chen, N., Wu, Y.: Brain: log parsing with bidirectional parallel tree. IEEE Trans. Serv. Comput. 16(5), 3224\u20133237 (2023). https:\/\/doi.org\/10.1109\/TSC.2023.3270566","journal-title":"IEEE Trans. Serv. Comput."},{"key":"25_CR7","doi-asserted-by":"publisher","unstructured":"Wei, M., et al.: TCMS: a multi-sequence log parsing method based on token conversion. IEEE Trans. Dependable Secure Comput. 1\u201318 (2024). https:\/\/doi.org\/10.1109\/TDSC.2024.3520628","DOI":"10.1109\/TDSC.2024.3520628"},{"key":"25_CR8","doi-asserted-by":"publisher","unstructured":"Vaarandi, R.: A data clustering algorithm for mining patterns from event logs. In: Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764), pp. 119\u2013126 (2003). https:\/\/doi.org\/10.1109\/IPOM.2003.1251233","DOI":"10.1109\/IPOM.2003.1251233"},{"key":"25_CR9","doi-asserted-by":"publisher","unstructured":"Nagappan, M., Vouk, M.A.: Abstracting log lines to log event types for mining software system logs. In: 2010 7th IEEE Working Conference on Mining Software Repositories (MSR 2010), pp. 114\u2013117 (2010). https:\/\/doi.org\/10.1109\/MSR.2010.5463281","DOI":"10.1109\/MSR.2010.5463281"},{"key":"25_CR10","doi-asserted-by":"publisher","unstructured":"Vaarandi, R., Pihelgas, M.: LogCluster - a data clustering and pattern mining algorithm for event logs. In: 2015 11th International Conference on Network and Service Management (CNSM), pp.\u00a01\u20137 (2015). https:\/\/doi.org\/10.1109\/CNSM.2015.7367331","DOI":"10.1109\/CNSM.2015.7367331"},{"issue":"3","key":"25_CR11","doi-asserted-by":"publisher","first-page":"879","DOI":"10.1109\/TSE.2020.3007554","volume":"48","author":"H Dai","year":"2022","unstructured":"Dai, H., Li, H., Chen, C.S., Shang, W., Chen, T.H.: Logram: efficient log parsing using $$n$$n-gram dictionaries. IEEE Trans. Software Eng. 48(3), 879\u2013892 (2022). https:\/\/doi.org\/10.1109\/TSE.2020.3007554","journal-title":"IEEE Trans. Software Eng."},{"key":"25_CR12","doi-asserted-by":"publisher","unstructured":"Hamooni, H., Debnath, B., Xu, J., Zhang, H., Jiang, G., Mueen, A.: LogMine: fast pattern recognition for log analytics. In: Proceedings of the 25th ACM International on Conference on Information and Knowledge Management, CIKM 2016, pp. 1573\u20131582. Association for Computing Machinery, New York (2016). https:\/\/doi.org\/10.1145\/2983323.2983358","DOI":"10.1145\/2983323.2983358"},{"key":"25_CR13","unstructured":"Shima, K.: Length matters: clustering system log messages using length of words. ArXiv abs\/1611.03213 (2016). https:\/\/api.semanticscholar.org\/CorpusID:16326353"},{"issue":"3","key":"25_CR14","doi-asserted-by":"publisher","first-page":"2711","DOI":"10.1109\/TNSM.2023.3248124","volume":"20","author":"T Xiao","year":"2023","unstructured":"Xiao, T., et al.: LPV: a log parsing framework based on vectorization. IEEE Trans. Netw. Serv. Manage. 20(3), 2711\u20132725 (2023). https:\/\/doi.org\/10.1109\/TNSM.2023.3248124","journal-title":"IEEE Trans. Netw. Serv. Manage."},{"key":"25_CR15","doi-asserted-by":"publisher","unstructured":"Liu, Y., et al.: UniParser: a unified log parser for heterogeneous log data. In: Proceedings of the ACM Web Conference 2022, WWW 2022, pp. 1893\u20131901. Association for Computing Machinery, New York (2022). https:\/\/doi.org\/10.1145\/3485447.3511993","DOI":"10.1145\/3485447.3511993"},{"key":"25_CR16","doi-asserted-by":"publisher","unstructured":"Le, V.H., Zhang, H.: Log parsing with prompt-based few-shot learning. In: 2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE), pp. 2438\u20132449 (2023). https:\/\/doi.org\/10.1109\/ICSE48619.2023.00204","DOI":"10.1109\/ICSE48619.2023.00204"},{"key":"25_CR17","doi-asserted-by":"publisher","unstructured":"Yu, S., Chen, N., Wu, Y., Dou, W.: Self-supervised log parsing using semantic contribution difference. J. Syst. Softw. 200, 111646 (2023). https:\/\/doi.org\/10.1016\/j.jss.2023.111646, https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0164121223000419","DOI":"10.1016\/j.jss.2023.111646"},{"key":"25_CR18","doi-asserted-by":"publisher","unstructured":"Xu, J., Yang, R., Huo, Y., Zhang, C., He, P.: DivLog: log parsing with prompt enhanced in-context learning. In: Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering, ICSE 2024, Association for Computing Machinery, New York (2024). https:\/\/doi.org\/10.1145\/3597503.3639155","DOI":"10.1145\/3597503.3639155"},{"key":"25_CR19","doi-asserted-by":"publisher","unstructured":"Huo, Y., Su, Y., Lee, C., Lyu, M.R.: SemParser: a semantic parser for log analytics. In: 2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE), pp. 881\u2013893 (2023). https:\/\/doi.org\/10.1109\/ICSE48619.2023.00082","DOI":"10.1109\/ICSE48619.2023.00082"},{"key":"25_CR20","doi-asserted-by":"publisher","unstructured":"Li, Z., et al.: Did we miss something important? Studying and exploring variable-aware log abstraction. In: Proceedings of the 45th International Conference on Software Engineering, ICSE 2023, pp. 830\u2013842. IEEE Press (2023). https:\/\/doi.org\/10.1109\/ICSE48619.2023.00078","DOI":"10.1109\/ICSE48619.2023.00078"},{"issue":"2","key":"25_CR21","doi-asserted-by":"publisher","first-page":"1883","DOI":"10.4249\/scholarpedia.1883","volume":"4","author":"LE Peterson","year":"2009","unstructured":"Peterson, L.E.: K-nearest neighbor. Scholarpedia 4(2), 1883 (2009)","journal-title":"Scholarpedia"}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","Security and Privacy in Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-23450-6_25","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T01:33:28Z","timestamp":1779154408000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-23450-6_25"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032234490","9783032234506"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-23450-6_25","relation":{},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"value":"1867-8211","type":"print"},{"value":"1867-822X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"19 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SecureComm","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Security and Privacy in Communication Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Xiangtan","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 July 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6 July 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"securecomm2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/securecomm.eai-conferences.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}