{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T07:23:43Z","timestamp":1763191423190,"version":"3.45.0"},"reference-count":41,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,6,30]]},"DOI":"10.1109\/ijcnn64981.2025.11228446","type":"proceedings-article","created":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T18:46:15Z","timestamp":1763145975000},"page":"1-8","source":"Crossref","is-referenced-by-count":0,"title":["TRAIL: A Transformer-Enhanced Feature Embedding Approach for Unsupervised Anomaly Detection"],"prefix":"10.1109","author":[{"given":"Jingjing","family":"Feng","sequence":"first","affiliation":[{"name":"Chinese Academy of Sciences,State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering,Beijing,China"}]},{"given":"Wenzhuo","family":"Cui","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering,Beijing,China"}]},{"given":"Shuyi","family":"Zhang","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering,Beijing,China"}]},{"given":"Xulong","family":"Wei","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering,Beijing,China"}]},{"given":"Yingying","family":"Du","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering,Beijing,China"}]},{"given":"Yu","family":"Wen","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering,Beijing,China"}]}],"member":"263","reference":[{"key":"ref1","first-page":"3005","article-title":"ATLAS: A sequence-based learning approach for attack investigation","volume-title":"30th USENIX Security Symposium (USENIX Sec\u201921)","author":"Alsaheel"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134015"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"ref4","first-page":"373","article-title":"AIRTAG: Towards automated attack investigation by unsupervised learning with log texts","volume-title":"32nd USENIX Security Symp (USENIX Sec\u201923)","author":"Ding"},{"article-title":"BERT: Pre-training of deep bidirectional transformers for language understanding","year":"2018","author":"Devlin","key":"ref5"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00026"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363217"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00005"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00139"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939754"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2008.17"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2623330.2623732"},{"key":"ref14","first-page":"43934402","article-title":"Deep one-class classification","volume-title":"International conference on machine learning(ICML)","author":"Ruff"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363224"},{"key":"ref16","first-page":"5197","article-title":"MAGIC: Detecting Advanced Persistent Threats via Masked Graph Representation Learning","volume-title":"33rd USENIX Security Symp (USENIX Sec\u201924)","author":"Jia"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23349"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00096"},{"key":"ref19","first-page":"2345","article-title":"SIGL: Securing software installations through deep graph learning","volume-title":"30th USENIX Security Symposium (USENIX Sec\u201921)","author":"Han"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833669"},{"key":"ref21","first-page":"6575","article-title":"DISTDET: A cost-effective distributed cyber threat detection system","volume-title":"32nd USENIX Security Symposium (USENIX Sec\u201923)","author":"Dong"},{"key":"ref22","first-page":"4355","article-title":"PROGRAPHER: An anomaly detection system based on provenance graph embedding","volume-title":"32nd USENIX Security Symposium (USENIX Sec\u201923)","author":"Yang"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00253"},{"article-title":"End-to-end anomaly detection for identifying malicious cyber behavior through NLP-based log embeddings","year":"2021","author":"Golczynski","key":"ref24"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991122"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939783"},{"article-title":"Graph2seq: Graph to sequence learning with attention-based neural networks","year":"2018","author":"Xu","key":"ref27"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539321"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/eCrime66200.2024.00009"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3118815"},{"key":"ref31","first-page":"905","article-title":"ATTACK2VEC: Leveraging temporal word embeddings to understand the evolution of cyberattacks","volume-title":"28th USENIX Security Symp (USENIX Sec\u201919)","author":"Shen"},{"article-title":"Learning Long Range Dependencies on Graphs via Random Walks","year":"2024","author":"Chen","key":"ref32"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-97-5572-1_17"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2025.111744"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/WTS.2018.8363930"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ijcnn.2018.8489068"},{"key":"ref37","doi-asserted-by":"crossref","DOI":"10.2139\/ssrn.4968529","article-title":"Log2graphs: An Unsupervised Framework for Log Anomaly Detection with Efficient Feature Extraction","author":"Wang","year":"2024"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3416013.3426457"},{"key":"ref39","first-page":"16211","article-title":"Random walk graph neural networks","volume":"33","author":"Nikolentzos","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"article-title":"LogELECTRA: Self-supervised Anomaly Detection for Unstructured Logs","year":"2024","author":"Yamanaka","key":"ref40"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/488"}],"event":{"name":"2025 International Joint Conference on Neural Networks (IJCNN)","start":{"date-parts":[[2025,6,30]]},"location":"Rome, Italy","end":{"date-parts":[[2025,7,5]]}},"container-title":["2025 International Joint Conference on Neural Networks (IJCNN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11227166\/11227148\/11228446.pdf?arnumber=11228446","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T07:21:28Z","timestamp":1763191288000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11228446\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,30]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/ijcnn64981.2025.11228446","relation":{},"subject":[],"published":{"date-parts":[[2025,6,30]]}}}