{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,6]],"date-time":"2026-01-06T13:31:47Z","timestamp":1767706307548,"version":"3.28.0"},"reference-count":25,"publisher":"IEEE","license":[{"start":{"date-parts":[[2024,5,6]],"date-time":"2024-05-06T00:00:00Z","timestamp":1714953600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,5,6]],"date-time":"2024-05-06T00:00:00Z","timestamp":1714953600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024,5,6]]},"DOI":"10.1109\/noms59830.2024.10575561","type":"proceedings-article","created":{"date-parts":[[2024,7,2]],"date-time":"2024-07-02T17:23:51Z","timestamp":1719941031000},"page":"1-9","source":"Crossref","is-referenced-by-count":5,"title":["Anomaly Detection in Security Logs using Sequence Modeling"],"prefix":"10.1109","author":[{"given":"Simon","family":"G\u00f6kstorp","sequence":"first","affiliation":[{"name":"KTH Royal Institute of Technology,Division of Network and Systems Engineering,Stockholm,Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jakob","family":"Nyberg","sequence":"additional","affiliation":[{"name":"KTH Royal Institute of Technology,Division of Network and Systems Engineering,Stockholm,Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yeongwoo","family":"Kim","sequence":"additional","affiliation":[{"name":"KTH Royal Institute of Technology,Division of Network and Systems Engineering,Stockholm,Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pontus","family":"Johnson","sequence":"additional","affiliation":[{"name":"KTH Royal Institute of Technology,Division of Network and Systems Engineering,Stockholm,Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gy\u00f6rgy","family":"D\u00e1n","sequence":"additional","affiliation":[{"name":"KTH Royal Institute of Technology,Division of Network and Systems Engineering,Stockholm,Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.09.004"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-019-0038-7"},{"volume-title":"Microsoft lost its keys, and the government got hacked","year":"2023","author":"Whittaker","key":"ref3"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102675"},{"article-title":"Recurrent neural network language models for open vocabulary event-level cyber anomaly detection","volume-title":"AAAI Workshops","author":"Tuor","key":"ref5"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3217871.3217872"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9534113"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2023.110689"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/sp46215.2023.10179321"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2808783.2808784"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2019.8683212"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecurity49315.2020.9138871"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/access.2018.2867564"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/access.2019.2895334"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/9486949"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2022.110030"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.simpat.2022.102614"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1142\/9781786340757_0002"},{"article-title":"Language models are few-shot learners","volume-title":"Proceedings of the 34th International Conference on Neural Information Processing Systems","author":"Brown","key":"ref20"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICMCIS52405.2021.9486307"},{"article-title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","year":"2019","author":"Devlin","key":"ref22"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"article-title":"Adam: A method for stochastic optimization","year":"2017","author":"Kingma","key":"ref24"},{"key":"ref25","article-title":"PyTorch: An imperative style, high-performance deep learning library","volume":"32","author":"Paszke","year":"2019","journal-title":"Adv. Neur. In"}],"event":{"name":"NOMS 2024-2024 IEEE Network Operations and Management Symposium","start":{"date-parts":[[2024,5,6]]},"location":"Seoul, Korea, Republic of","end":{"date-parts":[[2024,5,10]]}},"container-title":["NOMS 2024-2024 IEEE Network Operations and Management Symposium"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10574855\/10574897\/10575561.pdf?arnumber=10575561","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,4]],"date-time":"2024-07-04T04:18:19Z","timestamp":1720066699000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10575561\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,6]]},"references-count":25,"URL":"https:\/\/doi.org\/10.1109\/noms59830.2024.10575561","relation":{},"subject":[],"published":{"date-parts":[[2024,5,6]]}}}