{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T14:45:34Z","timestamp":1783953934776,"version":"3.55.0"},"reference-count":50,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2020YFB10056"],"award-info":[{"award-number":["2020YFB10056"]}]},{"name":"National Key Research and Development Program of China","award":["2019QY(Y)0602"],"award-info":[{"award-number":["2019QY(Y)0602"]}]},{"name":"National Key Research and Development Program of China","award":["2017YFB1400700"],"award-info":[{"award-number":["2017YFB1400700"]}]},{"name":"National Key Research and Development Program of China","award":["2017YFB0802500"],"award-info":[{"award-number":["2017YFB0802500"]}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62002009"],"award-info":[{"award-number":["62002009"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61932011"],"award-info":[{"award-number":["61932011"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972019"],"award-info":[{"award-number":["61972019"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61772538"],"award-info":[{"award-number":["61772538"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61532021"],"award-info":[{"award-number":["61532021"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["91646203"],"award-info":[{"award-number":["91646203"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61672083"],"award-info":[{"award-number":["61672083"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Jiangsu Key Laboratory of Big Data Security and Intelligent Processing, NJUPT"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/tifs.2021.3053371","type":"journal-article","created":{"date-parts":[[2021,1,21]],"date-time":"2021-01-21T20:41:36Z","timestamp":1611261696000},"page":"2300-2311","source":"Crossref","is-referenced-by-count":81,"title":["Log-Based Anomaly Detection With Robust Feature Extraction and Online Learning"],"prefix":"10.1109","volume":"16","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1976-7856","authenticated-orcid":false,"given":"Shangbin","family":"Han","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6407-4194","authenticated-orcid":false,"given":"Qianhong","family":"Wu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4429-9959","authenticated-orcid":false,"given":"Han","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9548-8306","authenticated-orcid":false,"given":"Bo","family":"Qin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0230-1432","authenticated-orcid":false,"given":"Jiankun","family":"Hu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6487-9526","authenticated-orcid":false,"given":"Xingang","family":"Shi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0824-6203","authenticated-orcid":false,"given":"Linfeng","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xia","family":"Yin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2007.103"},{"key":"ref38","article-title":"Self-attentive classification-based anomaly detection in unstructured logs","author":"nedelkoski","year":"2020","journal-title":"arXiv 2008 09340"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3196321.3196340"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/658"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN49398.2020.9209681"},{"key":"ref30","article-title":"A unified view of regularized dual averaging and mirror descent with implicit updates","author":"brendan mcmahan","year":"2010","journal-title":"arXiv 1009 3240"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939712"},{"key":"ref36","first-page":"26","article-title":"Structured comparative analysis of systems logs to diagnose performance problems","author":"nagaraj","year":"2012","journal-title":"Proc 9th USENIX Conf Netw Syst Design Implement"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/S0022-2496(02)00028-7"},{"key":"ref34","first-page":"33","article-title":"Finding crash-consistency bugs with bounded black-box crash testing","author":"mohan","year":"2018","journal-title":"Proc 13th USENIX Symp Oper Syst Design Implement"},{"key":"ref28","first-page":"1","article-title":"Mining invariants from console logs for system problem detection","author":"lou","year":"2010","journal-title":"Proc USENIX Annu Tech Conf"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2843336"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236071"},{"key":"ref2","year":"2021","journal-title":"CloudLab"},{"key":"ref1","year":"2016","journal-title":"Cisco Global Cloud Index Forecast and Methodology"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1561\/2400000013"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236083"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS.2017.13"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2018.8486257"},{"key":"ref23","article-title":"Loghub: A large collection of system log datasets towards automated log analytics","author":"he","year":"2020","journal-title":"arXiv 2008 06448"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2889160.2889232"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098022"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP.2019.00021"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SMC.2018.00519"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1137\/100817000"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.29322\/IJSRP.9.02.2019.p8631"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2016.0103"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134015"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.ssci.2020.104604"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2015.7381796"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23265"},{"key":"ref17","first-page":"197","article-title":"Log-based intrusion detection for cloud Web applications using machine learning","author":"fontaine","year":"2019","journal-title":"Proc Int Conf Parallel Grid Cloud Internet Comput"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2591062.2591175"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2983323.2983358"},{"key":"ref4","year":"2021","journal-title":"Roead"},{"key":"ref3","year":"2021","journal-title":"Flume"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/IBIGDELFT.2018.8625370"},{"key":"ref5","year":"2021","journal-title":"Splitter"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243781"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00840-6_16"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3338931"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CompComm.2017.8322600"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-37352-8_8"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098124"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD.2019.00031"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629587"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-019-01645-z"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2018.8406283"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2014.04.073"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2017.7966208"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9151439\/09330769.pdf?arnumber=9330769","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:52:34Z","timestamp":1652194354000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9330769\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":50,"URL":"https:\/\/doi.org\/10.1109\/tifs.2021.3053371","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}