{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T05:06:21Z","timestamp":1755839181446,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":39,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,8,17]],"date-time":"2021-08-17T00:00:00Z","timestamp":1629158400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,8,17]]},"DOI":"10.1145\/3465481.3470083","type":"proceedings-article","created":{"date-parts":[[2021,8,16]],"date-time":"2021-08-16T17:57:21Z","timestamp":1629136641000},"page":"1-10","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Log Abstraction for Information Security: Heuristics and Reproducibility"],"prefix":"10.1145","author":[{"given":"Rafael","family":"Copstein","sequence":"first","affiliation":[{"name":"Dalhousie University, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jeff","family":"Schwartzentruber","sequence":"additional","affiliation":[{"name":"2Keys, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nur","family":"Zincir-Heywood","sequence":"additional","affiliation":[{"name":"Dalhousie University, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Malcolm","family":"Heywood","sequence":"additional","affiliation":[{"name":"Dalhousie University, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,8,17]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2016. Datadog. https:\/\/www.datadoghq.com\/"},{"key":"e_1_3_2_1_2_1","unstructured":"2021. Apache Spark\u2122 - Unified Analytics Engine for Big Data. https:\/\/spark.apache.org\/"},{"key":"e_1_3_2_1_3_1","unstructured":"2021. Fluentd - Open Source Data Collector. https:\/\/www.fluentd.org\/"},{"key":"e_1_3_2_1_4_1","unstructured":"2021. Log Analysis: Log Management by Loggly. https:\/\/www.loggly.com\/"},{"key":"e_1_3_2_1_5_1","unstructured":"2021. Logstash: Collect Parse Transform Logs. https:\/\/www.elastic.co\/logstash"},{"key":"e_1_3_2_1_6_1","unstructured":"2021. Splunk - Cloud-Based Data Platform for Cybersecurity IT Operations and DevOps. https:\/\/www.splunk.com\/"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2012.6289243"},{"volume-title":"Identifying Frequent User Tasks from Application Logs","author":"Dev Himel","key":"e_1_3_2_1_8_1","unstructured":"Himel Dev and Zhicheng Liu. 2017. Identifying Frequent User Tasks from Application Logs. Association for Computing Machinery, New York, NY, USA."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2016.0103"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2020.106276"},{"volume-title":"Execution anomaly detection in distributed systems through unstructured log analysis. In 2009 ninth IEEE international conference on data mining","author":"Fu Qiang","key":"e_1_3_2_1_11_1","unstructured":"Qiang Fu, Jian-Guang Lou, Yi Wang, and Jiang Li. 2009. Execution anomaly detection in distributed systems through unstructured log analysis. In 2009 ninth IEEE international conference on data mining. IEEE, 149\u2013158."},{"volume-title":"Classification of http attacks: a study on the ECML\/PKDD 2007 discovery challenge","author":"Gallagher Brian","key":"e_1_3_2_1_12_1","unstructured":"Brian Gallagher and Tina Eliassi-Rad. 2009. Classification of http attacks: a study on the ECML\/PKDD 2007 discovery challenge. Technical Report. Lawrence Livermore National Lab.(LLNL), Livermore, CA (United States)."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2014.2364743"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2983323.2983358"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2762673"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS.2017.13"},{"key":"e_1_3_2_1_17_1","volume-title":"Loghub: A Large Collection of System Log Datasets towards Automated Log Analytics. arxiv:2008.06448\u00a0[cs.SE]","author":"He Shilin","year":"2020","unstructured":"Shilin He, Jieming Zhu, Pinjia He, and Michael\u00a0R. Lyu. 2020. Loghub: A Large Collection of System Log Datasets towards Automated Log Analytics. arxiv:2008.06448\u00a0[cs.SE]"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/1400155.1400158"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/2619287.2619290"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.23919\/CNSM50824.2020.9269049"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-020-09512-5"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"crossref","unstructured":"Chris Lonvick. 2001. RFC3164: The BSD Syslog Protocol.","DOI":"10.17487\/rfc3164"},{"key":"e_1_3_2_1_23_1","volume-title":"Log Analytics in HPC: A Data-driven Reinforcement Learning Framework. In IEEE INFOCOM 2020-IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS). IEEE, 550\u2013555","author":"Luo Zhengping","year":"2020","unstructured":"Zhengping Luo, Tao Hou, Tung\u00a0Thanh Nguyen, Hui Zeng, and Zhuo Lu. 2020. Log Analytics in HPC: A Data-driven Reinforcement Learning Framework. In IEEE INFOCOM 2020-IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS). IEEE, 550\u2013555."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2011.138"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557154"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3196321.3196340"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/SCC.2013.73"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2010.5463281"},{"key":"e_1_3_2_1_29_1","unstructured":"NETRESEC. 2012. Mid-Atlantic Collegiate Cyber Defense Competition (MACCDC). https:\/\/www.netresec.com\/index.ashx?page=MACCDC"},{"key":"e_1_3_2_1_30_1","unstructured":"Xia Ning Geoff Jiang Haifeng Chen and Kenji Yoshihira. 2014. 1HLAer: a System for Heterogeneous Log Analysis. (2014)."},{"key":"e_1_3_2_1_31_1","article-title":"Mining of web server logs in a distributed cluster using big data technologies","volume":"5","author":"Savitha K","year":"2014","unstructured":"K Savitha and MS Vijaya. 2014. Mining of web server logs in a distributed cluster using big data technologies. International Journal of Advanced Computer Science and Applications (IJACSA) 5, 1(2014).","journal-title":"International Journal of Advanced Computer Science and Applications (IJACSA)"},{"key":"e_1_3_2_1_32_1","unstructured":"Keiichi Shima. 2016. Length matters: Clustering system log messages using length of words. arXiv preprint arXiv:1611.03213(2016)."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373017.3373018"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2063576.2063690"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS.2017.7916497"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/IPOM.2003.1251233"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2008.4575281"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/CNSM.2015.7367331"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP.2019.00021"}],"event":{"name":"ARES 2021: The 16th International Conference on Availability, Reliability and Security","acronym":"ARES 2021","location":"Vienna Austria"},"container-title":["Proceedings of the 16th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3465481.3470083","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3465481.3470083","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:17:24Z","timestamp":1750191444000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3465481.3470083"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,8,17]]},"references-count":39,"alternative-id":["10.1145\/3465481.3470083","10.1145\/3465481"],"URL":"https:\/\/doi.org\/10.1145\/3465481.3470083","relation":{},"subject":[],"published":{"date-parts":[[2021,8,17]]},"assertion":[{"value":"2021-08-17","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}