{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,25]],"date-time":"2026-03-25T16:17:25Z","timestamp":1774455445236,"version":"3.50.1"},"reference-count":162,"publisher":"Zhejiang University Press","issue":"9","license":[{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Front Inform Technol Electron Eng"],"published-print":{"date-parts":[[2025,9]]},"DOI":"10.1631\/fitee.2400467","type":"journal-article","created":{"date-parts":[[2025,9,10]],"date-time":"2025-09-10T02:11:37Z","timestamp":1757470297000},"page":"1551-1576","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Deep anomaly detection of temporal heterogeneous data in AIOps: a survey","\u667a\u80fd\u8fd0\u7ef4 (AIOps) \u4e2d\u65f6\u95f4\u5f02\u6784\u6570\u636e\u6df1\u5ea6\u5f02\u5e38\u68c0\u6d4b\u65b9\u6cd5\u7efc\u8ff0"],"prefix":"10.1631","volume":"26","author":[{"given":"Jiayi","family":"Gui","sequence":"first","affiliation":[]},{"given":"Zhongnan","family":"Ma","sequence":"additional","affiliation":[]},{"given":"Hao","family":"Zhou","sequence":"additional","affiliation":[]},{"given":"Yan","family":"Su","sequence":"additional","affiliation":[]},{"given":"Miaoru","family":"Zhang","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1158-1483","authenticated-orcid":false,"given":"Ke","family":"Yu","sequence":"additional","affiliation":[]},{"given":"Xiaofei","family":"Wu","sequence":"additional","affiliation":[]}],"member":"635","published-online":{"date-parts":[[2025,9,10]]},"reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/tit.2020.3014797"},{"key":"ref2","author":"Abrams","year":"2020","journal-title":"CenturyLink routing issue led to outages on Hulu, Steam, Discord, more"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3055366.3055375"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2015.11.016"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-73676-1_13"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2021.3102056"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/access.2020.3022862"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2500853.2500857"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/s10115-016-0987-z"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2021.05.016"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.3390\/s23167167"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403392"},{"key":"ref13","author":"Bai","year":"2023","journal-title":"QWEN technical report"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/bigdata59044.2023.10386976"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/s00371-019-01647-0"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-021-06011-9"},{"key":"ref17","volume-title":"Fourier Transforms","author":"Bochner","year":"1949"},{"key":"ref18","first-page":"257","article-title":"Detecting lateral movement in enterprise computer networks with unsupervised graph AI","volume-title":"23rd Int Symp on Research in Attacks, Intrusions and Defenses","author":"Bowman","year":"2020"},{"key":"ref19","first-page":"1877","article-title":"Language models are few-shot learners","volume-title":"Proc 34th Int Conf on Neural Information Processing Systems","author":"Brown","year":"2020"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/icacca.2016.7578859"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1541880.1541882"},{"key":"ref22","author":"Chang","year":"2024","journal-title":"LLM4TS: two-stage fine-tuning for time-series forecasting with pre-trained LLMs"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/icac.2004.1301345"},{"key":"ref24","author":"Chen","year":"2023","journal-title":"ChatGPT informed graph neural network for stock movement prediction"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/wts.2018.8363930"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/access.2021.3107975"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2019.105612"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2019.2958185"},{"key":"ref29","author":"Cup","year":"2007","journal-title":"KDD Cup 1999 Data"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/infocom48880.2022.9796836"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-77964-1_17"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/icse-companion.2019.00023"},{"key":"ref33","author":"Darban","year":"2024","journal-title":"DACAD: domain adaptation contrastive learning for anomaly detection in multivariate time series"},{"key":"ref34","year":"2020","journal-title":"Water Pumps"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1002\/spy2.337"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/dcoss-iot61029.2024.00026"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134015"},{"key":"ref38","author":"Du","year":"2022","journal-title":"GLM: general language model pretraining with autoregressive blank infilling"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2022.10.024"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3588195.3595943"},{"key":"ref41","author":"Ekambaram","year":"2024","journal-title":"Tiny time mixers (TTMs): fast pre-trained models for enhanced zero\/few-shot forecasting of multivariate time series"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2379776.2379788"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2024.106230"},{"key":"ref44","author":"Farrukh","year":"2024","journal-title":"XG-NID: dual-modality network intrusion detection using a heterogeneous graph neural network and large language model"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467137"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/access.2022.3165809"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.jhydrol.2020.125188"},{"key":"ref48","author":"Gao","year":"2024","journal-title":"UniTS: a unified multi-task time series model"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/s13735-019-00183-w"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/s00607-021-00941-x"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.cobeha.2019.01.005"},{"key":"ref52","first-page":"19622","article-title":"Large language models are zero-shot time series forecasters","volume-title":"Proc 37th Int Conf on Neural Information Processing Systems","author":"Gruver","year":"2024"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2019.105594"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/icdm51629.2021.00026"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/access.2022.3206425"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484589"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-015-3994-4"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1155\/2020\/8846608"},{"key":"ref59","article-title":"2022. The Canada wide Rogers outage on July 8, 2022: what exactly happened","author":"Heinle","year":"15","journal-title":"& how can it be prevented?"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1016\/j.teler.2023.100053"},{"key":"ref61","author":"Houssel","year":"2024","journal-title":"Towards explainable network intrusion detection using large language models"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/icc45855.2022.9838810"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3219845"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/access.2020.2973023"},{"key":"ref65","article-title":"White Paper on 6G Vision and Candidate Technologies","year":"2021","journal-title":"Technical Report"},{"key":"ref66","author":"Jiang","year":"2023","journal-title":"Mistral 7B"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2023.01.004"},{"key":"ref68","author":"Jin","year":"2024a","journal-title":"A survey on graph neural networks for time series: forecasting, classification, imputation, and anomaly detection"},{"key":"ref69","author":"Jin","year":"2024b","journal-title":"Time-LLM: time series forecasting by reprogramming large language models"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1155\/2022\/6750757"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.3390\/pr9050834"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1155\/2019\/5306395"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.05.041"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/nfv-sdn.2016.7919492"},{"key":"ref75","year":"2022","journal-title":"KDDI network outage affects record 30.91 million users"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1155\/2022\/9149164"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.3390\/w11071387"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-44041-1_110"},{"key":"ref79","author":"Li","year":"2019a","journal-title":"Anomaly detection with generative adversarial networks for multivariate time series"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30490-4_56"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2022.10.008"},{"key":"ref82","first-page":"62224","article-title":"Interpreting unsupervised anomaly detection in security via rule extraction","volume-title":"Proc 37th Int Conf on Neural Information Processing Systems","author":"Li","year":"2024"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/dsn.2005.50"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/icdm.2007.46"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103733"},{"key":"ref86","first-page":"102","article-title":"Log clustering based problem identification for online service systems","volume-title":"Proc 38th Int Conf on Software Engineering Companion","author":"Lin","year":"2016"},{"key":"ref87","author":"Lin","year":"2024","journal-title":"Pushing large language models to the 6G edge: vision, challenges, and opportunities"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/tr.2022.3164877"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/icdm.2008.17"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1145\/3639478.3643108"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/tii.2021.3102637"},{"issue":"2","key":"ref92","doi-asserted-by":"crossref","first-page":"157","DOI":"10.1037\/met0000233","article-title":"Regression models involving nonlinear effects with missing data: a sequential modeling approach using Bayesian estimation","volume":"25","author":"O","year":"2020","journal-title":"Psychol Methods"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1145\/3655103.3655109"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/tnsm.2022.3229706"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1109\/phm.2017.8079166"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijar.2013.03.012"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/cyswater.2016.7469060"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/mprv.2018.03367731"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/658"},{"key":"ref100","author":"Mirsky","year":"2018","journal-title":"Kitsune: an ensemble of autoencoders for online network intrusion detection"},{"key":"ref101","author":"Montgomery","year":"2024","journal-title":"Large-scale cellular phone outage hits AT&T customers across US"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/milcis.2015.7348942"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3360691"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.3390\/s23135941"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/icdcs47774.2020.00191"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1145\/3480172"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/infocom53939.2023.10229026"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/dsn.2007.103"},{"key":"ref109","year":"2024","journal-title":"GPT-4 technical report"},{"key":"ref110","author":"Ozyurt","year":"2023","journal-title":"Contrastive learning for unsupervised domain adaptation of time series"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1007\/s10844-015-0388-x"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/idciot56793.2023.10053518"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/access.2019.2930627"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2021.3100755"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2002.1033211"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330680"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2023.04.018"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1145\/3472291"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-73003-5_196"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-25465-x_15"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1109\/milcom.2017.8170817"},{"key":"ref122","author":"Segerholm","year":"2023","journal-title":"Unsupervised Online Anomaly Detection in Multivariate Time-Series"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3652106"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.5220\/0006639801080116"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/ccst.2019.8888419"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2016.2579198"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.3390\/s22155507"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/compsacw.2010.72"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2011.08.011"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2023.03.020"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/CICT.2016.30"},{"key":"ref132","author":"Su","year":"2024","journal-title":"Large language models for forecasting and anomaly detection: a systematic literature review"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/cisda.2009.5356528"},{"key":"ref134","author":"Touvron","year":"2023a","journal-title":"LLaMA: open and efficient foundation language models"},{"key":"ref135","author":"Touvron","year":"2023b","journal-title":"LLaMA 2: open foundation and fine-tuned chat models"},{"key":"ref136","author":"Tuli","year":"2022","journal-title":"TranAD: deep transformer networks for anomaly detection in multivariate time series data"},{"key":"ref137","author":"Tzeng","year":"2014","journal-title":"Deep domain confusion: maximizing for domain invariance"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2017.572"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1109\/tcyb.2020.3013416"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2021.3055564"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1109\/infocom48880.2022.9796926"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/icoin.2017.7899588"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/tia.2022.3159617"},{"key":"ref144","author":"Webb","year":"2024","journal-title":"Cyber knowledge completion using large language models"},{"key":"ref145","author":"Wu","year":"2024","journal-title":"Continual learning for large language models: a survey"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2021.12.093"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1145\/3178876.3185996"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629587"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1109\/tkde.2023.3342137"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1109\/icse43902.2021.00130"},{"key":"ref151","author":"Yang","year":"2024","journal-title":"Follow the rules: reasoning for video anomaly detection with large language models"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1109\/iccc51575.2020.9345249"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr52733.2024.01753"},{"key":"ref154","author":"Zeng","year":"2023","journal-title":"GLM-130B: an open bilingual pre-trained model"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1109\/tmm.2018.2871421"},{"issue":"1","key":"ref156","first-page":"141","article-title":"Technology prospect of 6G mobile communications","volume":"40","author":"Zhang","year":"2019","journal-title":"J Commun"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/issre52982.2021.00023"},{"key":"ref158","first-page":"1063","article-title":"Cross-dataset time series anomaly detection for cloud systems","volume-title":"Proc USENIX Annual Technical Conf","author":"Zhang","year":"2019a"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3338931"},{"key":"ref160","author":"Zhong","year":"2023","journal-title":"A survey of time series anomaly detection methods in the AIOps domain"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1145\/3446132.3446415"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1109\/jproc.2020.3004555"}],"container-title":["Frontiers of Information Technology & Electronic Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1631\/FITEE.2400467.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1631\/FITEE.2400467\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1631\/FITEE.2400467.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,21]],"date-time":"2026-02-21T06:40:18Z","timestamp":1771656018000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1631\/FITEE.2400467"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9]]},"references-count":162,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2025,9]]}},"alternative-id":["2083"],"URL":"https:\/\/doi.org\/10.1631\/fitee.2400467","relation":{},"ISSN":["2095-9184","2095-9230"],"issn-type":[{"value":"2095-9184","type":"print"},{"value":"2095-9230","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9]]},"assertion":[{"value":"1 June 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 November 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 September 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"All the authors declare that they have no conflict of interest.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}