Demo Data from EDBT 2026 / reviewers in the wild / expert
Yijia Qian
dblp:260/2563
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2022
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Network security · 100% |
Topics — the 1 heaviest of 1, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Network security › intrusion detection and prevention › intrusion detection › anomaly detection
log-based anomaly detection |
0.6 | 1 | 2022 | DeepSyslog: Deep Anomaly Detection on Syslog Using Sentence Embedding and Metadata · IEEE Trans. Inf. Forensics Secur. 2022 |
Methods — techniques the papers use, named apart from their topics
unsupervised learning · 0.6sentence embedding · 0.6metadata integration · 0.6
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2022 | DeepSyslog: Deep Anomaly Detection on Syslog Using Sentence Embedding and MetadataabstractAnomaly events indicating the unhealthy status of the computer system are recorded in the system log (Syslog). Therefore, Syslog-based anomaly event detection is crucial for diagnosing system issues and problems. However, existing log-based anomaly detection approaches use raw and unstructured log entriesindependentlyandincompletely, i.e., without considering the context of each event and event metadata in the logs. They employ incomplete representation of unstructured log data, limiting the deep learning model’s capacity in the early stage, which tends to omit anomaly events and cause false alarms. In this work, we propose DeepSyslog, which represents Syslog with the context of log events and event metadata in the logs. Inspired by the sequence nature of the log stream, we employ unsupervised sentence embedding to extract the semantic and context information hidden in the log stream, rather than word embedding or one-hot embedding, which only capture the similarities between log words. The sentence embedding is further integrated with event metadata to form complete representations of Syslog, which can distinguish the anomaly caused by the correlated log entries and exceptional event metadata in the log. The simulation results on widely used log datasets show that DeepSyslog achieves high performance compared with the existing log-based anomaly event detection approaches. Junwei Zhou 0002, Yijia Qian, Qingtian Zou, Peng Liu 0005, Jianwen Xiang |
IEEE Trans. Inf. Forensics Secur. | 2 |