菜单

关于 🐙 GitHub
arXiv 提交日期: 2025-12-29
📄 Abstract - A unified framework for detecting point and collective anomalies in operating system logs via collaborative transformers

Log anomaly detection is crucial for preserving the security of operating systems. Depending on the source of log data collection, various information is recorded in logs that can be considered log modalities. In light of this intuition, unimodal methods often struggle by ignoring the different modalities of log data. Meanwhile, multimodal methods fail to handle the interactions between these modalities. Applying multimodal sentiment analysis to log anomaly detection, we propose CoLog, a framework that collaboratively encodes logs utilizing various modalities. CoLog utilizes collaborative transformers and multi-head impressed attention to learn interactions among several modalities, ensuring comprehensive anomaly detection. To handle the heterogeneity caused by these interactions, CoLog incorporates a modality adaptation layer, which adapts the representations from different log modalities. This methodology enables CoLog to learn nuanced patterns and dependencies within the data, enhancing its anomaly detection capabilities. Extensive experiments demonstrate CoLog's superiority over existing state-of-the-art methods. Furthermore, in detecting both point and collective anomalies, CoLog achieves a mean precision of 99.63%, a mean recall of 99.59%, and a mean F1 score of 99.61% across seven benchmark datasets for log-based anomaly detection. The comprehensive detection capabilities of CoLog make it highly suitable for cybersecurity, system monitoring, and operational efficiency. CoLog represents a significant advancement in log anomaly detection, providing a sophisticated and effective solution to point and collective anomaly detection through a unified framework and a solution to the complex challenges automatic log data analysis poses. We also provide the implementation of CoLog at this https URL.

顶级标签: systems model training machine learning
详细标签: anomaly detection multimodal learning transformers log analysis cybersecurity 或 搜索:

一种通过协作Transformer检测操作系统日志中单点与集体异常的统一框架 / A unified framework for detecting point and collective anomalies in operating system logs via collaborative transformers


1️⃣ 一句话总结

这篇论文提出了一个名为CoLog的新框架,它通过协作Transformer技术,巧妙地融合了日志数据中的多种信息模式,从而能更全面、准确地检测出操作系统日志中的各类异常,在网络安全和系统监控方面表现优异。

源自 arXiv: 2512.23380