arrow
Return

CLlog: A collaborative learning-based anomalous log detection model

delete2025-12-14
delete0
PRE
AI
卢嘉中 cover
卢嘉中 (Jiazhong Lu)
K
Kun Yu
Z
Zhiquan Liu
X
Xiaolei Liu
DOI:10.1016/j.comnet.2025.111943delete
deleteOriginal
deleteShare
deleteSave
Abstract

Abstract

En 中文
Existing supervised learning-based log anomaly detection methods typically require a large number of labeled anomalous samples. However, this reliance on labeled data is costly, while semi-supervised learning models face challenges in effectively extracting features from logs. To address these issues, we propose CLlog, a collaborative learning-based anomalous log detection model. Collaborative learning leverages the mutual learning and knowledge transfer between Graph Attention Networks and Graph Convolutional Networks to achieve better feature extraction and classification. This model does not require labeled anomalous samples, significantly reducing data labeling costs. In our approach, logs are first converted into directed graph structures to capture the complex interactions and network topology features among log entries. Then, through the collaborative learning mechanism, GAT and GCN guide and learn from each other during training, leading to mutual improvements in accuracy. Finally, through the collaborative learning mechanism, our model effectively combines the strengths of GAT and GCN, enabling it to accurately identify anomalous logs while being trained only on normal samples. Experiments show that our model demonstrates significant detection advantages across five public datasets, achieving a 7 % improvement in F1 score. It effectively addresses the challenges of high labeling costs and improving detection accuracy in log anomaly detection.

Journal

Computer Networks cover
Computer Networks
IF:
4.6
Papers:
1.8K
Citations:
1.6W

Organization

C
Chengdu University of Information Technology
Scholars:
2.9K
Papers: 2.3K
Citations: 2.4K
J
jinan university
Scholars:
4.3W
Papers: 2.7W
Citations: 38
researcher View more organizations
Cited Papers

Cited Papers

SSDLog: a semi-supervised dual branch model for log anomaly detection
err2023-06-13
err0
errOAAI
errSiyang Lu; Ningning Han; Mingquan Wang; Xiang Wei; Zaichao Lin; Dongdong Wang
errShare
errSave
Anti-Attack Intrusion Detection Model Based on MPNN and Traffic Spatiotemporal Characteristics
err2023-10-28
err4
PREAI
errLu, Jiazhong; Lan, Jin; Huang, Yuanyuan; Song, Maojia; Liu, Xiaolei
errShare
errSave
A Semi-supervised Approach for Industrial Anomaly Detection via Self-adaptive Clustering
err2024-02-01
err3
PREAI
errMa, Xiaoxue; Keung, Jacky; He, Pinjia; Xiao, Yan; Yu, Xiao; Li, Yishu
errShare
errSave
AutoLog: Anomaly detection by deep autoencoding of system logs
err2022-04-01
err33
PREAI
errCatillo, Marta; Pecchia, Antonio; Villano, Umberto
errShare
errSave
DLLog: An Online Log Parsing Approach for Large-Scale System
err2024-04-16
err0
errOAAI
errCheng, Hailong; Ying, Shi; Duan, Xiaoyu; Yuan, Wanli
errShare
errSave
DeepLog
err2017-10-30
err0
PREAI
errMin Du; Feifei Li; Guineng Zheng; Vivek Srikumar
errShare
errSave
A graph-based approach to detect unexplained sequences in a log
err2021-06-01
err6
PREAI
errCinque, Marcello; Della Corte, Raffaele; Moscato, Vincenzo; Sperli, Giancarlo
errShare
errSave
LogAnomaly: Unsupervised Detection of Sequential and Quantitative Anomalies in Unstructured Logs
err2019-08-01
err0
errOAAI
errWeibin Meng; Ying Liu; Yichen Zhu; Shenglin Zhang; Dan Pei; Yuqing Liu; Yihao Chen; Ruizhi Zhang; Shimin Tao; Pei Sun; Rong Zhou
errShare
errSave
researcher View more