.png){kind=icon}
Return
GRAND: GAN-based software runtime anomaly detection method using trace information
.png){kind=icon}
PRE
AI
DOI：10.1016/j.neunet.2023.10.036.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Software runtime anomaly detection can detect manifestations (known as anomalies) caused by faults in complex systems before they lead to failure. Whereas most existing methods use external performance indicators, this study uses internal execution traces to reveal failures not only related to software performance issues but also functional errors. A neural network model called GRAND, which combines a variational autoencoder and a generative adversarial network, is proposed to mine anomalies in the execution trace. Cassandra, a widely used database system, was used as a representation to conduct the empirical study. The dataset was collected under a well-designed operational profile that contained 5180 time series, each containing more than ten million data points. GRAND achieved a higher detection performance than the other two SOTA baseline models, with a 99% F1-score compared with 93% and 87%. Ablation studies show that the workload information used in GRAND can determine whether the current internal status is consistent with the task, thus achieving a 16% improvement in the F1-score. The attention mechanism used for data fusion can achieve a 32% improvement in the F1-score.
Keywords:
Software anomaly detection
Internal execution trace
Unsupervised learning
VAE
GAN
Journal
IF:
6.3
Papers:
8.2K
Citations:
3.0W
Organization
Cited Papers
ShareSaveShareSaveWhich algorithm can detect unknown attacks? Comparison of supervise d, unsupervise d and meta-learning algorithms for intrusion detection.png)
COMPUTERS & SECURITY
OAAI
COMPUTERS & SECURITYIF5.4
OAAIShareSaveShareSaveShareSaveA comparative evaluation of outlier detection algorithms: Experiments and analysesPATTERN RECOGNITION
PATTERN RECOGNITIONIF7.6
PREAI
ShareSave
View more