Abstract:Computer network anomaly detection and log analysis, as an important topic in the field of network security, has been a key task to ensure network security and system reliability. First, existing network anomaly detection and log analysis methods are often challenged by high-dimensional data and complex network topologies, resulting in unstable performance and high false-positive rates. In addition, traditional methods are usually difficult to handle time-series data, which is crucial for anomaly detection and log analysis. Therefore, we need a more efficient and accurate method to cope with these problems. To compensate for the shortcomings of current methods, we propose an innovative fusion model that integrates Isolation Forest, GAN (Generative Adversarial Network), and Transformer with each other, and each of them plays a unique role. Isolation Forest is used to quickly identify anomalous data points, and GAN is used to generate synthetic data with the real data distribution characteristics to augment the training dataset, while the Transformer is used for modeling and context extraction on time series data. The synergy of these three components makes our model more accurate and robust in anomaly detection and log analysis tasks. We validate the effectiveness of this fusion model in an extensive experimental evaluation. Experimental results show that our model significantly improves the accuracy of anomaly detection while reducing the false alarm rate, which helps to detect potential network problems in advance. The model also performs well in the log analysis task and is able to quickly identify anomalous behaviors, which helps to improve the stability of the system. The significance of this study is that it introduces advanced deep learning techniques, which work anomaly detection and log analysis.

Log anomaly detection method based on CNN and LSTM fusion

Data anomaly detection for structural health monitoring using a combination network of GANomaly and CNN

Attention Based CNN-LSTM Network for Anomaly Pattern Classification of Multivariate Time Series

MLog: Mogrifier LSTM-based Log Anomaly Detection Approach Using Semantic Representation

A LSTM-Based Anomaly Detection Model for Log Analysis

An Anomaly Detection Approach of Part-of-Speech Log Sequence Via Population Based Training

ETCNLog: A System Log Anomaly Detection Method Based on Efficient Channel Attention and Temporal Convolutional Network

LogMS: a multi-stage log anomaly detection method based on multi-source information fusion and probability label estimation

Natural Language Processing-based Model for Log Anomaly Detection

Distributed system anomaly detection using deep learning‐based log analysis

CausalConvLSTM: Semi-Supervised Log Anomaly Detection Through Sequence Modeling

Anomaly Detection Model for Log Based on LSTM Network and Variational Autoencoder

LightLog: A Lightweight Temporal Convolutional Network for Log Anomaly Detection on the Edge

Deep Learning-based Anomaly Detection and Log Analysis for Computer Networks

OMLog: Online Log Anomaly Detection for Evolving System with Meta-learning

LLMeLog: an Approach for Anomaly Detection Based on LLM-enriched Log Events

MDFULog: Multi-Feature Deep Fusion of Unstable Log Anomaly Detection Model

Log Sequence Anomaly Detection Based on Local Information Extraction and Globally Sparse Transformer Model

Anomaly Detection using Distributed Log Data: A Lightweight Federated Learning Approach

ConAnomaly: Content-Based Anomaly Detection for System Logs

Log-based Anomaly Detection Without Log Parsing