首页|期刊导航|计算机应用与软件|基于半监督主动学习的日志异常检测方法

基于半监督主动学习的日志异常检测方法OA

A LOG ANOMALY DETECTION METHOD BASED ON SEMI-SUPERVISED ACTIVE LEARNING

中文摘要英文摘要

为了保证复杂系统的可靠性,基于日志的异常检测方法成为研究的重点.现有的日志异常检测监督方法需要大量标记数据训练,半监督方法容易受到噪声数据的负面影响,无法有效应对日志概念偏移导致的性能下降问题.针对这种情况,提出基于半监督主动学习的日志异常检测方法(SSLALog),输入少量标记数据,采用有监督的Transformer异常分类模型,结合半监督自训练学习和主动学习的方式训练模型.实验结果表明,在F1分数上该方法优于其他半监督方法,通过讨论效率,进一步证实了实用性.

In order to ensure the reliability of complex systems,log-based anomaly detection methods have become the focus of research.Existing supervised methods for log anomaly detection require a large amount of labeled data for training,and semi-supervised methods are easily negatively affected by noisy data,and cannot effectively deal with the performance degradation caused by log concept shift.In response to this situation,a log anomaly detection method based on semi-supervised active learning(SSLALog)is proposed,using a supervised Transformer anomaly classification model,and training the model through a combination of semi-supervised self-training learning and active learning.Experimental results show that it outperforms other semi-supervised methods on F1 score,and the practicality is further confirmed by discussing the efficiency.

吴茜雅;张晨曦;彭鑫

复旦大学计算机科学技术学院 上海 200433||上海市数据科学重点实验室(复旦大学) 上海 200433复旦大学计算机科学技术学院 上海 200433||上海市数据科学重点实验室(复旦大学) 上海 200433复旦大学计算机科学技术学院 上海 200433||上海市数据科学重点实验室(复旦大学) 上海 200433

信息技术与安全科学

日志日志异常检测半监督学习主动学习伪标签

LogLog anomaly detectionSemi-supervised learningActive learningPseudo-labelling

《计算机应用与软件》 2026 (3)

354-360,368,8

10.3969/j.issn.1000-386x.2026.03.048

评论