Autoencoder-Based Anomaly Detection and Analysis in Log Data Generated in Cloud Systems Using Natural Language Processing

In this study, an Autoencoder-based model was developed to detect anomalies in log data obtained from cloud systems. The dataset used consists of log records from the Blue Gene/L (BGL) supercomputer. In the preprocessing phase, log messages were vectorized using the TF-IDF method, and structural features such as content length, word count, and the presence of component/type information were extracted to create an enriched feature matrix. The model attempted to reconstruct each log entry and calculated the reconstruction errors. Records were then classified as normal or anomalous based on a threshold corresponding to the 95th percentile of these errors. The developed model achieved a high performance with an accuracy rate of $99.61 \%$, as well as strong results in precision, recall, and F1-score metrics. Additional evaluations using ROCAUC and Precision-Recall curves further confirmed the model’s robustness. The results demonstrate that the Autoencoder architecture can effectively detect anomalies in large and complex log datasets. Within the scope of the study, the proposed model was also evaluated comparatively against recent approaches such as DeepLog, LogRobust, MLP, and LogEvent2Vec. The proposed model outperformed all other methods across all performance metrics. These findings highlight the Autoencoder-based method as a strong alternative in terms of both computational efficiency and anomaly detection capability.

Authors

Publication Details

Published
2025-06-27
DOI
https://doi.org/10.1109/isas66241.2025.11101866
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Autoencoder-Based Anomaly Detection and Analysis in Log Data Generated in Cloud Systems Using Natural Language Processing

Mehmet Bayğın, Işıl Karabey Aksakalli, İlayda Ayvaz
Network Security and Intrusion Detection
article

Autoencoder-Based Anomaly Detection and Analysis in Log Data Generated in Cloud Systems Using Natural Language Processing

Mehmet Bayğın, Işıl Karabey Aksakalli, İlayda Ayvaz
article en

Abstract

In this study, an Autoencoder-based model was developed to detect anomalies in log data obtained from cloud systems. The dataset used consists of log records from the Blue Gene/L (BGL) supercomputer. In the preprocessing phase, log messages were vectorized using the TF-IDF method, and structural features such as content length, word count, and the presence of component/type information were extracted to create an enriched feature matrix. The model attempted to reconstruct each log entry and calculated the reconstruction errors. Records were then classified as normal or anomalous based on a threshold corresponding to the 95th percentile of these errors. The developed model achieved a high performance with an accuracy rate of $99.61 \%$, as well as strong results in precision, recall, and F1-score metrics. Additional evaluations using ROCAUC and Precision-Recall curves further confirmed the model’s robustness. The results demonstrate that the Autoencoder architecture can effectively detect anomalies in large and complex log datasets. Within the scope of the study, the proposed model was also evaluated comparatively against recent approaches such as DeepLog, LogRobust, MLP, and LogEvent2Vec. The proposed model outperformed all other methods across all performance metrics. These findings highlight the Autoencoder-based method as a strong alternative in terms of both computational efficiency and anomaly detection capability.

Openalex Percentile: Top 77%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Autoencoder-Based Anomaly Detection and Analysis in Log Data Generated in Cloud Systems Using Natural Language Processing — Mehmet Bayğın, Işıl Karabey Aksakalli, et al. · (2025) | TGRS Research Map | TGRS