Alert detection in system logs

Proceedings - IEEE International Conference on Data Mining, ICDM

Volumn , Issue , 2008, Pages 959-964

  Oliner, Adam J ^a   Aiken, Alex ^a   Stearley, Jon ^b  

^a STANFORD UNIVERSITY   (United States)

^b SANDIA NATIONAL LABORATORIES   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALOUS EVENTS; ANOMALY DETECTION; DETECTION TASKS; INFORMATION ENTROPY; ONLINE VERSIONS; UNSUPERVISED ALGORITHMS;

MINING; SUPERCOMPUTERS;

INFORMATION MANAGEMENT;

EID: 67049096648     PISSN: 15504786     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICDM.2008.132     Document Type: Conference Paper

References (19)

1. M. W. Berry, Z. Drmac, and E. R. Jessup. Matrices, vector spaces, and information retrieval. SIAM Rev., 41(2):335-362, 1999.
2. J. L. Hellerstein, S. Ma, and C. Perng. Discovering actionable patterns in event data. IBM Systems Journal, 41(3), 2002.
3. Y. Liang, Y. Zhang, M. Jette, A. Sivasubramaniam, and R. K. Sahoo. Blue gene/l failure analysis and prediction models. In Proceedings of the Intl. Conf. on Dependable Systems and Networks (DSN), pages 425-434, 2006. (Pubitemid 44930443)
4. Y. Liang, et al. Filtering failure logs for a bluegene/l prototype. In Proceedings of the Intl. Conf. on Dependable Systems and Networks (DSN), pages 476-485, June 2005. (Pubitemid 41538262)
5. Y. Liao and V. R. Vemuri. Using text categorization techniques for intrusion detection. In 11th USENIX Security Symposium, August 5-9, 2002., pages 51-59, 2002.
6. Logsurfer. A tool for real-time monitoring of text-based logfiles. http://www.cert.dfn.de/eng/logsurf/, 2006.
7. S. Ma and J. Hellerstein. Mining partially periodic event patterns with unknown periods. In Proceedings of the International Conference on Data Engineering (ICDE), pages 409-416, 2001.
8. A. J. Oliner and J. Stearley. What supercomputers say: A study of five system logs. In Proceedings of the 2007 International Conference on Dependable Systems and Networks (DSN), 2007.
9. J. R. Reuning. Applying term weight techniques to event log analysis for intrusion detection. Master's thesis, University of North Carolina at Chapel Hill, July 2004.
10. R. K. Sahoo and A. J. Oliner, et al. Critical event prediction for proactive management in large-scale computer clusters. In Proceedings of the 9th ACM SIGKDD, International Conference on Knowledge Discovery and Data Mining, pages 426-435. ACM Press, 2003.
11. B. Schroeder and G. Gibson. A large-scale study of failures in high-performance-computing systems. In Proceedings of the Intl. Conf. on Dependable Systems and Networks (DSN), Philadelphia, PA, June 2006.
12. J. Stearley. Towards informatic analysis of syslogs. In IEEE International Conference on Cluster Computing, pages 309- 318, 2004. (Pubitemid 40822381)
13. J. Stearley. Scrubbed logs from five top supercomputers. http://www.cs.sandia.gov/~jrstear/.logs-alpha1, 2008.
14. J. Stearley. Sisyphus-a log data mining toolkit. http://www.cs.sandia. gov/sisyphus, 2008.
15. J. Stearley and A. J. Oliner. Bad words: Finding faults in spirit's syslogs. In Workshop on Resiliency in High- Performance Computing (Resilience), 2008.
16. R. Vaarandi. A data clustering algorithm for mining patterns from event logs. In Proceedings of IEEE International Workshop on IP Operations and Management (IPOM), pages 119-126, October 2003.
17. R. Vaarandi. A breadth-first algorithm for mining frequent patterns from event logs. In Proceedings of the 2004 IFIP International Conference on Intelligence in Communication Systems, volume 3283, pages 293-308, 2004. (Pubitemid 39737227)
18. A. Wespi, M. Dacier, and H. Debar. An intrusion-detection system based on the teiresias pattern-discovery algorithm. In EICAR Annual Conference Proceedings, pages 1-15, 1999.
19. K. Yamanishi and Y. Maruyama. Dynamic syslog mining for network failure monitoring. In Proceedings of the 11th ACM SIGKDD, International Conference on Knowledge Discovery and Data Mining, pages 499-508, New York, NY, USA, 2005. ACM Press. (Pubitemid 43224043)