본문 바로가기
  • Home

SecuBERT: AI-Based Network Anomaly Auto-Detection and Visualization Framework

  • Journal of Internet of Things and Convergence
  • Abbr : JKIOTS
  • 2026, 12(3), 10
  • Publisher : The Korea Internet of Things Society
  • Research Area : Engineering > Computer Science > Internet Information Processing
  • Received : May 4, 2026
  • Accepted : June 17, 2026
  • Published : June 30, 2026

Lee, Hyung Woo 1

1한신대학교

Accredited

ABSTRACT

With the increasing complexity of modern network environments and the diversification of security threats, the volume of logs generated by various security devices and services has grown rapidly, making the rapid and accurate identification of normal and abnormal behaviors a critical task in incident response and security monitoring. However, existing detection approaches have limitations in adequately capturing the diversity of log representations and the contextual differences of behaviors. To address this issue, this paper proposes SecuBERT, an improved BERT-based network log analysis system. The proposed framework defines profile sentences describing normal and abnormal behaviors, maps input logs into the BERT embedding space, and classifies events by measuring semantic similarity to the predefined profiles. In addition, keyword hint-based scoring and correction rules based on port and protocol characteristics are incorporated to improve the practicality and detection accuracy of the results. The proposed SecuBERT system demonstrated that effective network log-based anomaly detection is possible even in environments where large-scale labeled datasets are limited, and it also showed the potential to be extended into an AI-based automated detection system for real-world operational network log environments.

Citation status

* References for papers published after 2024 are currently being built.