{
  "schema_version": "0.6.0",
  "paper_id": "synthlogai-synthetic-linux-log-generation",
  "page_url": "https://threadslab.org/research-publications/papers/synthlogai-synthetic-linux-log-generation/",
  "title": "SynthLogAI: Generative AI for Synthetic Linux Log Generation and Evaluation",
  "title_variants": [],
  "authors": [
    "Hridoy Rahman",
    "Naser Ezzati-Jivan",
    "Blessing Ogbuokiri"
  ],
  "author_details": [
    {
      "name": "Hridoy Rahman",
      "orcid": null,
      "profile_url": "https://ieeexplore.ieee.org/author/366631566188381"
    },
    {
      "name": "Naser Ezzati-Jivan",
      "orcid": "https://orcid.org/0000-0003-1435-6297",
      "profile_url": "https://ieeexplore.ieee.org/author/37071999400"
    },
    {
      "name": "Blessing Ogbuokiri",
      "orcid": null,
      "profile_url": "https://ieeexplore.ieee.org/author/37088214110"
    }
  ],
  "publication": {
    "year": 2025,
    "venue": "2025 IEEE International Conference on Collaborative Advances in Software and COmputiNg (CASCON)",
    "type": "conference paper",
    "publication_date": "2025-11-10",
    "online_date": null,
    "print_date": "2025-11-10",
    "volume": null,
    "issue": null,
    "pages": "102-107",
    "article_number": null,
    "publisher": "IEEE",
    "issn": [],
    "isbn": [],
    "crossref_type": "proceedings-article"
  },
  "publication_type": "conference paper",
  "status": "published_metadata_record",
  "canonical_source_url": "https://doi.org/10.1109/CASCON66301.2025.00032",
  "source_record_id": "synthlogai-generative-ai-for-synthetic-linux-log-generation-and-evaluation-a00bad2d6b",
  "identifiers": {
    "doi": "10.1109/CASCON66301.2025.00032"
  },
  "abstract": null,
  "abstract_source": "Public abstract mirror and author presentation summary reviewed; author abstract not reproduced because reuse permission for the publisher version was not established.",
  "abstract_available": false,
  "scholar_eligibility": {
    "eligible": false,
    "basis": "not-eligible",
    "note": "The page is a discovery record; it does not claim Google Scholar article-host eligibility."
  },
  "description": "SynthLogAI benchmarks statistical, sequence, transformer, and prompt-based generative models for producing synthetic Linux logs while measuring fidelity, downstream utility, and privacy.",
  "evidence_level": "full-text-reviewed",
  "evidence": {
    "source_basis": "full-text-reviewed",
    "coverage": "material paper sections",
    "summary_origin": "AI-assisted catalog editorial summary",
    "review_status": "catalog-reviewed; paper-author approval pending",
    "verified_on": "2026-08-26",
    "sources": [
      {
        "note": "Local PDF reviewed, including LTTng source data, model families, subset sizes, evaluation metrics, and utility/privacy results"
      },
      {
        "note": "IEEE DOI record: https://doi.org/10.1109/CASCON66301.2025.00032"
      },
      {
        "note": "IEEE Xplore record: https://ieeexplore.ieee.org/document/11344303/"
      },
      {
        "note": "Anonymous code repository named in the paper: https://github.com/anonsubmit-code/SDG"
      }
    ]
  },
  "summary": {
    "core_contribution": "SynthLogAI benchmarks statistical, sequence, transformer, and prompt-based generative models for producing synthetic Linux logs while measuring fidelity, downstream utility, and privacy.",
    "problem": "Kernel logs can contain operationally sensitive information, limiting sharing and reproducible experimentation. Synthetic logs must preserve event structure and useful behavior without simply memorizing or leaking properties of the original host traces.",
    "method": "The paper starts from more than 57 million LTTng events collected on Ubuntu 20.04 and evaluates 1K, 10K, and 100K-event subsets with fields such as timestamp, elapsed time, host, event, CPU, process, and kernel details. CTGAN, LSTM, and GPT-2 are compared with prompt-based GPT-3.5, GPT-4.1 Mini, and o4 Mini systems; generated outputs are postprocessed and evaluated with Wasserstein distance, range/category completeness, Isolation Forest anomaly behavior, classifier utility, and nearest-neighbor privacy checks. The paper identifies an anonymous code repository at https://github.com/anonsubmit-code/SDG.",
    "findings": "CTGAN provides the best overall fidelity/utility balance in the reported comparison. The paper reports downstream utility around 49.6–54.9% for selected settings and average privacy-distance values of 132.66 and 224.96 in its comparisons. LSTM/GPT-2 show scale drift as data size changes, while prompt-based LLMs exhibit structural and numeric inconsistencies despite stronger privacy signals; malformed outputs are reported below 0.5% after postprocessing in the evaluated settings.",
    "limitations": "The benchmark uses one Ubuntu/LTTng environment and does not establish preservation of causal or temporal relationships across diverse workloads. Prompt-only LLM generation has structural/numeric reliability issues, privacy-distance metrics are not a complete re-identification guarantee, and the study does not evaluate fine-tuning, concurrent trace channels, or operational deployment.",
    "future_work": "Use multi-host and multi-kernel corpora, preserve temporal/causal constraints explicitly, evaluate re-identification and membership inference, compare fine-tuned and constrained generators, and measure downstream utility on real trace-analysis tasks rather than aggregate similarity alone."
  },
  "tags": [
    "machine-learning",
    "observability",
    "anomaly-detection",
    "system-tracing"
  ],
  "keywords": [
    "synthetic Linux logs",
    "generative AI",
    "log generation",
    "log evaluation",
    "CASCON 2025"
  ],
  "versions": [
    {
      "id": "published-version",
      "label": "Published version",
      "relation": "version-of-record",
      "title": "SynthLogAI: Generative AI for Synthetic Linux Log Generation and Evaluation",
      "url": "https://doi.org/10.1109/CASCON66301.2025.00032",
      "pdf_url": null,
      "status": "published",
      "canonical_for_citation": true
    },
    {
      "id": "ieee-record",
      "label": "IEEE record",
      "relation": "source-record",
      "title": "SynthLogAI: Generative AI for Synthetic Linux Log Generation and Evaluation",
      "url": "https://ieeexplore.ieee.org/document/11344303/",
      "pdf_url": null,
      "status": "public_source_record",
      "canonical_for_citation": false
    }
  ],
  "access": {
    "status": "published_metadata_record",
    "note": "Crossref, IEEE, and the official CASCON schedule verify the record. The IEEE PDF was not available through normal access; methods, data, and results remain unverified.",
    "license": null
  },
  "resources": {
    "code": "https://github.com/anonsubmit-code/SDG",
    "data": null,
    "slides": null,
    "demo": null
  },
  "citation_guidance": {
    "when_to_cite": "Cite this paper when comparing synthetic Linux-log generators on fidelity, downstream utility, and privacy.",
    "points": [
      "The 57-million-event LTTng source and 1K/10K/100K evaluation subsets.",
      "CTGAN/LSTM/GPT-2 versus prompt-based LLM generation.",
      "Wasserstein, utility, anomaly, and privacy-distance evaluation.",
      "The CTGAN balance and prompt-LLM structural/numeric reliability trade-off."
    ],
    "canonical_version_id": "published-version"
  },
  "provenance": {
    "metadata_verified_on": "2026-08-26",
    "metadata_source": [
      "Local PDF reviewed, including LTTng source data, model families, subset sizes, evaluation metrics, and utility/privacy results",
      "IEEE DOI record: https://doi.org/10.1109/CASCON66301.2025.00032",
      "IEEE Xplore record: https://ieeexplore.ieee.org/document/11344303/",
      "Anonymous code repository named in the paper: https://github.com/anonsubmit-code/SDG"
    ],
    "summary_written_by": "AI-assisted",
    "summary_verified_by": "full-text-grounded catalog review; author approval pending",
    "linked_preprint_record": null,
    "author_order_note": null
  },
  "batch": {
    "phase": 2,
    "batch_label": "expanded forty-paper release",
    "status": "included_in_expanded_catalog",
    "selected_at": "2026-08-28"
  }
}