Backdoor Attack against Log Anomaly Detection Models (BLOG)

BLOG: Backdoor Attack against Log Anomaly Detection Models

BLOG is a backdoor attack framework for self-supervised log anomaly detection models such as DeepLog and LogBERT. It combines data poisoning using normal log entries with a modified training objective, allowing abnormal logs to evade detection while maintaining benign performance.