Toward detecting compromised mapreduce workers through log analysis