Sage Journals: Discover world-class research

Abstract

Deviating behavior within an organization can lead to unexpected results. The effects of deviations are often negative, but sometimes also positive. Therefore, it is useful to detect deviations from event logs which record all the behavior of the organization. However, existing model-based and cluster-based approaches are inaccurate or slow when dealing with complex event logs, i.e. logs of less structured processes having many activities and many possible paths. This paper proposes a novel approach that is faster than cluster-based approaches because it creates a so-called profile which is less time-consuming than creating clusters. Furthermore, the approach is also more accurate than model-based approaches because we use an iterative approach to improve the result. Our experiments show that approach outperforms existing techniques in a variety of circumstances.

Keywords

Process mining deviation detection clustering behavioral profiles

Get full access to this article

View all access options for this article.

References

van der Aalst, Process mining: Discovery, conformance and enhancement of business processes, Springer-Verlag, Berlin, 2011.

Günther

C.W.

, Process mining in flexible environments, PhD dissertation, Eindhoven University of Technology, 2009.

Chandola

Banerjee

and Kumar

, Anomaly detection – a survey, Technical report, University of Minnesota, 2007.

et al., Classification of software behaviors for failure detection: A discriminative pattern mining approach, in: Proceedings of the 15th ACM International Conference on Knowledge Discovery and Data Mining, 2009, pp. 557–566.

Yang

W.S.

and Hwang

S.Y.

, A process-mining framework for the detection of healthcare fraud and abuse, Expert Systems with Applications 31(1) (2006), 56–68.

Münz

and Carle

, Traffic anomaly detection using k-means clustering, in: GI/ITG Workshop MMBnet, 2007.

van der Aalst

W.M.P.

and de Medeiros

A.K.A.

,Process mining and security: Detecting anomalous process executions and checking process conformance, Electronic Notes in Theoretical Computer Science 121 (2005), 3–21.

Swinnen

Depaire

and Jans

M.J.

, A process deviation analysis – a case study, Business Process Management Workshops, LNBIP, 99 (2012), 87–98, Springer, Heidelberg.

De Weerdt

et al., Leveraging process discovery with trace clustering and text mining for intelligent analysis of incident management processes, in: IEEE Congress on Evolutionary Computation (CEC 2012), 2012, 1–8.

10.

Bose

R.P.J.C.

and van der Aalst

W.M.P.

, Trace clustering based on conserved patterns: Towards achieving better process models, in: Business Process Management Workshops, LNBIP, 43 (2009), pp. 170–181, Springer, Heidelberg.

11.

Greco

Guzzo

and Pontieri

, Discovering expressive process models by clustering log traces, IEEE Transactions on Knowledge and Data Engineering 18(8) (2006), 1010–1027.

12.

Bezerra

and Wainer

, Algorithms for anomaly detection of traces in logs of process aware information systems, Information Systems 38(1) (2013), 33–44.

13.

Bezerra

and Wainer

, A dynamic threshold algorithm for anomaly detection in logs of process aware systems, Journal of Information and Data Management 3(3) (2012), 316–331.

14.

Bezerra

Wainer

and van der Aalst

W.M.P.

, Anomaly detection using process mining, Enterprise, Business-Process and Information Systems Modeling, 2009, 149–161.

15.

Jalali

and Baraani

, Genetic-based anomaly detection in logs of process aware systems, World Academy of Science Engineering and Technology 64 (2010), 304–309.

16.

Alves de Medeiros

A.K.

, Genetic process mining, PhD dissertation, Eindhoven University of Technology, 2006.

17.

Ghionna

Greco

and Guzzo

, Outlier detection techniques for process mining applications, Foundations of Intelligent Systems, 2008, 150–159.

18.

Greco

Guzzo

and Pontieri

, Discovering expressive process models by clustering log traces, IEEE Transactions on Knowledge and Data Engineering 18(8) (2006), 1010–1027.

19.

Song

Günther

C.W.

and van der Aalst

W.M.P

, Trace clustering in process mining, in: Business Process Management Workshops, LNBIP 17 (2009), pp. 109–120, Springer, Heidelberg.

20.

Burattin

and Sperduti

, PLG: A framework for the generation of business process models and their execution logs, in: Business Process Management Workshops, LNBIP 66 (2011), pp. 214–219. Springer, Heidelberg.

21.

De Weerdt

Vanthienen

and Baesens

, Active trace clustering for improved process discovery, IEEE Transactions on Knowledge and Data Engineering 25(12) (2013), 2708–2720.

A framework for detecting deviations in complex event logs

Abstract

Keywords

Get full access to this article

References