{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,31]],"date-time":"2025-05-31T05:09:19Z","timestamp":1748668159111,"version":"3.40.3"},"publisher-location":"Cham","reference-count":26,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031220630"},{"type":"electronic","value":"9783031220647"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-031-22064-7_29","type":"book-chapter","created":{"date-parts":[[2022,11,23]],"date-time":"2022-11-23T19:02:04Z","timestamp":1669230124000},"page":"397-412","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["An Association Rule Mining-Based Framework for\u00a0the\u00a0Discovery of\u00a0Anomalous Behavioral Patterns"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8156-6492","authenticated-orcid":false,"given":"Azadeh Sadat","family":"Mozafari Mehr","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6129-9278","authenticated-orcid":false,"given":"Renata","family":"M. de Carvalho","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3978-6464","authenticated-orcid":false,"given":"Boudewijn","family":"van Dongen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,11,24]]},"reference":[{"key":"29_CR1","doi-asserted-by":"crossref","unstructured":"DePoy, E., Gitlin, L.N. (eds.): Statistical analysis for experimental-type designs. In: DePoy, E., Gitlin, L.N. (eds.) Introduction to Research, 5th Edn., pp. 282\u2013310. Mosby, St. Louis (2016). Chapter 20","DOI":"10.1016\/B978-0-323-26171-5.00020-3"},{"key":"29_CR2","doi-asserted-by":"crossref","unstructured":"B\u00f6hmer, K., Rinderle-Ma, S.: Mining association rules for anomaly detection in dynamic process runtime behavior and explaining the root cause to users. Inf. Syst. 90, 101438 (2020). Advances in Information Systems Engineering Best Papers of CAiSE 2018","DOI":"10.1016\/j.is.2019.101438"},{"key":"29_CR3","doi-asserted-by":"publisher","unstructured":"van der Aalst, W.: Process Mining: Discovery, Conformance and Enhancement of Business Processes. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-19345-3","DOI":"10.1007\/978-3-642-19345-3"},{"key":"29_CR4","series-title":"Lecture Notes in Business Information Processing","doi-asserted-by":"publisher","first-page":"122","DOI":"10.1007\/978-3-642-20511-8_11","volume-title":"Business Process Management Workshops","author":"A Adriansyah","year":"2011","unstructured":"Adriansyah, A., van Dongen, B.F., van der Aalst, W.M.P.: Towards robust conformance checking. In: zur Muehlen, M., Su, J. (eds.) BPM 2010. LNBIP, vol. 66, pp. 122\u2013133. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-20511-8_11"},{"key":"29_CR5","doi-asserted-by":"crossref","unstructured":"Agrawal, R., Imieli\u0144ski, T., Swami, A.: Mining association rules between sets of items in large databases. In: Proceedings of the 1993 ACM SIGMOD International Conference on Management of Data, pp. 207\u2013216 (1993)","DOI":"10.1145\/170036.170072"},{"key":"29_CR6","unstructured":"Agrawal, R., Srikant, R., et al.: Fast algorithms for mining association rules. In: Proceedings 20th International Conference Very Large Data Bases, VLDB, vol. 1215, pp. 487\u2013499, Santiago, Chile (1994)"},{"key":"29_CR7","doi-asserted-by":"publisher","first-page":"172","DOI":"10.1016\/j.cose.2017.10.010","volume":"73","author":"M Alizadeh","year":"2018","unstructured":"Alizadeh, M., Lu, X., Fahland, D., Zannone, N., van der Aalst, W.: Linking data and process perspectives for conformance analysis. Comput. Secur. 73, 172\u2013193 (2018)","journal-title":"Comput. Secur."},{"key":"29_CR8","doi-asserted-by":"crossref","unstructured":"Aqra, I., Abdul Ghani, N., Maple, C., Machado, J., Sohrabi Safa, N.: Incremental algorithm for association rule mining under dynamic threshold. Appl. Sci. 9(24) (2019)","DOI":"10.3390\/app9245398"},{"issue":"23","key":"29_CR9","doi-asserted-by":"publisher","first-page":"16771","DOI":"10.1007\/s11042-019-08361-y","volume":"79","author":"L Chengyan","year":"2020","unstructured":"Chengyan, L., Feng, S., Sun, G.: DCE-miner: an association rule mining algorithm for multimedia based on the mapreduce framework. Multimedia Tools Appl. 79(23), 16771\u201316793 (2020)","journal-title":"Multimedia Tools Appl."},{"key":"29_CR10","doi-asserted-by":"publisher","unstructured":"van Dongen, B.: BPI Challenge 2017 (2 2017). https:\/\/doi.org\/10.4121\/uuid:5f3067df-f10b-45da-b98b-86ae4c7a310b","DOI":"10.4121\/uuid:5f3067df-f10b-45da-b98b-86ae4c7a310b"},{"key":"29_CR11","unstructured":"Han, J., Pei, J., Kamber, M.: Data mining: concepts and techniques. Elsevier (2011)"},{"key":"29_CR12","doi-asserted-by":"crossref","unstructured":"Jiawei, H., Jian, P., Yiwen, Y., Runying, M.: Mining frequent patterns without candidate generation: a frequent-pattern tree approach. In: Data Mining and Knowledge Discovery, pp. 53\u201387 (2004)","DOI":"10.1023\/B:DAMI.0000005258.31418.83"},{"issue":"7","key":"29_CR13","doi-asserted-by":"publisher","first-page":"493","DOI":"10.1016\/j.cose.2009.07.001","volume":"28","author":"KJ Knapp","year":"2009","unstructured":"Knapp, K.J., Morris, R.F., Jr., Marshall, T.E., Byrd, T.A.: Information security policy: an organizational-level process model. Comput. Secur. 28(7), 493\u2013508 (2009)","journal-title":"Comput. Secur."},{"key":"29_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"311","DOI":"10.1007\/978-3-642-38697-8_17","volume-title":"Application and Theory of Petri Nets and Concurrency","author":"SJJ Leemans","year":"2013","unstructured":"Leemans, S.J.J., Fahland, D., van der Aalst, W.M.P.: Discovering block-structured process models from event logs - a constructive approach. In: Colom, J.-M., Desel, J. (eds.) PETRI NETS 2013. LNCS, vol. 7927, pp. 311\u2013329. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-38697-8_17"},{"key":"29_CR15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"113","DOI":"10.1007\/978-3-642-40176-3_10","volume-title":"Business Process Management","author":"M de Leoni","year":"2013","unstructured":"de Leoni, M., van der Aalst, W.M.P.: Aligning event logs and process models for multi-perspective conformance checking: an approach based on integer linear programming. In: Daniel, F., Wang, J., Weber, B. (eds.) BPM 2013. LNCS, vol. 8094, pp. 113\u2013129. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-40176-3_10"},{"key":"29_CR16","series-title":"Advances in Intelligent Systems and Computing","doi-asserted-by":"publisher","first-page":"365","DOI":"10.1007\/978-981-15-8603-3_32","volume-title":"Proceedings of 6th International Conference on Harmony Search, Soft Computing and Applications","author":"K Liu","year":"2021","unstructured":"Liu, K., Wu, Y., Wei, W., Wang, Z., Zhu, J., Wang, H.: An interactive approach of rule mining and anomaly detection for internal risks. In: Nigdeli, S.M., Kim, J.H., Bekda\u015f, G., Yadav, A. (eds.) ICHSA 2020. AISC, vol. 1275, pp. 365\u2013376. Springer, Singapore (2021). https:\/\/doi.org\/10.1007\/978-981-15-8603-3_32"},{"issue":"2","key":"29_CR17","doi-asserted-by":"publisher","first-page":"173","DOI":"10.2307\/249574","volume":"16","author":"KD Loch","year":"1992","unstructured":"Loch, K.D., Carr, H.H., Warkentin, M.E.: Threats to information systems: today\u2019s reality, yesterday\u2019s understanding. MIS Q. 16(2), 173\u2013186 (1992)","journal-title":"MIS Q."},{"key":"29_CR18","doi-asserted-by":"crossref","unstructured":"Mannhardt, F., de Leoni, M., Reijers, H., van der Aalst, W.: Balanced multi-perspective checking of process conformance. BPMcenter.org (2014)","DOI":"10.1007\/s00607-015-0441-1"},{"key":"29_CR19","series-title":"Lecture Notes in Business Information Processing","doi-asserted-by":"publisher","first-page":"82","DOI":"10.1007\/978-3-030-79108-7_10","volume-title":"Intelligent Information Systems","author":"AS Mozafari Mehr","year":"2021","unstructured":"Mozafari Mehr, A.S., de Carvalho, R.M., van Dongen, B.: Detecting privacy, data and control-flow deviations in business processes. In: Nurcan, S., Korthaus, A. (eds.) CAiSE 2021. LNBIP, vol. 424, pp. 82\u201391. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-79108-7_10"},{"key":"29_CR20","unstructured":"Mozafari Mehr, A.S., de Carvalho, R.M., van Dongen, B.: MLA: a tool for multi-perspective conformance checking of business processes. In: Jans, M., De Weerdt, J., Depaire, B., Dumas, M., Janssenswillen, G. (eds.) ICPM 2021 Doctoral Consortium and Demo Track 2021, pp. 35\u201336 (2021). http:\/\/ceur-ws.org\/"},{"key":"29_CR21","doi-asserted-by":"publisher","first-page":"98","DOI":"10.1016\/j.ins.2016.03.003","volume":"352","author":"A Pika","year":"2016","unstructured":"Pika, A., van der Aalst, W.M., Wynn, M.T., Fidge, C.J., ter Hofstede, A.H.: Evaluating and predicting overall process risk using event logs. Inf. Sci. 352, 98\u2013120 (2016)","journal-title":"Inf. Sci."},{"key":"29_CR22","unstructured":"Rodrigues, A.M.B., et al.: Stairway to value: mining a loan application process (2017)"},{"key":"29_CR23","unstructured":"Sarno, R., Dewandono, R.D., Ahmad, T., Naufal, M.F., Sinaga, F.: Hybrid association rule learning and process mining for fraud detection. IAENG Int. J. Comput. Sci. 42(2) (2015)"},{"key":"29_CR24","unstructured":"Scheithauer, G., Henne, R.L., Kerciku, A., Waldenmaier, R., Riedel, U.: Suggestions for improving a bank\u2019s loan application process based on a process mining analysis (2017)"},{"key":"29_CR25","doi-asserted-by":"publisher","first-page":"944","DOI":"10.1016\/j.asoc.2018.01.035","volume":"68","author":"F Setiawan","year":"2018","unstructured":"Setiawan, F., Yahya, B.N.: Improved behavior model based on sequential rule mining. Appl. Soft Comput. 68, 944\u2013960 (2018)","journal-title":"Appl. Soft Comput."},{"issue":"2","key":"29_CR26","doi-asserted-by":"publisher","first-page":"101","DOI":"10.1057\/ejis.2009.12","volume":"18","author":"M Warkentin","year":"2009","unstructured":"Warkentin, M., Willison, R.: Behavioral and policy issues in information systems security: the insider threat. Eur. J. Inf. Syst. 18(2), 101\u2013105 (2009)","journal-title":"Eur. J. Inf. Syst."}],"container-title":["Lecture Notes in Computer Science","Advanced Data Mining and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-22064-7_29","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,11,23]],"date-time":"2022-11-23T19:07:09Z","timestamp":1669230429000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-22064-7_29"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783031220630","9783031220647"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-22064-7_29","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"24 November 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The source code and inputs required to reproduce the experiments can be found at .","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Reproducibility"}},{"value":"ADMA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Advanced Data Mining and Applications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Brisbane, QLD","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Australia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 November 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2 December 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"adma2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/adma2022.uqcloud.net\/index.html","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"CMT3","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"198","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"72","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"36% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"5","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}