{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T03:43:06Z","timestamp":1765165386867,"version":"3.40.3"},"publisher-location":"Cham","reference-count":21,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319915623"},{"type":"electronic","value":"9783319915630"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-319-91563-0_1","type":"book-chapter","created":{"date-parts":[[2018,5,16]],"date-time":"2018-05-16T05:53:18Z","timestamp":1526449998000},"page":"3-18","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Association Rules for Anomaly Detection and Root Cause Analysis in Process Executions"],"prefix":"10.1007","author":[{"given":"Kristof","family":"B\u00f6hmer","sequence":"first","affiliation":[]},{"given":"Stefanie","family":"Rinderle-Ma","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2018,5,17]]},"reference":[{"key":"1_CR1","first-page":"3","volume":"121","author":"WM Van der Aalst","year":"2005","unstructured":"Van der Aalst, W.M., de Medeiros, A.K.A.: Process mining and security: detecting anomalous process executions and checking process conformance. Theor. Comput. Sci. 121, 3\u201321 (2005)","journal-title":"Theor. Comput. Sci."},{"key":"1_CR2","unstructured":"Agrawal, R., Srikant, R., et al.: Fast algorithms for mining association rules. In: Very Large Data Bases, vol. 1215, pp. 487\u2013499 (1994)"},{"key":"1_CR3","first-page":"149","volume":"29","author":"F Bezerra","year":"2009","unstructured":"Bezerra, F., et al.: Anomaly detection using process mining. Enterp. Bus. Process Inf. Syst. Model. 29, 149\u2013161 (2009)","journal-title":"Enterp. Bus. Process Inf. Syst. Model."},{"key":"1_CR4","doi-asserted-by":"crossref","unstructured":"B\u00f6hmer, K., Rinderle-Ma, S.: Anomaly detection in business process runtime behavior-challenges and limitations. arXiv arXiv:1705.06659 (2017)","DOI":"10.1007\/978-3-319-65000-5_5"},{"key":"1_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"77","DOI":"10.1007\/978-3-319-65000-5_5","volume-title":"Business Process Management","author":"K B\u00f6hmer","year":"2017","unstructured":"B\u00f6hmer, K., Rinderle-Ma, S.: Multi instance anomaly detection in business process executions. In: Carmona, J., Engels, G., Kumar, A. (eds.) BPM 2017. LNCS, vol. 10445, pp. 77\u201393. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-65000-5_5"},{"key":"1_CR6","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1007\/978-3-319-48472-3_5","volume-title":"Cooperative Information Systems","author":"K B\u00f6hmer","year":"2016","unstructured":"B\u00f6hmer, K., et al.: Multi-perspective anomaly detection in business process execution events. In: Debruyne, C., et al. (eds.) Cooperative Information Systems, pp. 80\u201398. Springer, Heidelberg (2016). https:\/\/doi.org\/10.1007\/978-3-319-48472-3_5"},{"key":"1_CR7","doi-asserted-by":"crossref","unstructured":"Brucker, A.D., Hang, I., L\u00fcckemeyer, G., Ruparel, R.: SecureBPMN: modeling and enforcing access control requirements in business processes. In: Access Control Models and Technologies, pp. 123\u2013126. ACM (2012)","DOI":"10.1145\/2295136.2295160"},{"issue":"3","key":"1_CR8","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1145\/1541880.1541882","volume":"41","author":"V Chandola","year":"2009","unstructured":"Chandola, V., Banerjee, A., Kumar, V.: Anomaly detection: a survey. Comput. Surv. 41(3), 15 (2009)","journal-title":"Comput. Surv."},{"key":"1_CR9","doi-asserted-by":"crossref","unstructured":"Chinchor, N., Sundheim, B.: MUC-5 evaluation metrics. In: Message Understanding, pp. 69\u201378. Computational Linguistics (1993)","DOI":"10.3115\/1072017.1072026"},{"key":"1_CR10","unstructured":"Czepa, C., et al.: Plausibility checking of formal business process specifications in linear temporal logic, pp. 1\u20138 (2016)"},{"issue":"1","key":"1_CR11","doi-asserted-by":"publisher","first-page":"74","DOI":"10.1016\/j.datak.2008.06.010","volume":"67","author":"G Greco","year":"2008","unstructured":"Greco, G., Guzzo, A., Pontieri, L.: Mining taxonomies of process models. Data Knowl. Eng. 67(1), 74\u2013102 (2008)","journal-title":"Data Knowl. Eng."},{"issue":"9","key":"1_CR12","doi-asserted-by":"publisher","first-page":"2250","DOI":"10.1109\/TKDE.2013.184","volume":"26","author":"M Gupta","year":"2014","unstructured":"Gupta, M., Gao, J., Aggarwal, C.C., Han, J.: Outlier detection for temporal data: a survey. Knowl. Data Eng. 26(9), 2250\u20132267 (2014)","journal-title":"Knowl. Data Eng."},{"issue":"4","key":"1_CR13","first-page":"443","volume":"6","author":"K Julisch","year":"2003","unstructured":"Julisch, K.: Clustering intrusion detection alarms to support root cause analysis. Inf. Syst. Secur. 6(4), 443\u2013471 (2003)","journal-title":"Inf. Syst. Secur."},{"key":"1_CR14","doi-asserted-by":"publisher","first-page":"209","DOI":"10.1016\/j.is.2015.02.007","volume":"54","author":"LT Ly","year":"2015","unstructured":"Ly, L.T., Maggi, F.M., Montali, M., Rinderle-Ma, S., van der Aalst, W.M.: Compliance monitoring in business processes: functionalities, application, and tool-support. Inf. Syst. 54, 209\u2013234 (2015)","journal-title":"Inf. Syst."},{"key":"1_CR15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"82","DOI":"10.1007\/978-3-642-25109-2_7","volume-title":"On the Move to Meaningful Internet Systems: OTM 2011","author":"LT Ly","year":"2011","unstructured":"Ly, L.T., Rinderle-Ma, S., Knuplesch, D., Dadam, P.: Monitoring business process compliance using compliance rule graphs. In: Meersman, R., et al. (eds.) OTM 2011. LNCS, vol. 7044, pp. 82\u201399. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-25109-2_7"},{"key":"1_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"262","DOI":"10.1007\/978-3-642-32885-5_21","volume-title":"Business Process Management","author":"E Ramezani","year":"2012","unstructured":"Ramezani, E., Fahland, D., van der Aalst, W.M.P.: Where did i misbehave? Diagnostic information in compliance checking. In: Barros, A., Gal, A., Kindler, E. (eds.) BPM 2012. LNCS, vol. 7481, pp. 262\u2013278. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-32885-5_21"},{"key":"1_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"90","DOI":"10.1007\/978-3-540-89054-6_5","volume-title":"Principles, Systems and Applications of IP Telecommunications. Services and Security for Next Generation Networks","author":"K Rieck","year":"2008","unstructured":"Rieck, K., Wahl, S., Laskov, P., Domschitz, P., M\u00fcller, K.-R.: A self-learning system for detection of anomalous SIP messages. In: Schulzrinne, H., State, R., Niccolini, S. (eds.) IPTComm 2008. LNCS, vol. 5310, pp. 90\u2013106. Springer, Heidelberg (2008). https:\/\/doi.org\/10.1007\/978-3-540-89054-6_5"},{"issue":"2","key":"1_CR18","first-page":"59","volume":"42","author":"R Sarno","year":"2015","unstructured":"Sarno, R., et al.: Hybrid association rule learning and process mining for fraud detection. Comput. Sci. 42(2), 59\u201372 (2015)","journal-title":"Comput. Sci."},{"key":"1_CR19","volume-title":"Introduction to Data Mining","author":"PN Tan","year":"2005","unstructured":"Tan, P.N., Steinbach, M., Kumar, V.: Introduction to Data Mining, 1st edn. Addison-Wesley, Boston (2005)","edition":"1"},{"key":"1_CR20","unstructured":"Vogelgesang, T., et al.: Multidimensional process mining: questions, requirements, and limitations. In: CAISE Forum, pp. 169\u2013176. Springer, Heidelberg (2016)"},{"key":"1_CR21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-43839-8","volume-title":"Design Science Methodology for Information Systems and Software Engineering","author":"R Wieringa","year":"2014","unstructured":"Wieringa, R.: Design Science Methodology for Information Systems and Software Engineering. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-662-43839-8"}],"container-title":["Lecture Notes in Computer Science","Advanced Information Systems Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-91563-0_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,12]],"date-time":"2024-03-12T18:35:28Z","timestamp":1710268528000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-91563-0_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783319915623","9783319915630"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-91563-0_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2018]]},"assertion":[{"value":"17 May 2018","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CAiSE","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Advanced Information Systems Engineering","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Tallinn","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Estonia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 June 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 June 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"caise2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/caise2018.ut.ee","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}