{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T15:45:55Z","timestamp":1779205555083,"version":"3.51.4"},"reference-count":28,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2021,9,3]],"date-time":"2021-09-03T00:00:00Z","timestamp":1630627200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,9,3]],"date-time":"2021-09-03T00:00:00Z","timestamp":1630627200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Comput Virol Hack Tech"],"published-print":{"date-parts":[[2022,6]]},"DOI":"10.1007\/s11416-021-00398-8","type":"journal-article","created":{"date-parts":[[2021,9,3]],"date-time":"2021-09-03T18:26:20Z","timestamp":1630693580000},"page":"127-139","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":17,"title":["Anomaly detection in business processes logs using social network analysis"],"prefix":"10.1007","volume":"18","author":[{"given":"Mina","family":"Ebrahim","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Seyed Alireza Hashemi","family":"Golpayegani","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,9,3]]},"reference":[{"key":"398_CR1","doi-asserted-by":"crossref","unstructured":"Bezerra, F., Wainer, J., van der Aalst, W.M.P.: Anomaly detection using process mining. In: Enterprise, business-process and information systems modeling, pp. 149\u2013161. Springer (2009)","DOI":"10.1007\/978-3-642-01862-6_13"},{"key":"398_CR2","volume-title":"Process aware information systems","author":"D Marlon","year":"2005","unstructured":"Marlon, D., Wil van der, A., Arthur Ter, H.: Process aware information systems, vol. 1. Wiley Online Library, Hoboken (2005)"},{"issue":"2","key":"398_CR3","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1504\/IJBPIM.2011.040204","volume":"5","author":"F Bezerra","year":"2011","unstructured":"Bezerra, F., Wainer, J.: Fraud detection in process aware systems. Int. J. Bus. Process. Integr. Manag. 5(2), 121\u2013129 (2011)","journal-title":"Int. J. Bus. Process. Integr. Manag."},{"key":"398_CR4","unstructured":"Bezerra, F., Wainer, J., et al.: Anomaly detection algorithms in business process logs. In Proceedings of the 10th International Conference on Enterprise Information Systems (ICEIS), volume AIDSS, Barcelona, Spain, pp 11\u201318 (2008)"},{"key":"398_CR5","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1016\/j.entcs.2004.10.013","volume":"121","author":"A Wil MP Van der","year":"2005","unstructured":"Wil MP Van der, A., Ana Karla A de, M.: Process mining and security: Detecting anomalous process executions and checking process conformance. Elect. Notes Theor. Comput. Sci. 121, 3\u201321 (2005)","journal-title":"Elect. Notes Theor. Comput. Sci."},{"key":"398_CR6","doi-asserted-by":"crossref","unstructured":"Bezerra, F., Wainer, J.: Anomaly detection algorithms in logs of process aware systems. In: Proceedings of the 2008 ACM symposium on Applied computing, pp. 951\u2013952 (2008)","DOI":"10.1145\/1363686.1363904"},{"key":"398_CR7","unstructured":"Bezerra, F., Wainer, J.: Towards detecting fraudulent executions in business process aware systems. In: WfPM 2007 Workshop on Workflows and Process Management (2007)"},{"key":"398_CR8","doi-asserted-by":"crossref","unstructured":"Alves De Medeiros, A.K., Weijters, A.J.M.M., Van der Aalst, W.M.P.: Genetic process mining: A basic approach and its challenges. In: International Conference on Business Process Management, pp. 203\u2013215. Springer (2005)","DOI":"10.1007\/11678564_18"},{"issue":"2","key":"398_CR9","doi-asserted-by":"publisher","first-page":"245","DOI":"10.1007\/s10618-006-0061-7","volume":"14","author":"AKA de Medeiros","year":"2007","unstructured":"de Medeiros, A.K.A., Weijters, A.J.M.M., van der Aalst, W.M.P.: Genetic process mining: an experimental evaluation. Data Min. Knowl. Discov. 14(2), 245\u2013304 (2007)","journal-title":"Data Min. Knowl. Discov."},{"issue":"1","key":"398_CR10","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1016\/j.is.2012.04.004","volume":"38","author":"F Bezerra","year":"2013","unstructured":"Bezerra, F., Wainer, J.: Algorithms for anomaly detection of traces in logs of process aware information systems. Inf. Syst. 38(1), 33\u201344 (2013)","journal-title":"Inf. Syst."},{"key":"398_CR11","doi-asserted-by":"crossref","unstructured":"Zhao, W., Zhao, X.: Process mining from the organizational perspective. In: Foundations of intelligent systems, pp. 701\u2013708. Springer (2014)","DOI":"10.1007\/978-3-642-54924-3_66"},{"key":"398_CR12","doi-asserted-by":"crossref","unstructured":"Sch\u00f6nig, S., Cabanillas, C., Jablonski, S., Mendling, J.: Mining the organisational perspective in agile business processes. In: Enterprise, Business-Process and Information Systems Modeling, pp. 37\u201352. Springer (2015)","DOI":"10.1007\/978-3-319-19237-6_3"},{"key":"398_CR13","volume-title":"Process mining discovery, conformance and enhancement of business processes","author":"D Van","year":"2011","unstructured":"Van, D.: Process mining discovery, conformance and enhancement of business processes. Springer, Heidelberg (2011)"},{"key":"398_CR14","first-page":"3","volume":"75","author":"A Eckleder","year":"2008","unstructured":"Eckleder, A., Freytag, T.: Woped a tool for teaching, analyzing and visualizing workflow nets. Petri Net Newslett. 75, 3\u20138 (2008)","journal-title":"Petri Net Newslett."},{"issue":"5","key":"398_CR15","doi-asserted-by":"crossref","first-page":"e1256","DOI":"10.1002\/widm.1256","volume":"8","author":"T Shazia","year":"2018","unstructured":"Shazia, T., Fabiola SF, P., Sofia, F., Jo\u00e3o, G.: Social network analysis: An overview. Wiley Interdiscip. Rev. Data Min. Knowl. Discov. 8(5), e1256 (2018)","journal-title":"Wiley Interdiscip. Rev. Data Min. Knowl. Discov."},{"issue":"1","key":"398_CR16","doi-asserted-by":"publisher","first-page":"64","DOI":"10.1016\/j.is.2007.07.001","volume":"33","author":"A Rozinat","year":"2008","unstructured":"Rozinat, A., Van der Aalst, W.M.P.: Conformance checking of processes based on monitoring real behavior. Inf. Syst. 33(1), 64\u201395 (2008)","journal-title":"Inf. Syst."},{"key":"398_CR17","doi-asserted-by":"crossref","unstructured":"Rozinat, A., Van der Aalst, W.M.P.: Conformance testing: Measuring the fit and appropriateness of event logs and process models. In: International conference on business process management, pp. 163\u2013176. Springer (2005)","DOI":"10.1007\/11678564_15"},{"key":"398_CR18","doi-asserted-by":"crossref","unstructured":"Nolle, T., Seeliger, A., M\u00fchlh\u00e4user, M.: Unsupervised anomaly detection in noisy business process event logs using denoising autoencoders. In: International conference on discovery science, pp. 442\u2013456. Springer (2016)","DOI":"10.1007\/978-3-319-46307-0_28"},{"key":"398_CR19","doi-asserted-by":"crossref","unstructured":"Rogge-Solti, A., Kasneci, G.: Temporal anomaly detection in business processes. In: International Conference on Business Process Management, pp. 234\u2013249. Springer (2014)","DOI":"10.1007\/978-3-319-10172-9_15"},{"key":"398_CR20","doi-asserted-by":"crossref","unstructured":"B\u00f6hmer, K., Rinderle-Ma, S.: Multi instance anomaly detection in business process executions. In: International Conference on Business Process Management, pp. 77\u201393. Springer (2017)","DOI":"10.1007\/978-3-319-65000-5_5"},{"issue":"11","key":"398_CR21","doi-asserted-by":"publisher","first-page":"1875","DOI":"10.1007\/s10994-018-5702-8","volume":"107","author":"T Nolle","year":"2018","unstructured":"Nolle, T., Luettgen, S., Seeliger, A., M\u00fchlh\u00e4user, M.: Analyzing business process anomalies using autoencoders. Mach. Learn. 107(11), 1875\u20131893 (2018)","journal-title":"Mach. Learn."},{"key":"398_CR22","doi-asserted-by":"crossref","unstructured":"Nolle, T., Luettgen, S., Seeliger, A., M\u00fchlh\u00e4user, M.: Binet: Multi-perspective business process anomaly classification. Inform. Syst. 101458 (2019)","DOI":"10.1016\/j.is.2019.101458"},{"key":"398_CR23","doi-asserted-by":"crossref","unstructured":"Nolle, T., Seeliger, A., M\u00fchlh\u00e4user, M.: Binet: multivariate business process anomaly detection using deep learning. In: International Conference on Business Process Management, pp. 271\u2013287. Springer (2018)","DOI":"10.1007\/978-3-319-98648-7_16"},{"key":"398_CR24","doi-asserted-by":"crossref","unstructured":"Marques Tavares, G., Barbon, S.: Analysis of language inspired trace representation for anomaly detection. In: ADBIS, TPDL and EDA 2020 Common Workshops and Doctoral Consortium, pp. 296\u2013308. Springer (2020)","DOI":"10.1007\/978-3-030-55814-7_25"},{"key":"398_CR25","doi-asserted-by":"publisher","first-page":"89","DOI":"10.1016\/j.dam.2013.09.017","volume":"176","author":"MCV Nascimento","year":"2014","unstructured":"Nascimento, M.C.V.: Community detection in networks via a spectral heuristic based on the clustering coefficient. Discret. Appl. Math. 176, 89\u201399 (2014)","journal-title":"Discret. Appl. Math."},{"key":"398_CR26","doi-asserted-by":"publisher","first-page":"36","DOI":"10.1016\/j.neucom.2018.04.086","volume":"336","author":"C Salavati","year":"2019","unstructured":"Salavati, C., Abdollahpouri, A., Manbari, Z.: Ranking nodes in complex networks based on local structure and improving closeness centrality. Neurocomputing 336, 36\u201345 (2019)","journal-title":"Neurocomputing"},{"key":"398_CR27","doi-asserted-by":"publisher","DOI":"10.1002\/9781119146841","volume-title":"Fraud analytics using descriptive, predictive, and social network techniques: a guide to data science for fraud detection","author":"B Baesens","year":"2015","unstructured":"Baesens, B., Van Vlasselaer, V., Verbeke, W.: Fraud analytics using descriptive, predictive, and social network techniques: a guide to data science for fraud detection. Wiley, Hoboken (2015)"},{"key":"398_CR28","doi-asserted-by":"crossref","unstructured":"Akoglu, L., McGlohon, M., Faloutsos, C.: Oddball: Spotting anomalies in weighted graphs. In: Pacific-Asia conference on knowledge discovery and data mining, pp. 410\u2013421. Springer (2010)","DOI":"10.1007\/978-3-642-13672-6_40"}],"container-title":["Journal of Computer Virology and Hacking Techniques"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-021-00398-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11416-021-00398-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-021-00398-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,8]],"date-time":"2023-11-08T08:35:02Z","timestamp":1699432502000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11416-021-00398-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,9,3]]},"references-count":28,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2022,6]]}},"alternative-id":["398"],"URL":"https:\/\/doi.org\/10.1007\/s11416-021-00398-8","relation":{},"ISSN":["2263-8733"],"issn-type":[{"value":"2263-8733","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,9,3]]},"assertion":[{"value":"5 November 2020","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 August 2021","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 September 2021","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declaration"}},{"value":"The authors have no conflicts of interest to declare that are relevant to the content of this article.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflicts of interest"}},{"value":"Code is available on request","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Code availability"}}]}}