{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T03:27:54Z","timestamp":1784604474005,"version":"3.55.0"},"reference-count":75,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2023,3,10]],"date-time":"2023-03-10T00:00:00Z","timestamp":1678406400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,3,10]],"date-time":"2023-03-10T00:00:00Z","timestamp":1678406400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Bus Inf Syst Eng"],"published-print":{"date-parts":[[2023,8]]},"DOI":"10.1007\/s12599-023-00794-y","type":"journal-article","created":{"date-parts":[[2023,3,26]],"date-time":"2023-03-26T21:32:00Z","timestamp":1679866320000},"page":"441-462","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":53,"title":["A Systematic Review of Anomaly Detection for Business Process Event Logs"],"prefix":"10.1007","volume":"65","author":[{"given":"Jonghyeon","family":"Ko","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marco","family":"Comuzzi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,3,10]]},"reference":[{"key":"794_CR5","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-319-47578-3","volume-title":"Outlier analysis","author":"CC Aggarwal","year":"2017","unstructured":"Aggarwal CC (2017) An introduction to outlier analysis. In: Aggarwal CC (ed) Outlier analysis. Springer, Heidelberg, pp 1\u201334"},{"issue":"7","key":"794_CR6","doi-asserted-by":"publisher","first-page":"1138","DOI":"10.3390\/ijerph16071138","volume":"16","author":"R Andrews","year":"2019","unstructured":"Andrews R, Wynn MT, Vallmuur K, Ter Hofstede AH, Bosley E, Elcock M, Rashford S (2019) Leveraging data quality to better prepare for process mining: an approach illustrated through analysing road trauma pre-hospital retrieval and transport processes in queensland. Int J Environ Res Pub Health 16(7):1138","journal-title":"Int J Environ Res Pub Health"},{"key":"794_CR7","doi-asserted-by":"publisher","first-page":"172","DOI":"10.1016\/j.jss.2018.05.016","volume":"143","author":"L Bao","year":"2018","unstructured":"Bao L, Li Q, Lu P, Lu J, Ruan T, Zhang K (2018) Execution anomaly detection in large-scale systems through console log analysis. J Syst Softw 143:172\u2013186","journal-title":"J Syst Softw"},{"issue":"2","key":"794_CR8","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1504\/IJBPIM.2011.040204","volume":"5","author":"F Bezerra","year":"2011","unstructured":"Bezerra F, Wainer J (2011) Fraud detection in process aware systems. Int J Bus Process Integ Manag 5(2):121\u2013129","journal-title":"Int J Bus Process Integ Manag"},{"issue":"1","key":"794_CR9","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1016\/j.is.2012.04.004","volume":"38","author":"F Bezerra","year":"2013","unstructured":"Bezerra F, Wainer J (2013) Algorithms for anomaly detection of traces in logs of process aware information systems. Inf Syst 38(1):33\u201344","journal-title":"Inf Syst"},{"key":"794_CR10","doi-asserted-by":"publisher","first-page":"149","DOI":"10.1007\/978-3-642-01862-6_13","volume-title":"Enterprise, business-process and information systems modeling","author":"F Bezerra","year":"2009","unstructured":"Bezerra F, Wainer J, van der Aalst WMP (2009) Anomaly detection using process mining. Enterprise, business-process and information systems modeling. Springer, Heidelberg, pp 149\u2013161"},{"key":"794_CR11","doi-asserted-by":"crossref","unstructured":"B\u00f6hmer K, Rinderle-Ma S (2016) Multi-perspective anomaly detection in business process execution events. Otm confederated international conferences on the move to meaningful internet systems. Springer, Heidelberg, pp 80\u201398","DOI":"10.1007\/978-3-319-48472-3_5"},{"key":"794_CR12","doi-asserted-by":"crossref","unstructured":"B\u00f6hmer K, Rinderle-Ma S (2017) Anomaly detection in business process runtime behavior\u2013challenges and limitations. arXiv preprint arXiv:1705.06659","DOI":"10.1007\/978-3-319-65000-5_5"},{"issue":"101","key":"794_CR13","first-page":"438","volume":"90","author":"K B\u00f6hmer","year":"2020","unstructured":"B\u00f6hmer K, Rinderle-Ma S (2020) Mining association rules for anomaly detection in dynamic process runtime behavior and explaining the root cause to users. Inf Syst 90(101):438","journal-title":"Inf Syst"},{"issue":"2","key":"794_CR14","doi-asserted-by":"publisher","first-page":"669","DOI":"10.1007\/s10115-019-01365-y","volume":"62","author":"M Boldt","year":"2020","unstructured":"Boldt M, Borg A, Ickin S, Gustafsson J (2020) Anomaly detection of event sequences using multiple temporal resolutions and markov chains. Knowl Inf Syst 62(2):669\u2013686","journal-title":"Knowl Inf Syst"},{"key":"794_CR16","first-page":"165","volume-title":"International conference on business process management","author":"A Burattin","year":"2017","unstructured":"Burattin A, Carmona J (2017) A framework for online conformance checking. International conference on business process management. Springer, Heidelberg, pp 165\u2013177"},{"key":"794_CR17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99414-7","volume-title":"Conformance checking","author":"J Carmona","year":"2018","unstructured":"Carmona J, van Dongen B, Solti A, Weidlich M (2018) Conformance checking. Springer, Heidelberg"},{"issue":"5","key":"794_CR18","doi-asserted-by":"publisher","first-page":"823","DOI":"10.1109\/TKDE.2010.235","volume":"24","author":"V Chandola","year":"2010","unstructured":"Chandola V, Banerjee A, Kumar V (2010) Anomaly detection for discrete sequences: a survey. IEEE Transact Knowld Data Eng 24(5):823\u2013839","journal-title":"IEEE Transact Knowld Data Eng"},{"issue":"21","key":"794_CR19","doi-asserted-by":"publisher","first-page":"4502","DOI":"10.3390\/app9214502","volume":"9","author":"S Choi","year":"2019","unstructured":"Choi S, Youm S, Kang YS (2019) Development of scalable on-line anomaly detection system for autonomous and adaptive manufacturing processes. Appl Sci 9(21):4502","journal-title":"Appl Sci"},{"issue":"07","key":"794_CR20","doi-asserted-by":"publisher","first-page":"1860009","DOI":"10.1142\/S0218213018600096","volume":"27","author":"A Cuzzocrea","year":"2018","unstructured":"Cuzzocrea A, Folino F, Guarascio M, Pontieri L (2018) Deviance-aware discovery of high-quality process models. Int J Artific Intell Tool 27(07):1860009","journal-title":"Int J Artific Intell Tool"},{"key":"794_CR65","doi-asserted-by":"crossref","unstructured":"da\u00a0Silva CE, da\u00a0Silva JDS, Paterson C, Calinescu R (2017) Self-adaptive role-based access control for business processes. In: 2017 IEEE\/ACM 12th international symposium on software engineering for adaptive and self-managing systems (SEAMS). IEEE, pp 193\u2013203","DOI":"10.1109\/SEAMS.2017.13"},{"key":"794_CR21","doi-asserted-by":"publisher","first-page":"462","DOI":"10.1007\/978-3-319-98648-7_27","volume-title":"International conference on business process management","author":"C Di Francescomarino","year":"2018","unstructured":"Di Francescomarino C, Ghidini C, Maggi FM, Milani F (2018) Predictive process monitoring methods: Which one suits me best? International conference on business process management. Springer, Heidelberg, pp 462\u2013479"},{"key":"794_CR22","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1007\/978-3-319-45348-4_3","volume-title":"International conference on business process management","author":"BF van Dongen","year":"2016","unstructured":"van Dongen BF, Carmona J, Chatain T (2016) A unified approach for measuring precision and generalization based on anti-alignments. International conference on business process management. Springer, Heidelberg, pp 39\u201356"},{"key":"794_CR23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33143-5","volume-title":"Fundamentals of business process management","author":"M Dumas","year":"2013","unstructured":"Dumas M, La Rosa M, Mendling J, Reijers HA et al (2013) Fundamentals of business process management, vol 1. Springer, Heidelberg"},{"key":"794_CR24","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511973000","volume-title":"Machine learning: the art and science of algorithms that make sense of data","author":"P Flach","year":"2012","unstructured":"Flach P (2012) Machine learning: the art and science of algorithms that make sense of data. Cambridge University Press, Cambridge"},{"issue":"12","key":"794_CR25","doi-asserted-by":"publisher","first-page":"1005","DOI":"10.1016\/j.datak.2011.07.002","volume":"70","author":"F Folino","year":"2011","unstructured":"Folino F, Greco G, Guzzo A, Pontieri L (2011) Mining usage scenarios in business processes: Outlier-aware discovery and run-time prediction. Data Knowl Eng 70(12):1005\u20131029","journal-title":"Data Knowl Eng"},{"key":"794_CR26","doi-asserted-by":"crossref","unstructured":"Galanti R, Coma-Puig B, de\u00a0Leoni M, Carmona J, Navarin N (2020) Explainable predictive process monitoring. In: 2020 2nd international conference on process mining (ICPM). IEEE, pp 1\u20138","DOI":"10.1109\/ICPM49681.2020.00012"},{"key":"794_CR27","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1007\/978-0-387-35508-5_2","volume-title":"Research advances in database and information systems security","author":"AK Ghosh","year":"2000","unstructured":"Ghosh AK, Schwartzbard A (2000) Analyzing the performance of program behavior profiling for intrusion detection. Research advances in database and information systems security. Springer, Heidelberg, pp 19\u201332"},{"key":"794_CR28","first-page":"244","volume-title":"International workshop on databases in networked information systems","author":"N Gupta","year":"2015","unstructured":"Gupta N, Anand K, Sureka A (2015) Pariket: mining business process logs for root cause analysis of anomalous incidents. International workshop on databases in networked information systems. Springer, Heidelberg, pp 244\u2013263"},{"key":"794_CR29","unstructured":"Han J, Pei J, Mortazavi-Asl B, Pinto H, Chen Q, Dayal U, Hsu M (2001) Prefixspan: mining sequential patterns efficiently by prefix-projected pattern growth. In: Proceedings of the 17th international conference on data engineering. Citeseer, pp 215\u2013224"},{"issue":"sup1","key":"794_CR30","doi-asserted-by":"publisher","first-page":"312","DOI":"10.1080\/12460125.2020.1780780","volume":"29","author":"M Harl","year":"2020","unstructured":"Harl M, Weinzierl S, Stierle M, Matzner M (2020) Explainable predictive business process monitoring using gated graph neural networks. J Decis Syst 29(sup1):312\u2013327","journal-title":"J Decis Syst"},{"issue":"2","key":"794_CR31","doi-asserted-by":"publisher","first-page":"85","DOI":"10.1023\/B:AIRE.0000045502.10941.a9","volume":"22","author":"V Hodge","year":"2004","unstructured":"Hodge V, Austin J (2004) A survey of outlier detection methodologies. Artific Intell Rev 22(2):85\u2013126","journal-title":"Artific Intell Rev"},{"issue":"3","key":"794_CR32","doi-asserted-by":"publisher","first-page":"167","DOI":"10.1016\/j.artmed.2015.09.001","volume":"65","author":"Z Huang","year":"2015","unstructured":"Huang Z, Dong W, Ji L, Yin L, Duan H (2015) On local anomaly detection and analysis for clinical pathways. Artific Intell Med 65(3):167\u2013177","journal-title":"Artific Intell Med"},{"issue":"5","key":"794_CR33","first-page":"175","volume":"10","author":"S Huda","year":"2016","unstructured":"Huda S, Sarno R, Ahmad T (2016) Increasing accuracy of process-based fraud detection using a behavior model. Int J Softw Eng Appl 10(5):175\u2013188","journal-title":"Int J Softw Eng Appl"},{"key":"794_CR34","doi-asserted-by":"publisher","first-page":"81","DOI":"10.1007\/978-3-642-30428-6_7","volume-title":"Pacific-Asia workshop on intelligence and security informatics","author":"VH Huynh","year":"2012","unstructured":"Huynh VH, Le AN (2012) Process mining and security: visualization in database intrusion detection. Pacific-Asia workshop on intelligence and security informatics. Springer, Heidelberg, pp 81\u201395"},{"key":"794_CR35","doi-asserted-by":"crossref","unstructured":"Junior SB, Ceravolo P, Damiani E, Omori NJ, Tavares GM (2020) Anomaly detection on event logs with a scarcity of labels. In: 2020 2nd international conference on process mining (ICPM). IEEE, pp 161\u2013168","DOI":"10.1109\/ICPM49681.2020.00032"},{"key":"794_CR36","unstructured":"Kitchenham B, Charters S (2007) Guidelines for performing systematic literature reviews in software engineering. Tech. rep., EBSE Technical Report EBSE-2007-01"},{"key":"794_CR37","first-page":"53","volume":"549","author":"J Ko","year":"2021","unstructured":"Ko J, Comuzzi M (2021) Detecting anomalies in business process event logs using statistical leverage. Inf Syst 549:53\u201367","journal-title":"Inf Syst"},{"issue":"101","key":"794_CR38","first-page":"894","volume":"104","author":"J Ko","year":"2022","unstructured":"Ko J, Comuzzi M (2022) Keeping our rivers clean: Information-theoretic online anomaly detection for streaming business process events. Inf Syst 104(101):894","journal-title":"Inf Syst"},{"key":"794_CR39","first-page":"401","volume-title":"International conference on analysis of images, social networks and texts","author":"AA Kolosova","year":"2019","unstructured":"Kolosova AA, Lomazova IA (2019) Detection of anomalies in the criminal proceedings based on the analysis of event logs. International conference on analysis of images, social networks and texts. Springer, Heidelberg, pp 401\u2013410"},{"key":"794_CR40","doi-asserted-by":"crossref","unstructured":"Koschmider A, Kaczmarek K, Krause M, Zelst SJv, (2021) Demystifying noise and outliers in event logs: review and future directions. In: International conference on business process management. Springer, Heidelberg, pp 123\u2013135","DOI":"10.1007\/978-3-030-94343-1_10"},{"issue":"4","key":"794_CR41","doi-asserted-by":"publisher","first-page":"759","DOI":"10.3233\/IDA-160044","volume":"21","author":"Guangming Li","year":"2017","unstructured":"Li Guangming, van der Aalst Wil M.P. (2017) A framework for detecting deviations in complex event logs. Intell Data Anal 21(4):759\u2013779. https:\/\/doi.org\/10.3233\/IDA-160044","journal-title":"Intell Data Anal"},{"key":"794_CR42","doi-asserted-by":"crossref","unstructured":"Li X, Xue Y, Malin B (2012) Detecting anomalous user behaviors in workflow-driven web applications. In: 2012 IEEE 31st symposium on reliable distributed systems. IEEE, pp 1\u201310","DOI":"10.1109\/SRDS.2012.19"},{"key":"794_CR43","unstructured":"Lillegraven TN, Wolden AC (2010) Design of a bayesian recommender system for tourists presenting a solution to the cold-start user problem. Master\u2019s thesis, Institutt for datateknikk og informasjonsvitenskap"},{"key":"794_CR44","first-page":"196","volume-title":"International conference on business information systems","author":"C Linn","year":"2016","unstructured":"Linn C, Werth D (2016) Sequential anomaly detection techniques in business processes. International conference on business information systems. Springer, Heidelberg, pp 196\u2013208"},{"key":"794_CR45","doi-asserted-by":"publisher","first-page":"103","DOI":"10.1016\/j.cose.2018.06.002","volume":"78","author":"D Myers","year":"2018","unstructured":"Myers D, Suriadi S, Radke K, Foo E (2018) Anomaly detection for industrial control systems using process mining. Comput Secur 78:103\u2013125","journal-title":"Comput Secur"},{"key":"794_CR46","doi-asserted-by":"publisher","first-page":"132","DOI":"10.1016\/j.eswa.2019.04.052","volume":"131","author":"HTC Nguyen","year":"2019","unstructured":"Nguyen HTC, Lee S, Kim J, Ko J, Comuzzi M (2019) Autoencoders for improving quality of process event logs. Expert Syst Appl 131:132\u2013147","journal-title":"Expert Syst Appl"},{"issue":"11","key":"794_CR47","doi-asserted-by":"publisher","first-page":"1875","DOI":"10.1007\/s10994-018-5702-8","volume":"107","author":"T Nolle","year":"2018","unstructured":"Nolle T, Luettgen S, Seeliger A, M\u00fchlh\u00e4user M (2018) Analyzing business process anomalies using autoencoders. Mach Learn 107(11):1875\u20131893","journal-title":"Mach Learn"},{"key":"794_CR48","doi-asserted-by":"crossref","unstructured":"Nolle T, Luettgen S, Seeliger A, M\u00fchlh\u00e4user M (2019) Binet: multi-perspective business process anomaly classification. Inf Syst 101458","DOI":"10.1016\/j.is.2019.101458"},{"key":"794_CR49","doi-asserted-by":"publisher","first-page":"319","DOI":"10.1007\/978-3-030-49435-3_20","volume-title":"International conference on advanced information systems engineering","author":"T Nolle","year":"2020","unstructured":"Nolle T, Seeliger A, Thoma N, M\u00fchlh\u00e4user M (2020) Deepalign: alignment-based process anomaly correction using recurrent neural networks. International conference on advanced information systems engineering. Springer, Heidelberg, pp 319\u2013333"},{"key":"794_CR50","doi-asserted-by":"publisher","first-page":"26893","DOI":"10.1109\/ACCESS.2020.2971604","volume":"8","author":"B Omair","year":"2020","unstructured":"Omair B, Alturki A (2020) A systematic literature review of fraud detection metrics in business processes. IEEE Access 8:26893\u201326903","journal-title":"IEEE Access"},{"key":"794_CR51","doi-asserted-by":"crossref","unstructured":"Pauwels S, Calders T (2019) An anomaly detection technique for business processes based on extended dynamic Bayesian networks. In: Proceedings of the 34th ACM\/SIGAPP symposium on applied computing, pp 494\u2013501","DOI":"10.1145\/3297280.3297326"},{"key":"794_CR52","doi-asserted-by":"publisher","first-page":"215","DOI":"10.1016\/j.sigpro.2013.12.026","volume":"99","author":"MA Pimentel","year":"2014","unstructured":"Pimentel MA, Clifton DA, Clifton L, Tarassenko L (2014) A review of novelty detection. Signal Process 99:215\u2013249","journal-title":"Signal Process"},{"key":"794_CR53","doi-asserted-by":"crossref","unstructured":"Rama-Maneiro E, Vidal J, Lama M (2021) Deep learning for predictive business process monitoring: review and benchmark. IEEE Transact Service Comput","DOI":"10.1109\/TSC.2021.3139807"},{"issue":"2","key":"794_CR54","first-page":"116","volume":"7","author":"CE Ribeiro","year":"2016","unstructured":"Ribeiro CE, Z\u00e1rate LE (2016) Data preparation for longitudinal data mining: a case study on human ageing. J Inf Data Manag 7(2):116\u2013116","journal-title":"J Inf Data Manag"},{"issue":"12","key":"794_CR55","first-page":"1","volume":"12","author":"TS Riera","year":"2020","unstructured":"Riera TS, Higuera JRB, Higuera JB, Herraiz JJM, Montalvo JAS (2020) Prevention and fighting against web attacks through anomaly detection technology. A systematic review. Sustain 12(12):1\u201345","journal-title":"Sustain"},{"issue":"5","key":"794_CR56","doi-asserted-by":"publisher","DOI":"10.1002\/widm.1266","volume":"8","author":"M Riveiro","year":"2018","unstructured":"Riveiro M, Pallotta G, Vespe M (2018) Maritime anomaly detection: a review. Wiley Interdisc Rev Data Min Knowl Discov 8(5):e1266","journal-title":"Wiley Interdisc Rev Data Min Knowl Discov"},{"key":"794_CR57","first-page":"51","volume-title":"International conference on intelligent data engineering and automated learning","author":"A Rullo","year":"2020","unstructured":"Rullo A, Guzzo A, Serra E, Tirrito E (2020) A framework for the multi-modal analysis of novel behavior in business processes. International conference on intelligent data engineering and automated learning. Springer, Heidelberg, pp 51\u201363"},{"key":"794_CR58","doi-asserted-by":"crossref","unstructured":"Saini V, Singh P, Sureka A (2020) Control-flow based anomaly detection in the bug-fixing process of open-source projects. In: Proceedings of the 13th innovations in software engineering conference on formerly known as India software engineering conference, pp 1\u201311","DOI":"10.1145\/3385032.3385038"},{"key":"794_CR59","doi-asserted-by":"publisher","first-page":"115","DOI":"10.1007\/978-3-319-93931-5_9","volume-title":"International conference on business information systems","author":"MF Sani","year":"2018","unstructured":"Sani MF, van Zelst SJ, van der Aalst WMP (2018) Repairing outlier behaviour in event logs. International conference on business information systems. Springer, Heidelberg, pp 115\u2013131"},{"key":"794_CR60","first-page":"5","volume":"14","author":"MF Sani","year":"2019","unstructured":"Sani MF, van Zelst SJ, van der Aalst WMP (2019) Repairing outlier behaviour in event logs using contextual behaviour. Enterp Modell Inf Syst Architec (EMISAJ) 14:5\u20131","journal-title":"Enterp Modell Inf Syst Architec (EMISAJ)"},{"issue":"106","key":"794_CR61","first-page":"584","volume":"146","author":"S Saraeian","year":"2020","unstructured":"Saraeian S, Shirazi B (2020) Process mining-based anomaly detection of additive manufacturing process activities using a game theory modeling approach. Comput Indust Eng 146(106):584","journal-title":"Comput Indust Eng"},{"issue":"1","key":"794_CR62","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s40537-019-0277-1","volume":"7","author":"R Sarno","year":"2020","unstructured":"Sarno R, Sinaga F, Sungkono KR (2020) Anomaly detection in business processes using process mining and fuzzy association rule learning. J Big Data 7(1):1\u201319","journal-title":"J Big Data"},{"key":"794_CR63","doi-asserted-by":"publisher","first-page":"533","DOI":"10.1007\/978-3-030-65310-1_39","volume-title":"International conference on service-oriented computing","author":"G Schumann","year":"2020","unstructured":"Schumann G, Kruse F, Nonnenmacher J (2020) A practice-oriented, control-flow-based anomaly detection approach for internal process audits. International conference on service-oriented computing. Springer, Heidelberg, pp 533\u2013543"},{"key":"794_CR64","doi-asserted-by":"crossref","unstructured":"Setiawan W, Thounaojam Y, Narayan A (2020) Gwad: Greedy workflow graph anomaly detection framework for system traces. In: 2020 IEEE international conference on systems, man, and cybernetics (SMC). IEEE, pp 2790\u20132796","DOI":"10.1109\/SMC42975.2020.9282938"},{"issue":"1","key":"794_CR66","first-page":"307","volume":"9","author":"K Singh","year":"2012","unstructured":"Singh K, Upadhyaya S (2012) Outlier detection: applications and techniques. Int J Comput Sci Issue (IJCSI) 9(1):307","journal-title":"Int J Comput Sci Issue (IJCSI)"},{"issue":"12","key":"794_CR67","doi-asserted-by":"publisher","first-page":"4945","DOI":"10.3390\/su12124945","volume":"12","author":"T Sureda Riera","year":"2020","unstructured":"Sureda Riera T, Bermejo Higuera JR, Bermejo Higuera J, Mart\u00ednez Herraiz JJ, Sicilia Montalvo JA (2020) Prevention and fighting against web attacks through anomaly detection technology. A systematic review. Sustain 12(12):4945","journal-title":"Sustain"},{"key":"794_CR68","doi-asserted-by":"publisher","first-page":"296","DOI":"10.1007\/978-3-030-55814-7_25","volume-title":"ADBIS, TPDL and EDA 2020 common workshops and doctoral consortium","author":"GM Tavares","year":"2020","unstructured":"Tavares GM, Barbon S (2020) Analysis of language inspired trace representation for anomaly detection. ADBIS, TPDL and EDA 2020 common workshops and doctoral consortium. Springer, Heidelberg, pp 296\u2013308"},{"issue":"1","key":"794_CR69","first-page":"54","volume":"12","author":"GM Tavares","year":"2019","unstructured":"Tavares GM, da Costa VGT, Martins VE, Ceravolo P, Barbon S Jr (2019) Leveraging anomaly detection in business process with data stream mining. iSys-Revista Brasileira de Sistemas de Informa\u00e7\u00e3o 12(1):54\u201375","journal-title":"iSys-Revista Brasileira de Sistemas de Informa\u00e7\u00e3o"},{"key":"794_CR1","doi-asserted-by":"publisher","first-page":"125","DOI":"10.1007\/978-3-642-19345-3_5","volume-title":"Process mining","author":"WMP van der Aalst","year":"2011","unstructured":"van der Aalst WMP (2011) Process discovery: an introduction. In: van der Aalst WMP (ed) Process mining. Springer, Heidelberg, pp 125\u2013156"},{"key":"794_CR2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49851-4","volume-title":"Process mining: data science in action","author":"WMP van der Aalst","year":"2016","unstructured":"van der Aalst WMP (2016) Process mining: data science in action, vol 2. Springer, Heidelberg"},{"key":"794_CR3","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1016\/j.entcs.2004.10.013","volume":"121","author":"WMP van der Aalst","year":"2005","unstructured":"van der Aalst WMP, de Medeiros AKA (2005) Process mining and security: detecting anomalous process executions and checking process conformance. Electron Notes Theor Comput Sci 121:3\u201321","journal-title":"Electron Notes Theor Comput Sci"},{"key":"794_CR4","volume-title":"Robotic process automation","author":"WMP van der Aalst","year":"2018","unstructured":"van der Aalst WMP, Bichler M, Heinzl A (2018) Robotic process automation. Springer, Heidelberg"},{"key":"794_CR70","unstructured":"Vijayakamal M, Vasumathi D (2020) Unsupervised learning methods for anomaly detection and log quality improvement using process event log. Int J Adv Sci Technol 1109\u20131125"},{"key":"794_CR71","unstructured":"Witten IH, Frank E, Hall MA, Pal CJ, DATA M (2005) Practical machine learning tools and techniques. In: Data min, vol\u00a02"},{"issue":"2","key":"794_CR72","doi-asserted-by":"publisher","first-page":"407","DOI":"10.1007\/s10115-017-1060-2","volume":"54","author":"SJ van Zelst","year":"2018","unstructured":"van Zelst SJ, van Dongen BF, van der Aalst WMP (2018) Event stream-based process discovery using abstract representations. Knowl Inf Syst 54(2):407\u2013435","journal-title":"Knowl Inf Syst"},{"issue":"101","key":"794_CR73","first-page":"451","volume":"90","author":"SJ van Zelst","year":"2020","unstructured":"van Zelst SJ, Sani MF, Ostovar A, Conforti R, La Rosa M (2020) Detection and removal of infrequent behavior from event streams of business processes. Inf Syst 90(101):451","journal-title":"Inf Syst"},{"issue":"5","key":"794_CR15","doi-asserted-by":"publisher","first-page":"483","DOI":"10.1007\/s12599-021-00718-8","volume":"63","author":"J vom Brocke","year":"2021","unstructured":"vom Brocke J, Jans M, Mendling J, Reijers HA (2021) A five-level framework for research on process mining. Bus Inf Syst Eng 63(5):483\u2013490","journal-title":"Bus Inf Syst Eng"},{"issue":"121","key":"794_CR74","first-page":"021","volume":"172","author":"P Zerbino","year":"2021","unstructured":"Zerbino P, Stefanini A, Aloini D (2021) Process science in action: a literature review on process mining in business management. Technol Forecast Soc Change 172(121):021","journal-title":"Technol Forecast Soc Change"},{"issue":"2","key":"794_CR75","doi-asserted-by":"publisher","first-page":"83","DOI":"10.4018\/ijbdcn.2017070107","volume":"13","author":"T Zhu","year":"2017","unstructured":"Zhu T, Guo Y, Ju A, Ma J, Wang X (2017) An insider threat detection method based on business process mining. Int J Bus Data Commun Netw (IJBDCN) 13(2):83\u201398","journal-title":"Int J Bus Data Commun Netw (IJBDCN)"}],"container-title":["Business & Information Systems Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s12599-023-00794-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s12599-023-00794-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s12599-023-00794-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,7,27]],"date-time":"2023-07-27T08:16:06Z","timestamp":1690445766000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s12599-023-00794-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,10]]},"references-count":75,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2023,8]]}},"alternative-id":["794"],"URL":"https:\/\/doi.org\/10.1007\/s12599-023-00794-y","relation":{},"ISSN":["2363-7005","1867-0202"],"issn-type":[{"value":"2363-7005","type":"print"},{"value":"1867-0202","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,10]]},"assertion":[{"value":"16 March 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 February 2023","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 March 2023","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}