{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T16:06:28Z","timestamp":1781021188963,"version":"3.54.1"},"reference-count":93,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2023,3,12]],"date-time":"2023-03-12T00:00:00Z","timestamp":1678579200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2023,3,12]],"date-time":"2023-03-12T00:00:00Z","timestamp":1678579200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/100012997","name":"Arab Academy for Science, Technology & Maritime Transport","doi-asserted-by":"crossref","id":[{"id":"10.13039\/100012997","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Big Data"],"abstract":"<jats:title>Abstract<\/jats:title><jats:p>The detection of anomalous behavior in business process data is a crucial task for preventing failures that may jeopardize the performance of any organization. Supervised learning techniques are impracticable because of the difficulties of gathering huge amounts of labeled business process anomaly data. For this reason, unsupervised learning techniques and semi-supervised learning approaches trained on entirely labeled normal data have dominated this domain for a long time. However, these methods do not work well because of the absence of prior knowledge of true anomalies. In this study, we propose a deep weakly supervised reinforcement learning-based approach to identify anomalies in business processes by leveraging limited labeled anomaly data. The proposed approach is intended to use a small collection of labeled anomalous data while exploring a huge set of unlabeled data to find new classes of anomalies that are outside the scope of the labeled anomalous data. We created a unique reward function that combined the supervisory signal supplied by a variational autoencoder trained on unlabeled data with the supervisory signal provided by the environment\u2019s reward. To further reduce data deficiency, we introduced a sampling method to allow the effective exploration of the unlabeled data and to address the imbalanced data problem, which is a common problem in the anomaly detection field. This approach depends on the proximity between the data samples in the latent space of the variational autoencoder. Furthermore, to efficiently model the sequential nature of business process data and to handle the long-term dependences, we used a long short-term memory network combined with a self-attention mechanism to develop the agent of our reinforcement learning model. Multiple scenarios were used to test the proposed approach on real-world and synthetic datasets. The findings revealed that the proposed approach outperformed five competing approaches by efficiently using the few available anomalous examples.<\/jats:p>","DOI":"10.1186\/s40537-023-00708-5","type":"journal-article","created":{"date-parts":[[2023,3,12]],"date-time":"2023-03-12T11:02:22Z","timestamp":1678618942000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":32,"title":["Deep reinforcement learning for data-efficient weakly supervised business process anomaly detection"],"prefix":"10.1186","volume":"10","author":[{"given":"Eman Abd","family":"Elaziz","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Radwa","family":"Fathalla","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mohamed","family":"Shaheen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,3,12]]},"reference":[{"issue":"1","key":"708_CR1","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s40537-019-0277-1","volume":"7","author":"R Sarno","year":"2020","unstructured":"Sarno R, Sinaga F, Sungkono K. Anomaly detection in business processes using process mining and fuzzy association rule learning. J Big Data. 2020;7(1):1\u201319.","journal-title":"J Big Data."},{"key":"708_CR2","unstructured":"What is Business Process. https:\/\/www.comidor.com\/knowledge-base\/business-process-management-kb\/business-process-definition\/. Accessed 18 Apr 2020."},{"issue":"1","key":"708_CR3","doi-asserted-by":"publisher","first-page":"37","DOI":"10.1109\/MIC.2004.1260702","volume":"8","author":"J Jung","year":"2004","unstructured":"Jung J, Hur W, Kang SH, Kim H. Business process choreography for b2b collaboration. IEEE Internet Comput. 2004;8(1):37\u201345.","journal-title":"IEEE Internet Comput"},{"key":"708_CR4","doi-asserted-by":"crossref","unstructured":"Maaradji A, Dumas M, Rosa ML, Ostovar A. Fast and Accurate Business Process Drift Detection. Proc. of BPM. 2015.","DOI":"10.1007\/978-3-319-23063-4_27"},{"key":"708_CR5","doi-asserted-by":"crossref","unstructured":"Nolle T, Seeliger A, M\u00fchlh\u00e4user M. Binet: multivariate business process anomaly detection using deep learning. In: Lecture notes in computer science international conference on business process management. 2018. p. 271\u2013287.","DOI":"10.1007\/978-3-319-98648-7_16"},{"issue":"1","key":"708_CR6","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1057\/palgrave.ivs.9500115","volume":"5","author":"MC Hao","year":"2006","unstructured":"Hao MC, Keim DA, Dayal U, Schneidewind J. Business process impact visualization and anomaly detection. Inf Vis. 2006;5(1):15\u201327.","journal-title":"Inf Vis"},{"key":"708_CR7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49851-4","volume-title":"Process mining: data science in action","author":"WMP van der Aalst","year":"2016","unstructured":"vander Aalst WMP. Process mining: data science in action. Berlin: Springer; 2016."},{"key":"708_CR8","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1016\/j.entcs.2004.10.013","volume":"121","author":"W Aalst","year":"2005","unstructured":"Aalst W, Medeiros A. Process mining and security: detecting anomalous process executions and checking process conformance. Electr Notes Theor Comput Sci. 2005;121:3\u201321.","journal-title":"Electr Notes Theor Comput Sci"},{"issue":"2","key":"708_CR9","doi-asserted-by":"publisher","first-page":"145","DOI":"10.1007\/s10618-007-0065-y","volume":"15","author":"L Wen","year":"2007","unstructured":"Wen L, Aalst W, Wang J, Sun J. Mining process models with non-free-choice constructs. Data Min Knowl Disc. 2007;15(2):145\u201380.","journal-title":"Data Min Knowl Disc"},{"key":"708_CR10","doi-asserted-by":"crossref","unstructured":"Bezerra F, Wainer J. Anomaly detection algorithms in logs of process aware systems. Proceedings of the 2008 ACM symposium on Applied computing; 2008. p. 951\u2013952.","DOI":"10.1145\/1363686.1363904"},{"key":"708_CR11","doi-asserted-by":"crossref","unstructured":"Bezerra F, Wainer J, Aalst W. Anomaly detection using process mining. In Enterprise, business-process and information systems modeling. Springer; 2009. p. 149\u2013161.","DOI":"10.1007\/978-3-642-01862-6_13"},{"key":"708_CR12","doi-asserted-by":"crossref","unstructured":"Swinnen J, Depaire B, Jans M. A process deviation analysis\u2014a case study. Business Process Management Workshops, LNBIP, Springer, Heidelber; 2012; 99: 87\u201398.","DOI":"10.1007\/978-3-642-28108-2_8"},{"issue":"4","key":"708_CR13","doi-asserted-by":"publisher","first-page":"759","DOI":"10.3233\/IDA-160044","volume":"21","author":"G Li","year":"2017","unstructured":"Li G, van der Aalst WMP. A framework for detecting deviations in complex event logs. Intell Data Anal. 2017;21(4):759\u201379.","journal-title":"Intell Data Anal"},{"key":"708_CR14","doi-asserted-by":"crossref","unstructured":"Rogge-Solti A, Kasneci G. Temporal anomaly detection in business processes. In: Business Process Management. Springer; 2014. p. 234\u2013249.","DOI":"10.1007\/978-3-319-10172-9_15"},{"issue":"2","key":"708_CR15","first-page":"59","volume":"42","author":"R Sarno","year":"2015","unstructured":"Sarno R, Dewandono RD, Ahmad T, Naufal MF, Sinaga F. Hybrid association rule learning and process mining for fraud detection. Int J Comput Sci. 2015;42(2):59\u201372.","journal-title":"Int J Comput Sci"},{"key":"708_CR16","doi-asserted-by":"crossref","unstructured":"Sarno R, Sinaga FP. Business Process anomaly detection using ontology-based process modelling and multi-level class association rule learning. In: International Conference on Computer, Control, Informatics and Its Applications (IC3INA). Bandung; 2015. p. 12\u20137.","DOI":"10.1109\/IC3INA.2015.7377738"},{"key":"708_CR17","doi-asserted-by":"crossref","unstructured":"Zhu T, Guo Y, Ma J, Ju A. Business process mining based insider threat detection system. In: Xhafa F, Barolli L, Amato F (eds). Advances on P2P, parallel, grid, cloud and internet computing. International conference on P2P parallel grid cloud and internet computing Lecture notes on data engineering and communications technologies. Vol 1. Springer, Cham; 2017. p. 467\u2013478.","DOI":"10.1007\/978-3-319-49109-7_44"},{"key":"708_CR18","first-page":"80","volume":"391\u2013392","author":"PY Hsu","year":"2016","unstructured":"Hsu PY, Chuang YC, Lo YC, He SC. Using contextualized activity-level duration to discover irregular process instances in business operations. Inf Sci. 2016;391\u2013392:80\u201398.","journal-title":"Inf Sci"},{"key":"708_CR19","doi-asserted-by":"publisher","first-page":"1005","DOI":"10.1016\/j.datak.2011.07.002","volume":"70","author":"F Folino","year":"2010","unstructured":"Folino F, Greco G, Guzzo A, Pontieri L. Mining usage scenarios in business processes: outlier-aware discovery and run-time prediction. Data Knowl Eng. 2010;70:1005\u201329.","journal-title":"Data Knowl Eng"},{"key":"708_CR20","doi-asserted-by":"crossref","unstructured":"B\u00f6hmer K, Rinderle Ma S. Multi-perspective anomaly detection in business process execution events. In: On the move to meaningful internet systems: OTM 2016 conferences. Lecture notes in computer science, vol 10033. Springer, Cham; 2016. p. 80\u201398.","DOI":"10.1007\/978-3-319-48472-3_5"},{"key":"708_CR21","doi-asserted-by":"crossref","unstructured":"Nolle T, Seeliger A, M\u00fchlh\u00e4user M. Unsupervised anomaly detection in noisy business process event logs using denoising autoencoders. In: Lecture notes in computer science international conference on discovery science. Springer, Berlin; 2016. p. 442\u2013456.","DOI":"10.1007\/978-3-319-46307-0_28"},{"key":"708_CR22","doi-asserted-by":"crossref","unstructured":"Krajsica P, Franczyk B. Variational autoencoder for anomaly detection in event data in online process mining. In: Proceedings of the 23rd International Conference on Enterprise Information Systems; 2021. p. 567\u2013574.","DOI":"10.5220\/0010375905670574"},{"key":"708_CR23","doi-asserted-by":"crossref","unstructured":"Krajsic P, Franczyk B. Semi-supervised anomaly detection in business process event data using self-attention based classification. In: Procedia Computer Science, 25th International Conference on Knowledge-Based and Intelligent Information and Engineering Systems; 2021. p. 39\u201348.","DOI":"10.1016\/j.procs.2021.08.005"},{"key":"708_CR24","doi-asserted-by":"publisher","first-page":"44","DOI":"10.1093\/nsr\/nwx106","volume":"5","author":"Z Zhou","year":"2018","unstructured":"Zhou Z. A brief introduction to weakly supervised learning. Natl Sci Rev. 2018;5:44\u201353.","journal-title":"Natl Sci Rev"},{"key":"708_CR25","doi-asserted-by":"crossref","unstructured":"Liu Z, Miao Z, Zhan X, Wang J, Gong B, Yu SX. Largescale long-tailed recognition in an open world. In: IEEE conference on computer vision and pattern recognition; 2019. p. 2537\u20132546.","DOI":"10.1109\/CVPR.2019.00264"},{"key":"708_CR26","doi-asserted-by":"crossref","unstructured":"Salakhutdinov R, Torralba A, Tenenbaum J Learning to share visual appearance for multiclass object detection. In: IEEE conference on computer vision and pattern recognition (CVPR); 2011.","DOI":"10.1109\/CVPR.2011.5995720"},{"key":"708_CR27","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/1541880.1541882","volume":"41","author":"V Chandola","year":"2009","unstructured":"Chandola V, Banerjee A, Kumar V. Anomaly detection: a survey. ACM Comput Surv. 2009;41:1\u201358.","journal-title":"ACM Comput Surv"},{"key":"708_CR28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-47578-3","volume-title":"Outlier analysis","author":"CC Aggarwal","year":"2017","unstructured":"Aggarwal CC. Outlier analysis. Berlin: Springer; 2017."},{"key":"708_CR29","unstructured":"Malhotra P, Vig L, Shroff G, Agarwal P. Long short term memory networks for anomaly detection in time series. In: 23rd ESANN\u2014European symposium on artificial neural networks, computational intelligence and machine learning; 2015."},{"key":"708_CR30","doi-asserted-by":"crossref","unstructured":"Chauhan S, Vig L. Anomaly detection in ECG time signals via deep long short-term memory networks. Proceedings of the IEEE international conference data sci. adv anal (DSAA); 2015. p. 1\u20137.","DOI":"10.1109\/DSAA.2015.7344872"},{"key":"708_CR31","doi-asserted-by":"publisher","first-page":"1991","DOI":"10.1109\/ACCESS.2018.2886457","volume":"7","author":"M Munir","year":"2019","unstructured":"Munir M, Siddiqui SA, Dengel A, Ahmed S. Deepant: a deep learning approach for unsupervised anomaly detection in time series. IEEE Access. 2019;7:1991\u20132005.","journal-title":"IEEE Access"},{"key":"708_CR32","doi-asserted-by":"publisher","first-page":"18042","DOI":"10.1109\/ACCESS.2017.2747560","volume":"5","author":"M Lopez-Martin","year":"2017","unstructured":"Lopez-Martin M, Carro B, Sanchez-Esguevillas A. Lloret J Network traffic classifier with convolutional and recurrent neural networks for Internet of Things. IEEE Access. 2017;5:18042\u201350.","journal-title":"IEEE Access"},{"key":"708_CR33","doi-asserted-by":"publisher","first-page":"3127","DOI":"10.1109\/TNNLS.2019.2935975","volume":"31","author":"T Ergen","year":"2019","unstructured":"Ergen T, Kozat SS. Unsupervised anomaly detection with LSTM neural networks. IEEE Trans Neural Netw Learn Syst. 2019;31:3127\u201341.","journal-title":"IEEE Trans Neural Netw Learn Syst"},{"key":"708_CR34","doi-asserted-by":"crossref","unstructured":"Guo T, Xu Z, Yao X, Chen H, Aberer K, Funaya K. Robust online time series prediction with recurrent neural networks. In 2016 IEEE international conference on data science and advanced analytics (DSAA), Montreal, QC, Canada. IEEE; 2016. p. 816\u2013825","DOI":"10.1109\/DSAA.2016.92"},{"key":"708_CR35","doi-asserted-by":"publisher","first-page":"129","DOI":"10.1016\/j.dss.2017.04.003","volume":"100","author":"J Evermann","year":"2017","unstructured":"Evermann J, Rehse JR, Fettke P. Predicting process behaviour using deep learning. Decis Support Syst. 2017;100:129\u201340.","journal-title":"Decis Support Syst"},{"key":"708_CR36","doi-asserted-by":"crossref","unstructured":"Bontemps L, Cao VL, McDermott J, Le-Khac N. Collective anomaly detection based on long short term memory recurrent neural network. In: Lecture notes in computer science international conference on future data and security engineering. Springer; 2016. p. 141\u2013152.","DOI":"10.1007\/978-3-319-48057-2_9"},{"key":"708_CR37","unstructured":"Lipton ZC, Kale DC, Elkan C, Wetzell R. Learning to diagnose with LSTM recurrent neural networks. 2016."},{"key":"708_CR38","doi-asserted-by":"crossref","unstructured":"Buda TS, Caglayan B, Assem H, DeepAD: a generic framework based on deep learning for time series anomaly detection. In: Lecture notes in computer science conference on knowledge discovery and data mining. Berlin: Springer; 2018. p. 577\u2013588.","DOI":"10.1007\/978-3-319-93034-3_46"},{"key":"708_CR39","doi-asserted-by":"crossref","unstructured":"Hundman K, Constantinou V, Laporte C, Colwell I, Soderstrom T. Detecting spacecraft anomalies using lstms and nonparametric dynamic thresholding. In. Proceedings of the 24th ACM SIGKDD international conference on knowledge discovery and data mining, ser. Acad Med. KDD\u201918; 2018. p. 387\u2013395.","DOI":"10.1145\/3219819.3219845"},{"key":"708_CR40","doi-asserted-by":"crossref","unstructured":"Du M, Li F, Zheng G, Srikumar V. Deeplog: anomaly detection and diagnosis from system logs through deep learning. In: Proceedings of the acad med ACM SIGSAC conference on computer and communications security; 2017. p. 1285\u20131298.","DOI":"10.1145\/3133956.3134015"},{"key":"708_CR41","unstructured":"Tuor A, Kaplan S, Hutchinson B, Nichols N, Robinson S. Deep learning for unsupervised insider threat detection in structured cybersecurity data streams. 2017."},{"key":"708_CR42","doi-asserted-by":"publisher","first-page":"1468","DOI":"10.3390\/app8091468","volume":"8","author":"T Amarbayasgalan","year":"2018","unstructured":"Amarbayasgalan T, Jargalsaikhan B, Ryu KH. Unsupervised novelty detection using deep autoencoders with density based clustering. Appl Sci. 2018;8:1468.","journal-title":"Appl Sci"},{"key":"708_CR43","unstructured":"Schreyer M, Sattarov T, Borth D, Dengel A, Reimer B. Detection of anomalies in large scale accounting data using deep autoencoder networks. In: CoRR; 2017. p. 1\u201319."},{"key":"708_CR44","doi-asserted-by":"crossref","unstructured":"Luo T, Nagarajan SG. Distributed anomaly detection using autoencoder neural networks in WSN for IoT. In: IEEE international conference on communications (ICC);2018. p 1\u20136.","DOI":"10.1109\/ICC.2018.8422402"},{"key":"708_CR45","doi-asserted-by":"crossref","unstructured":"Kieu T, Yang B, Jensen CS. Outlier detection for multidimensional time series using deep neural networks. In: 2018 19th IEEE international conference on mobile data management (MDM); 2018. p. 125\u2013134.","DOI":"10.1109\/MDM.2018.00029"},{"key":"708_CR46","doi-asserted-by":"crossref","unstructured":"Zhou C, Paffenroth RC. Anomaly detection with robust deep autoencoders. In: Proceedings of the 23rd ACM SIGKDD international conference on knowledge discovery and data mining. Acad Med; 2017. p. 665\u2013674.","DOI":"10.1145\/3097983.3098052"},{"key":"708_CR47","unstructured":"Malhotra P, Ramakrishnan A, Anand G, Vig L, Agarwal P, Shroff G. LSTM-based encoder-decoder for multi-sensor anomaly detection. 2016."},{"key":"708_CR48","doi-asserted-by":"crossref","unstructured":"Omeara C, Schlag L, Wickler M. Applications of deep learning neural networks to satellite telemetry monitoring. In: 2018 SpaceOps conference; 2018.","DOI":"10.2514\/6.2018-2558"},{"key":"708_CR49","unstructured":"Laptev N. Anogen: deep anomaly generator. In: Outlier Detection De-constructed (ODD) Workshop; 2018."},{"key":"708_CR50","doi-asserted-by":"crossref","unstructured":"Lim SK, Loo Y, Tran NT, Cheung NM, Roig G, Elovici Y. Doping: generative data augmentation for unsupervised anomaly detection with GAN. In: 2018 IEEE international conference on data mining (ICDM). 2018. p. 1122\u20131127.","DOI":"10.1109\/ICDM.2018.00146"},{"key":"708_CR51","unstructured":"Li D, Chen D, Goh J, Ng Sk. Anomaly detection with generative adversarial networks for multivariate time series. 2018."},{"issue":"3","key":"708_CR52","doi-asserted-by":"publisher","first-page":"859","DOI":"10.1016\/j.asoc.2009.10.003","volume":"10","author":"X Xu","year":"2010","unstructured":"Xu X. Sequential anomaly detection based on temporal-difference learning: principles, models and case studies. Appl Soft Comput. 2010;10(3):859\u201367.","journal-title":"Appl Soft Comput"},{"key":"708_CR53","doi-asserted-by":"crossref","unstructured":"Zhong C, Gursoy MC, Velipasalar S. Deep actor-critic reinforcement learning for anomaly detection. 2019.","DOI":"10.1109\/GLOBECOM38437.2019.9013223"},{"key":"708_CR54","doi-asserted-by":"crossref","unstructured":"Huang C, Wu Y, Zuo Y, Pei K, Min G. Towards experienced anomaly detector through reinforcement learning. In: Proceedings of the thirty-second aaai conference on artificial intelligence, Riverside, New Orleans. 2018.","DOI":"10.1609\/aaai.v32i1.12130"},{"key":"708_CR55","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2020.103919","volume":"95","author":"M Yu","year":"2020","unstructured":"Yu M, Sun S. Policy-based reinforcement learning for time series anomaly detection. Eng Appl Artif Intell. 2020;95: 103919.","journal-title":"Eng Appl Artif Intell"},{"key":"708_CR56","unstructured":"Malla DB, Kimura T, Sogabe M, Sakamoto K, Sogabe T. Development of anomaly prediction detection method using bayesian inverse reinforcement. In: Learning 34th annual conference of the Japanese society for artificial intelligence. 2020."},{"key":"708_CR57","doi-asserted-by":"crossref","unstructured":"Oh M, Iyengar G. Sequential anomaly detection using inverse reinforcement learning. In: Proceedings of the 25th ACM SIGKDD international conference on knowledge discovery and data mining; 2019. p. 1480\u20131490.","DOI":"10.1145\/3292500.3330932"},{"key":"708_CR58","unstructured":"Burattin A, PLG2: Multiperspective Processes Randomization and Simulation for Online and Offline Settings. 2015."},{"key":"708_CR59","doi-asserted-by":"crossref","unstructured":"Tamersoy A, Roundy K, Chau DH. Guilt by association: Large scale malware detection by mining file-relation graphs. In KDD; 2014. p. 1524\u20131533.","DOI":"10.1145\/2623330.2623342"},{"key":"708_CR60","doi-asserted-by":"crossref","unstructured":"Sultani W, Chen C, Shah M. Real-world anomaly detection in surveillance videos. In CVPR; 2018. 6479\u20136488.","DOI":"10.1109\/CVPR.2018.00678"},{"key":"708_CR61","volume-title":"Reinforcement learning: an introduction","author":"RS Sutton","year":"1998","unstructured":"Sutton RS, Barto AG. Reinforcement learning: an introduction. Cambridge: MIT Press; 1998."},{"key":"708_CR62","unstructured":"Sutskever I, Vinyals O, Le QV. Sequence to sequence learning with neural networks, In Advances in neural information processing systems; 2014. p. 3104\u20133112."},{"key":"708_CR63","unstructured":"Hellaby Watkins CJC. Learning from delayed rewards. Ph.D. Dissertation. King\u2019s College, Cambridge. 1989."},{"issue":"7540","key":"708_CR64","doi-asserted-by":"publisher","first-page":"529","DOI":"10.1038\/nature14236","volume":"518","author":"V Mnih","year":"2015","unstructured":"Mnih V, Kavukcuoglu K, Silver D, Rusu AA, Veness J, Bellemare MG, et al. Human-level control through deep reinforcement learning. Nature. 2015;518(7540):529\u201333.","journal-title":"Nature"},{"key":"708_CR65","doi-asserted-by":"publisher","first-page":"220","DOI":"10.1016\/j.tins.2010.01.006","volume":"33","author":"J O\u2019Neill","year":"2010","unstructured":"O\u2019Neill J, Bouverie BP, Dupret D, Csicsvari J. Play it again: reactivation of waking experience and memory. Trends Neurosci. 2010;33:220\u20139.","journal-title":"Trends Neurosci"},{"issue":"2","key":"708_CR66","doi-asserted-by":"publisher","first-page":"943","DOI":"10.1109\/TNSE.2020.3004312","volume":"8","author":"X Ma","year":"2021","unstructured":"Ma X, Shi W. AESMOTE: adversarial reinforcement learning with SMOTE for anomaly detection. IEEE Trans Netw Sci Eng. 2021;8(2):943\u201356.","journal-title":"IEEE Trans Netw Sci Eng"},{"issue":"3","key":"708_CR67","doi-asserted-by":"publisher","first-page":"41","DOI":"10.3390\/computers11030041","volume":"11","author":"H Alavizadeh","year":"2022","unstructured":"Alavizadeh H, Alavizadeh H, Jang-Jaccard J. Deep Q-learning based reinforcement learning approach for network intrusion detection. Computers. 2022;11(3):41.","journal-title":"Computers"},{"key":"708_CR68","doi-asserted-by":"publisher","first-page":"1735","DOI":"10.1162\/neco.1997.9.8.1735","volume":"9","author":"S Hochreiter","year":"1997","unstructured":"Hochreiter S, Schmidhuber J. Long short-term memory. Neural Comput. 1997;9:1735\u201380.","journal-title":"Neural Comput"},{"key":"708_CR69","doi-asserted-by":"crossref","unstructured":"Cheng J, Dong L, Lapata M. Long short-term memory-networks for machine reading. In: Proceedings of the 2016 Conference on Empirical Methods in Natural Language Processing. 2016. p. 551\u2013561.","DOI":"10.18653\/v1\/D16-1053"},{"key":"708_CR70","doi-asserted-by":"crossref","unstructured":"Rahman, L., Mohammed, N., Al Azad, A.K.: A new lstm model by introducing biological cell state. In: 2016 3rd International Conference on Electrical Engineering and Information Communication Technology (ICEEICT); 2016. p. 1\u20136.","DOI":"10.1109\/CEEICT.2016.7873164"},{"key":"708_CR71","unstructured":"Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A., Kaiser,L., Polosukhin, I.: Attention is all you need. 31st Conference on Neural Information Processing Systems (NIPS 2017)."},{"key":"708_CR72","doi-asserted-by":"crossref","unstructured":"Wang, J., Yang, Y., Mao, J., Huang, Z., Huang, C., Xu, W.: Cnn-rnn: A unified framework for multi-label image classification. 2016 IEEE Conference on Computer Vision and Pattern Recognition .2016.","DOI":"10.1109\/CVPR.2016.251"},{"key":"708_CR73","doi-asserted-by":"crossref","unstructured":"Zhao H, Jia J, Koltun V. Exploring self-attention for image recognition. p. 10073\u201310082 .2020.","DOI":"10.1109\/CVPR42600.2020.01009"},{"key":"708_CR74","doi-asserted-by":"crossref","unstructured":"Mia Xu Chen, Orhan Firat, Ankur Bapna, Melvin Johnson, Wolfgang Macherey, George Foster, Llion Jones, Mike Schuster, Noam Shazeer, Niki Parmar,Ashish Vaswani, Jakob Uszkoreit, Lukasz Kaiser, Zhifeng Chen, Yonghui Wu, and Macduff Hughes. The best of both worlds: Combining recent advances in neural machine translation. In ACL. 2018.","DOI":"10.18653\/v1\/P18-1008"},{"key":"708_CR75","unstructured":"Dehghani M, Gouws S, Vinyals O, Uszkoreit J, Kaiser L. Universal transformers. In ICLR. 2019."},{"key":"708_CR76","unstructured":"Fan, Angela, et al. \u201cAddressing Some Limitations of Transformers with Feedback Memory.\u201d\u00a0arXiv preprint arXiv:2002.09402. 2020."},{"key":"708_CR77","doi-asserted-by":"crossref","unstructured":"Luong MT, Pham H, Manning, C. Effective approaches to attention-based neural machine translation. 2015.","DOI":"10.18653\/v1\/D15-1166"},{"key":"708_CR78","doi-asserted-by":"crossref","unstructured":"Kamei Y, Monden A, Matsumoto S, Kakimoto T, Matsumoto K. The effects of over and under sampling on fault-prone module detection. In: First international symposium on empirical software engineering and measurement (ESEM 2007), Madrid, Spain. 2007.","DOI":"10.1109\/ESEM.2007.28"},{"key":"708_CR79","doi-asserted-by":"crossref","unstructured":"Sayed GI, Tharwat A, Hassanien AE Chaotic dragonfly algorithm: an improved metaheuristic algorithm for feature selection. Appl Inte0ll 2019. 49(1):p. 188\u2013205.","DOI":"10.1007\/s10489-018-1261-8"},{"key":"708_CR80","unstructured":"Phung SL, Bouzerdoum A, Nguyen GH. Learning pattern classification tasks with imbalanced data sets. 2009."},{"key":"708_CR81","doi-asserted-by":"crossref","unstructured":"Kingma DP, Welling M. An introduction to variational autoencoders. 2019.","DOI":"10.1561\/9781680836233"},{"key":"708_CR82","unstructured":"Berti A, Zelst v, Aalst v. d. Process Mining for Python (PM4Py): Bridging the Gap Between Process-and Data Science. p. 13\u201316. 2019."},{"key":"708_CR83","doi-asserted-by":"crossref","unstructured":"Weijters A, Ribeiro J. Flexible heuristics miner (fhm). In: Proceedings of the 2011 IEEE Symposium on Computational Intelligence and Data Mining \u2013 CIDM\u201911. IEEE; 2011. p. 310\u2013317.","DOI":"10.1109\/CIDM.2011.5949453"},{"key":"708_CR84","unstructured":"The Python Standard Library. https:\/\/docs.python.org\/3\/library\/. Accessed 31 Jul 2021."},{"key":"708_CR85","unstructured":"Sasaki Y, The truth of the F-measure, 2007."},{"issue":"4","key":"708_CR86","first-page":"336","volume":"5","author":"K Kittisak","year":"2011","unstructured":"Kittisak K, Nittaya K. A data mining approach to automate fault detection model development in the semiconductor manufacturing process. Int J Mech. 2011;5(4):336\u201344.","journal-title":"Int J Mech"},{"key":"708_CR87","unstructured":"Martino MD, Decia F, Molinelli J, Fernandez A. Improving electric fraud detection using class imbalance strategies. International conference on pattern recognition applications and methods, ICPRAM, 2012."},{"key":"708_CR88","doi-asserted-by":"crossref","unstructured":"Bekkar M, Djemaa HK, Alitouche TA. Evaluation measures for models assessment over imbalanced data sets. J Inf Eng Appl. 2013;3(10).","DOI":"10.5121\/ijdkp.2013.3402"},{"issue":"4","key":"708_CR89","doi-asserted-by":"publisher","first-page":"306","DOI":"10.1002\/gepi.20211","volume":"31","author":"DR Velez","year":"2007","unstructured":"Velez DR, White BC, Motsinger AA, Bush WS, Ritchie MD, Williams SM, et al. A balanced accuracy function for epistasis modeling in imbalanced datasets using multifactor dimensionality reduction. Genet Epidemiol. 2007;31(4):306\u201315.","journal-title":"Genet Epidemiol"},{"key":"708_CR90","doi-asserted-by":"crossref","unstructured":"Zhang D, Lee W S. Learning classifiers without negative examples: a reduction approach. In: 3rd International Conference on Digital Information Management, ICDIM; 2008. p. 638\u2013643.","DOI":"10.1109\/ICDIM.2008.4746761"},{"issue":"5","key":"708_CR91","doi-asserted-by":"publisher","first-page":"818","DOI":"10.3390\/sym13050818","volume":"13","author":"EM Dogo","year":"2021","unstructured":"Dogo EM, Nwulu NI, Twala B, Aigbavboa C. Accessing imbalance learning using dynamic selection approach in water quality anomaly detection. Symmetry. 2021;13(5):818.","journal-title":"Symmetry"},{"key":"708_CR92","unstructured":"Imbalanced learn documentation. https:\/\/imbalanced-learn.org\/stable\/. Accessed 2 Jan 2023."},{"issue":"1","key":"708_CR93","doi-asserted-by":"publisher","first-page":"75","DOI":"10.18359\/rcin.4236","volume":"30","author":"EA Leal Piedrahita","year":"2019","unstructured":"Leal Piedrahita EA. Hierarchical clustering for anomalous traffic conditions detection in power substations. Cienciae Ingenier\u00eda Neogranadina. 2019;30(1):75\u201388.","journal-title":"Cienciae Ingenier\u00eda Neogranadina"}],"container-title":["Journal of Big Data"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s40537-023-00708-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s40537-023-00708-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s40537-023-00708-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,3,12]],"date-time":"2023-03-12T11:03:47Z","timestamp":1678619027000},"score":1,"resource":{"primary":{"URL":"https:\/\/journalofbigdata.springeropen.com\/articles\/10.1186\/s40537-023-00708-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,12]]},"references-count":93,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2023,12]]}},"alternative-id":["708"],"URL":"https:\/\/doi.org\/10.1186\/s40537-023-00708-5","relation":{},"ISSN":["2196-1115"],"issn-type":[{"value":"2196-1115","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,12]]},"assertion":[{"value":"3 June 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"28 February 2023","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 March 2023","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}},{"value":"The authors declare that they have no competing interests.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"33"}}