{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,16]],"date-time":"2026-01-16T03:19:17Z","timestamp":1768533557657,"version":"3.49.0"},"reference-count":25,"publisher":"MDPI AG","issue":"8","license":[{"start":{"date-parts":[[2022,7,25]],"date-time":"2022-07-25T00:00:00Z","timestamp":1658707200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"BTIIC (BT Ireland Innovation Centre)"},{"name":"BT and Invest Northern Ireland"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Algorithms"],"abstract":"<jats:p>A significant challenge for organisations is the timely identification of the abnormalities or deviations in their process executions. Abnormalities are generally due to missing vital aspects of a process or possession of unwanted behaviour in the process execution. Conformance analysis techniques examine the synchronisation between the recorded logs and the learned process models, but the exploitation of event logs for abnormality detection is a relatively under-explored area in process mining. In this paper, we proposed a novel technique for the identification of abnormalities in business process execution through the extension of available conformance analysis techniques. Non-traditional conformance analysis techniques are used to find correlations and discrepancies between simulated and observed behaviour in process logs. Initially, the raw event log is filtered into two variants, successful and failed, based upon the outcome of the instances. Successfully executed instances refer to an ideal conduct of process and are utilised to discover an optimal process model. Later, the process model is used as a behavioural benchmark to classify the abnormality in the failed instances. Abnormal behaviour is compiled grounded on three dimensions of conformance, control flow-based alignment, trace-level alignment and event-level alignment. For early predictions, we introduced the notion of conformance lifeline presenting the impact of varying fitness scores during process execution. We applied the proposed methodology to a real-world event log and presented several process-specific improvement measures in the discussion section.<\/jats:p>","DOI":"10.3390\/a15080257","type":"journal-article","created":{"date-parts":[[2022,7,25]],"date-time":"2022-07-25T21:20:59Z","timestamp":1658784059000},"page":"257","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Anomaly Detection for Service-Oriented Business Processes Using Conformance Analysis"],"prefix":"10.3390","volume":"15","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7443-7331","authenticated-orcid":false,"given":"Zeeshan","family":"Tariq","sequence":"first","affiliation":[{"name":"BT Ireland Innovation Centre, School of Computing, Ulster University, Newtownabbey BT37 0QB, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Darryl","family":"Charles","sequence":"additional","affiliation":[{"name":"BT Ireland Innovation Centre, School of Computing, Ulster University, Newtownabbey BT37 0QB, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6871-3504","authenticated-orcid":false,"given":"Sally","family":"McClean","sequence":"additional","affiliation":[{"name":"BT Ireland Innovation Centre, School of Computing, Ulster University, Newtownabbey BT37 0QB, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5202-5360","authenticated-orcid":false,"given":"Ian","family":"McChesney","sequence":"additional","affiliation":[{"name":"BT Ireland Innovation Centre, School of Computing, Ulster University, Newtownabbey BT37 0QB, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3573-6742","authenticated-orcid":false,"given":"Paul","family":"Taylor","sequence":"additional","affiliation":[{"name":"Applied Research, BT, Ipswich IP1 2AU, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2022,7,25]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Dumas, M., Fournier, F., Limonad, L., Marrella, A., Montali, M., Rehse, J.R., Accorsi, R., Calvanese, D., De Giacomo, G., and Fahland, D. (2022). Augmented business process management systems: A research manifesto. arXiv.","DOI":"10.1145\/3576047"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"261","DOI":"10.1007\/s12599-020-00645-0","article-title":"Machine learning in business process monitoring: A comparison of deep learning and classical approaches used for outcome prediction","volume":"63","author":"Kratsch","year":"2021","journal-title":"Bus. Inf. Syst. Eng."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Buijs, J.C., van Dongen, B.F., and van Der Aalst, W.M. (2012). On the role of fitness, precision, generalization and simplicity in process discovery. OTM Confederated International Conferences \u201cOn the Move to Meaningful Internet Systems\u201d, Springer.","DOI":"10.1007\/978-3-642-33606-5_19"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"64","DOI":"10.1016\/j.is.2007.07.001","article-title":"Conformance checking of processes based on monitoring real behavior","volume":"33","author":"Rozinat","year":"2008","journal-title":"Inf. Syst."},{"key":"ref_5","unstructured":"Mannhardt, F. (2018, January 9\u201314). Multi-perspective Process Mining. Proceedings of the BPM (Dissertation\/Demos\/Industry), co-located with 16th International Conference on Business Process Management (BPM 2018), Sydney, Australia."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Van Der Aalst, W. (2016). Data science in action. Process Mining, Springer.","DOI":"10.1007\/978-3-662-49851-4"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Nafasa, P., Waspada, I., Bahtiar, N., and Wibowo, A. (2019, January 29\u201330). Implementation of alpha miner algorithm in process mining application development for online learning activities based on moodle event log data. Proceedings of the 2019 3rd International Conference on Informatics and Computational Sciences (ICICoS), Semarang, Indonesia.","DOI":"10.1109\/ICICoS48119.2019.8982384"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Verbeek, H., and van der Aalst, W.M. (2014). Decomposed process mining: The ILP case. International Conference on Business Process Management, Springer.","DOI":"10.1007\/978-3-319-15895-2_23"},{"key":"ref_9","first-page":"322","article-title":"Discovering learning processes using inductive miner: A case study with learning management systems (LMSs)","volume":"30","author":"Romero","year":"2018","journal-title":"Psicothema"},{"key":"ref_10","first-page":"1","article-title":"Process mining with the heuristics miner-algorithm","volume":"166","author":"Weijters","year":"2006","journal-title":"Tech. Univ. Eindh. Tech. Rep. WP"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Dunzer, S., Stierle, M., Matzner, M., and Baier, S. (2019, January 26\u201328). Conformance checking: A state-of-the-art literature review. Proceedings of the 11th International Conference on Subject-Oriented Business Process Management, Seville, Spain.","DOI":"10.1145\/3329007.3329014"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Tariq, Z., Khan, N., Charles, D., McClean, S., McChesney, I., and Taylor, P. (2020). Understanding Contrail Business Processes through Hierarchical Clustering: A Multi-Stage Framework. Algorithms, 13.","DOI":"10.3390\/a13100244"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Calder\u00f3n-Ruiz, G., and Sep\u00falveda, M. (2013). Automatic discovery of failures in business processes using Process Mining techniques. Anais do IX Simp\u00f3sio Brasileiro de Sistemas de Informa\u00e7\u00e3o, SBC.","DOI":"10.5753\/sbsi.2013.5710"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"563","DOI":"10.1007\/s12243-020-00809-9","article-title":"Process mining on machine event logs for profiling abnormal behaviour and root cause analysis","volume":"75","author":"Maeyens","year":"2020","journal-title":"Ann. Telecommun."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Tariq, Z., Charles, D., McClean, S., McChesney, I., and Taylor, P. (2021, January 18\u201321). Proactive business process mining for end-state prediction using trace features. Proceedings of the 2021 IEEE SmartWorld, Ubiquitous Intelligence & Computing, Advanced & Trusted Computing, Scalable Computing & Communications, Internet of People and Smart City Innovation (SmartWorld\/SCALCOM\/ UIC\/ATC\/IOP\/SCI), Atlanta, GA, USA.","DOI":"10.1109\/SWC50871.2021.00096"},{"key":"ref_16","first-page":"167","article-title":"A road map for planning-deploying machine vision artifacts in the context of industry 4.0","volume":"39","author":"Silva","year":"2022","journal-title":"J. Ind. Prod. Eng."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Gupta, N., Anand, K., and Sureka, A. (2015). Pariket: Mining business process logs for root cause analysis of anomalous incidents. International Workshop on Databases in Networked Information Systems, Springer.","DOI":"10.1007\/978-3-319-16313-0_19"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Suriadi, S., Ouyang, C., van der Aalst, W.M., and ter Hofstede, A.H. (2012). Root cause analysis with enriched process logs. International Conference on Business Process Management, Springer.","DOI":"10.1007\/978-3-642-36285-9_18"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1016\/j.entcs.2004.10.013","article-title":"Process mining and security: Detecting anomalous process executions and checking process conformance","volume":"121","year":"2005","journal-title":"Electron. Notes Theor. Comput. Sci."},{"key":"ref_20","first-page":"702","article-title":"A machine learning based help desk system for IT service management","volume":"33","author":"Barham","year":"2021","journal-title":"J. King Saud Univ.-Comput. Inf. Sci."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Khan, N., Ali, Z., Ali, A., McClean, S., Charles, D., Taylor, P., and Nauck, D. (2019). A generic model for end state prediction of business processes towards target compliance. International Conference on Innovative Techniques and Applications of Artificial Intelligence, Springer.","DOI":"10.1007\/978-3-030-34885-4_25"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Van der Aalst, W.M. (2016). Process Mining: Data Science in Action, Springer.","DOI":"10.1007\/978-3-662-49851-4"},{"key":"ref_23","first-page":"14383","article-title":"Extension to alpha algorithm for process mining","volume":"4","author":"Banerjee","year":"2015","journal-title":"Int. J. Eng. Comput. Sci."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"1649","DOI":"10.1093\/comjnl\/bxx040","article-title":"Divide and conquer: A tool framework for supporting decomposed discovery in process mining","volume":"60","author":"Verbeek","year":"2017","journal-title":"Comput. J."},{"key":"ref_25","first-page":"130","article-title":"The Multi-perspective Process Explorer","volume":"1418","author":"Mannhardt","year":"2015","journal-title":"BPM"}],"container-title":["Algorithms"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-4893\/15\/8\/257\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T23:56:20Z","timestamp":1760140580000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-4893\/15\/8\/257"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,7,25]]},"references-count":25,"journal-issue":{"issue":"8","published-online":{"date-parts":[[2022,8]]}},"alternative-id":["a15080257"],"URL":"https:\/\/doi.org\/10.3390\/a15080257","relation":{},"ISSN":["1999-4893"],"issn-type":[{"value":"1999-4893","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,7,25]]}}}