{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,14]],"date-time":"2025-10-14T00:32:21Z","timestamp":1760401941768,"version":"build-2065373602"},"reference-count":35,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2020,4,23]],"date-time":"2020-04-23T00:00:00Z","timestamp":1587600000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Interface Corporation, Japan","award":["2020"],"award-info":[{"award-number":["2020"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>In this paper, we proposed a verification method for the message passing behavior of IoT systems by checking the accumulative event relation of process models. In an IoT system, it is hard to verify the behavior of message passing by only looking at the sequence of packet transmissions recorded in the system log. We proposed a method to extract event relations from the log and check for any minor deviations that exist in the system. Using process mining, we extracted the variation of a normal process model from the log. We checked for any deviation that is hard to be detected unless the model is accumulated and stacked over time. Message passing behavior can be verified by comparing the similarity of the process tree model, which represents the execution relation between each message passing event. As a result, we can detect minor deviations such as missing events and perturbed event order with occurrence probability as low as 3%.<\/jats:p>","DOI":"10.3390\/info11040232","type":"journal-article","created":{"date-parts":[[2020,4,23]],"date-time":"2020-04-23T10:46:22Z","timestamp":1587638782000},"page":"232","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Verification Method for Accumulative Event Relation of Message Passing Behavior with Process Tree for IoT Systems"],"prefix":"10.3390","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0952-7151","authenticated-orcid":false,"given":"Mohd Anuaruddin","family":"Bin Ahmadon","sequence":"first","affiliation":[{"name":"Graduate School of Sciences and Technology for Innovation, Yamaguchi University, 2-16-1 Tokiwadai, Ube 755-8611, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0579-8501","authenticated-orcid":false,"given":"Shingo","family":"Yamaguchi","sequence":"additional","affiliation":[{"name":"Graduate School of Sciences and Technology for Innovation, Yamaguchi University, 2-16-1 Tokiwadai, Ube 755-8611, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2020,4,23]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Casado-Vara, R., Vale, Z., Prieto, J., and Corchado, J.M. (2018). Fault-Tolerant Temperature Control Algorithm for IoT Networks in Smart Buildings. Energies, 11.","DOI":"10.3390\/en11123430"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Wain, A., Reiff-Marganiec, S., Jones, K., and Janicke, H. (2016, January 23\u201325). Towards a distributed runtime monitor for ICS\/SCADA systems. Proceedings of the 4th International Symposium for ICS & SCADA Cyber Security Research 2016 (ICS-CSR), Belfast, UK.","DOI":"10.14236\/ewic\/ICS2016.15"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Delgado, R., Park, J., and Choi, B.W. (2019). Open Embedded Real-time Controllers for Industrial Distributed Control Systems. Electronics, 8.","DOI":"10.3390\/electronics8020223"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Carli, R., Cavone, G., Ben Othman, S., and Dotoli, M. (2020). IoT Based Architecture for Model Predictive Control of HVAC Systems in Smart Buildings. Sensors, 20.","DOI":"10.3390\/s20030781"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Lee, E., Seo, Y.-D., and Kim, Y.-G. (2019). Self-Adaptive Framework Based on MAPE Loop for Internet of Things. Sensors, 19.","DOI":"10.3390\/s19132996"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"1","DOI":"10.4018\/IJFC.2020010101","article-title":"Feedback-Based Fuzzy Resource Management in IoT-Based-Cloud","volume":"3","author":"Mallikarjuna","year":"2020","journal-title":"Int. J. Fog Comput."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Sato, K., Kawamoto, Y., Nishiyama, H., Kato, N., and Shimizu, Y. (2015, January 15\u201317). A modeling technique utilizing feedback control theory for performance evaluation of IoT system in real-time. Proceedings of the 2015 International Conference on Wireless Communications & Signal Processing (WCSP), Nanjing, China.","DOI":"10.1109\/WCSP.2015.7341303"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Lin, Y.-B., Lin, Y.-W., Lin, J.-Y., and Hung, H.-N. (2019). SensorTalk: An IoT Device Failure Detection and Calibration Mechanism for Smart Farming. Sensors, 19.","DOI":"10.3390\/s19214788"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Eri\u015f, \u00c7., G\u00fcng\u00f6r, V.\u00c7., and B\u00f6l\u00fck, P.S. (2016, January 16\u201319). Analysis of battery-powered sensor node lifetime for smart grid applications. Proceedings of the 2016 24th Signal Processing and Communication Application Conference (SIU), Zonguldak, Turkey.","DOI":"10.1109\/SIU.2016.7496190"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Celaya-Echarri, M., Azpilicueta, L., L\u00f3pez-Iturri, P., Aguirre, E., and Falcone, F. (2019). Performance Evaluation and Interference Characterization of Wireless Sensor Networks for Complex High-Node Density Scenarios. Sensors, 19.","DOI":"10.3390\/s19163516"},{"key":"ref_11","unstructured":"(2020, April 21). IoT developer Survey 2019 Results. Available online: https:\/\/iot.eclipse.org\/community\/iot-surveys\/."},{"key":"ref_12","unstructured":"(2020, April 21). MQTT Communication Protocol. Available online: https:\/\/mqtt.org\/."},{"key":"ref_13","unstructured":"(2020, April 21). XMPP Protocol. Available online: https:\/\/xmpp.org\/."},{"key":"ref_14","unstructured":"(2020, April 21). REST. Available online: https:\/\/restfulapi.net\/."},{"key":"ref_15","unstructured":"(2020, April 21). CoAP. Available online: https:\/\/coap.technology\/."},{"key":"ref_16","unstructured":"Wressnegger, C., Schwenk, G., Arp, D., and Rieck, K. (2013, January 4\u20138). A Close Look on n-Grams in Intrusion Detection: Anomaly Detection vs. Classification. Proceedings of the ACM Conference on Computer and Communications Security, Berlin, Germany."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Goh, J., Adepu, S., Tan, M., and Lee, Z.S. (2017, January 12\u201314). Anomaly Detection in Cyber Physical Systems Using Recurrent Neural Networks. Proceedings of the IEEE 18th International Symposium on High Assurance Systems Engineering (HASE), Singapore.","DOI":"10.1109\/HASE.2017.36"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Noureen, S.S., Bayne, S.B., Shaffer, E., Porschet, D., and Berman, M. (2019, January 17\u201321). Anomaly Detection in IoT System using Logistic Regression Analysis. Proceedings of the 2019 IEEE TPEC, Anaheim, CA, USA.","DOI":"10.1109\/TPEC.2019.8662186"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"90","DOI":"10.1186\/s13638-019-1402-8","article-title":"Secure-MQTT: An efficient fuzzy logic-based approach to detect DoS attack in MQTT protocol for internet of things","volume":"2019","author":"Haripriya","year":"2019","journal-title":"EURASIP J. Wirel. Comm. Netw."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"103","DOI":"10.1016\/j.cose.2018.06.002","article-title":"Anomaly Detection for Industrial Control Systems using Process Mining","volume":"78","author":"Myers","year":"2018","journal-title":"Comput. Secur."},{"key":"ref_21","first-page":"85","article-title":"Big Data Analytics in the Cloud-System Invariant Analysis Technology Pierces the Anomaly","volume":"9","author":"Kiyoshi","year":"2015","journal-title":"NEC Tech. J."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Gou, Z., Ahmadon, M.A.B., Yamaguchi, S., and Gupta, B.B. (2015, January 27\u201330). A Petri net-based framework of intrusion detection systems. Proceedings of the IEEE 4th Global Conference on Consumer Electronics (GCCE), Osaka, Japan.","DOI":"10.1109\/GCCE.2015.7398575"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Ushida, S. (2011, January 12\u201315). Control performance improvements due to fluctuations in dynamics of stochastic control systems. Proceedings of the 2011 50th IEEE Conference on Decision and Control and European Control Conference, Orlando, FL, USA.","DOI":"10.1109\/CDC.2011.6160511"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"1128","DOI":"10.1587\/transinf.2014FOP0009","article-title":"State Number Calculation Problem of Workflow Nets","volume":"98","author":"Ahmadon","year":"2015","journal-title":"IEICE Trans. Inf. Syst."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Van der Aalst, W.M.P. (2011, January 27\u201329). On the Representational Bias in Process Mining. Proceedings of the 2011 IEEE 20th International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises, Paris, France.","DOI":"10.1109\/WETICE.2011.64"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Leemans, S.J.J., Fahland, D., and van der Aalst, W.M.P. (2014). Discovering Block-Structured Process Models from Incomplete Event Logs. International Conference on Applications and Theory of Petri Nets and Concurrency, Springer.","DOI":"10.1007\/978-3-319-07734-5_6"},{"key":"ref_27","unstructured":"(2020, April 21). Process Mining Tool (ProM). Available online: http:\/\/promtools.org\/."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Gusfield, D. (1997). Algorithms on Strings, Trees, and Sequences, Cambridge University Press.","DOI":"10.1017\/CBO9780511574931"},{"key":"ref_29","unstructured":"Ghawi, R. (2016). Process Discovery using Inductive Miner and Decomposition. arXiv."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"227","DOI":"10.1007\/s10619-019-07270-1","article-title":"Enabling efficient process mining on large data sets: Realizing an in-database process mining operator","volume":"38","author":"Dijkman","year":"2020","journal-title":"Distrib. Parallel Databases"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Boroujeni, M., Ehsani, S., Ghodsi, M., HajiAghayi, M.T., and Seddighin, S. (2018, January 7\u201310). Approximating Edit Distance in Truly Subquadratic Time: Quantum and MapReduce. Proceedings of the 2018 Annual ACM-SIAM Symposium on Discrete Algorithms, New Orleans, LA, USA.","DOI":"10.1137\/1.9781611975031.76"},{"key":"ref_32","unstructured":"(2020, April 04). Process Tree Based Anomaly Detection Program. Available online: https:\/\/github.com\/anuaruddin\/processs-tree-based-anomaly-detection."},{"key":"ref_33","unstructured":"(2020, April 04). Ray Multi-Processing Library. Available online: https:\/\/ray.readthedocs.io\/en\/latest\/multiprocessing.html."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2542049","article-title":"A survey of intrusion detection techniques for cyber-physical Systems","volume":"46","author":"Mitchell","year":"2014","journal-title":"ACM Comput. Surv."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"2409","DOI":"10.1007\/s11276-014-0757-3","article-title":"Trajectory-based multi-dimensional outlier detection in wireless sensor networks using Hidden Markov Models","volume":"20","author":"Wang","year":"2014","journal-title":"Wirel. Netw."}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/11\/4\/232\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,13]],"date-time":"2025-10-13T13:23:33Z","timestamp":1760361813000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/11\/4\/232"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,4,23]]},"references-count":35,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2020,4]]}},"alternative-id":["info11040232"],"URL":"https:\/\/doi.org\/10.3390\/info11040232","relation":{},"ISSN":["2078-2489"],"issn-type":[{"type":"electronic","value":"2078-2489"}],"subject":[],"published":{"date-parts":[[2020,4,23]]}}}