Association Rules for Anomaly Detection and Root Cause Analysis in Process Executions

Association Rules for Anomaly Detection and Root Cause Analysis in Process Executions

Abstract

Existing business process anomaly detection approaches typically fall short in supporting experts when analyzing identified anomalies. Hereby, false positives and insufficient anomaly countermeasures might impact an organization in a severely negative way. This work tackles this limitation by basing anomaly detection on association rule mining. It will be shown that doing so enables to explain anomalies, support process change and flexible executions, and to facilitate the estimation of anomaly severity. As a consequence, the risk of choosing an inappropriate countermeasure is likely reduced which, for example, helps to avoid the termination of benign process executions due to mistaken anomalies and false positives. The feasibility of the proposed approach is shown based on a publicly available prototypical implementation as well as by analyzing real life logs with injected artificial anomalies.

Grafik Top
Authors
  • Böhmer, Kristof
  • Rinderle-Ma, Stefanie
Grafik Top
Projects
Grafik Top
Shortfacts
Category
Paper in Conference Proceedings or in Workshop Proceedings (Paper)
Event Title
30th International Conference on Advanced Information Systems Engineering
Divisions
Workflow Systems and Technology
Event Location
Talinn, Estonia
Event Type
Conference
Event Dates
13 - 15 June 2018
Page Range
pp. 3-18
Date
13 June 2018
Export
Grafik Top