Business process analysis based on anomaly detection in event logs: a study on an incident management case

Abstract

Business processes allow anomalies to occur during execution. Anomaly detection aims to discover behaviors that are not typical or expected in the business process. In fact, early detection helps prevent intrusion and other risks in companies. There are several approaches that address this problem in process mining. This paper discusses anomaly detection approaches in business process discovery using a real-world event log from an ITIL-covered incident management process. We discuss benefits and limitations of using knowledge from process models discovered after treating anomalies.