Pattern-Based Reconstruction of Anomalous Traces in Business Process Event Logs

Jonghyeon Ko,Marco Comuzzi
DOI: https://doi.org/10.2139/ssrn.4062471
2022-01-01
SSRN Electronic Journal
Abstract:Event log anomaly detection and log repairing concern the identification of anomalous traces in an event log and the reconstruction of a correct trace for the anomalous ones, respectively. Anomalies in real-world event logs often appear according to specific patterns, since they are generated by a limited number of root causes, such as poor resource behaviour or system malfunctioning. This paper proposes PBAR (PatternBased Anomaly Reconstruction), a semi-supervised pattern-based anomaly detection and log repairing approach that exploits the pattern-based nature of trace-level anomalies in event logs. PBAR captures in a set of ad-hoc graphs the behaviour of clean traces in a log and uses these to identify anomalous traces, the specific anomaly pattern that applies to them, and then reconstruct the correct trace. The proposed approach is evaluated using artificial and real event logs against the traditional trace alignment in conformance checking, the edit distance-based alignment method, and an unsupervised method based on deep learning. Overall, the proposed method outscored the alignment method in anomalous trace reconstruction while providing interpretability by regarding the anomaly pattern classification. PBAR is also quicker to execute and its performance is more balanced across different types of anomaly patterns.
What problem does this paper attempt to address?