Discovering anomalous frequent patterns from partially ordered event logs

Laura Genga, Mahdi Alizadeh, Domenico Potena, Claudia Diamantini, Nicola Zannone

Research output: Contribution to journalArticleAcademicpeer-review

23 Citations (Scopus)
119 Downloads (Pure)


Conformance checking allows organizations to compare process executions recorded by the IT system against a process model representing the normative behavior. Most of the existing techniques, however, are only able to pinpoint where individual process executions deviate from the normative behavior, without considering neither possible correlations among occurred deviations nor their frequency. Moreover, the actual control-flow of the process is not taken into account in the analysis. Neglecting possible parallelisms among process activities can lead to inaccurate diagnostics; it also poses some challenges in interpreting the results, since deviations occurring in parallel behaviors are often instantiated in different sequential behaviors in different traces. In this work, we present an approach to extract anomalous frequent patterns from historical logging data. The extracted patterns can exhibit parallel behaviors and correlate recurrent deviations that have occurred in possibly different portions of the process, thus providing analysts with a valuable aid for investigating nonconforming behaviors. Our approach has been implemented as a plug-in of the ESub tool and evaluated using both synthetic and real-life logs.

Original languageEnglish
Pages (from-to)257–300
Number of pages44
JournalJournal of Intelligent Information Systems
Issue number2
Publication statusPublished - 1 Oct 2018


  • Association mining
  • Conformance checking
  • Partially ordered logs
  • Subgraph mining


Dive into the research topics of 'Discovering anomalous frequent patterns from partially ordered event logs'. Together they form a unique fingerprint.

Cite this