{"id":"https://openalex.org/W4414376528","doi":"https://doi.org/10.1007/978-3-032-05073-1_7","title":"Cybersecurity Threat Detection Through Business Process Log Analysis","display_name":"Cybersecurity Threat Detection Through Business Process Log Analysis","publication_year":2025,"publication_date":"2025-09-20","ids":{"openalex":"https://openalex.org/W4414376528","doi":"https://doi.org/10.1007/978-3-032-05073-1_7"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-032-05073-1_7","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-032-05073-1_7","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046308244","display_name":"Barbara Pernici","orcid":"https://orcid.org/0000-0002-2034-9774"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Barbara Pernici","raw_affiliation_strings":["Politecnico di Milano, Milan, Italy"],"affiliations":[{"raw_affiliation_string":"Politecnico di Milano, Milan, Italy","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083907199","display_name":"Fotios Gioulekas","orcid":"https://orcid.org/0000-0003-0929-4677"},"institutions":[{"id":"https://openalex.org/I4210154107","display_name":"Regional Health Administration of Thessaly","ror":"https://ror.org/04er69203","country_code":"GR","type":"healthcare","lineage":["https://openalex.org/I4210154107"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Fotios Gioulekas","raw_affiliation_strings":["5th Regional Health Authority of Thessaly and Sterea, Larissa, Greece"],"affiliations":[{"raw_affiliation_string":"5th Regional Health Authority of Thessaly and Sterea, Larissa, Greece","institution_ids":["https://openalex.org/I4210154107"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015034225","display_name":"Athanasios Tzikas","orcid":null},"institutions":[{"id":"https://openalex.org/I4210154107","display_name":"Regional Health Administration of Thessaly","ror":"https://ror.org/04er69203","country_code":"GR","type":"healthcare","lineage":["https://openalex.org/I4210154107"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Athanasios Tzikas","raw_affiliation_strings":["5th Regional Health Authority of Thessaly and Sterea, Larissa, Greece"],"affiliations":[{"raw_affiliation_string":"5th Regional Health Authority of Thessaly and Sterea, Larissa, Greece","institution_ids":["https://openalex.org/I4210154107"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055740309","display_name":"Konstantinos Gounaris","orcid":"https://orcid.org/0009-0000-0320-3805"},"institutions":[{"id":"https://openalex.org/I4210154107","display_name":"Regional Health Administration of Thessaly","ror":"https://ror.org/04er69203","country_code":"GR","type":"healthcare","lineage":["https://openalex.org/I4210154107"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Konstantinos Gounaris","raw_affiliation_strings":["5th Regional Health Authority of Thessaly and Sterea, Larissa, Greece"],"affiliations":[{"raw_affiliation_string":"5th Regional Health Authority of Thessaly and Sterea, Larissa, Greece","institution_ids":["https://openalex.org/I4210154107"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017996605","display_name":"Evangelos Stamatiadis","orcid":"https://orcid.org/0009-0006-8375-8862"},"institutions":[{"id":"https://openalex.org/I4210154107","display_name":"Regional Health Administration of Thessaly","ror":"https://ror.org/04er69203","country_code":"GR","type":"healthcare","lineage":["https://openalex.org/I4210154107"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Evangelos Stamatiadis","raw_affiliation_strings":["5th Regional Health Authority of Thessaly and Sterea, Larissa, Greece"],"affiliations":[{"raw_affiliation_string":"5th Regional Health Authority of Thessaly and Sterea, Larissa, Greece","institution_ids":["https://openalex.org/I4210154107"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013892903","display_name":"Thomas Schaberreiter","orcid":"https://orcid.org/0000-0001-8540-2137"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Thomas Schaberreiter","raw_affiliation_strings":["CS-AWARE Corporation, Tallinn, Estonia"],"affiliations":[{"raw_affiliation_string":"CS-AWARE Corporation, Tallinn, Estonia","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063621424","display_name":"Cinzia Cappiello","orcid":"https://orcid.org/0000-0001-6062-5174"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Cinzia Cappiello","raw_affiliation_strings":["Politecnico di Milano, Milan, Italy"],"affiliations":[{"raw_affiliation_string":"Politecnico di Milano, Milan, Italy","institution_ids":["https://openalex.org/I93860229"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5046308244"],"corresponding_institution_ids":["https://openalex.org/I93860229"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.62015925,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"92","last_page":"107"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.989799976348877,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11891","display_name":"Big Data and Business Intelligence","score":0.989799976348877,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6320000290870667},{"id":"https://openalex.org/keywords/business-process","display_name":"Business process","score":0.6208000183105469},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.6139000058174133},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6068000197410583},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5692999958992004},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.49149999022483826},{"id":"https://openalex.org/keywords/process-mining","display_name":"Process mining","score":0.4846000075340271},{"id":"https://openalex.org/keywords/business-process-discovery","display_name":"Business process discovery","score":0.47519999742507935},{"id":"https://openalex.org/keywords/conformance-checking","display_name":"Conformance checking","score":0.45890000462532043},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4465999901294708}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8277999758720398},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6320000290870667},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.6208000183105469},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.6139000058174133},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6068000197410583},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6043999791145325},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5692999958992004},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.49149999022483826},{"id":"https://openalex.org/C124670913","wikidata":"https://www.wikidata.org/wiki/Q2608526","display_name":"Process mining","level":5,"score":0.4846000075340271},{"id":"https://openalex.org/C93453677","wikidata":"https://www.wikidata.org/wiki/Q1017580","display_name":"Business process discovery","level":5,"score":0.47519999742507935},{"id":"https://openalex.org/C2775948798","wikidata":"https://www.wikidata.org/wiki/Q5160261","display_name":"Conformance checking","level":5,"score":0.45890000462532043},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4465999901294708},{"id":"https://openalex.org/C80309976","wikidata":"https://www.wikidata.org/wiki/Q7007379","display_name":"Business process management","level":4,"score":0.41920000314712524},{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.4180999994277954},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.41110000014305115},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3905999958515167},{"id":"https://openalex.org/C130963320","wikidata":"https://www.wikidata.org/wiki/Q1401207","display_name":"Root cause analysis","level":2,"score":0.3564000129699707},{"id":"https://openalex.org/C11066294","wikidata":"https://www.wikidata.org/wiki/Q1518244","display_name":"Business rule","level":4,"score":0.33399999141693115},{"id":"https://openalex.org/C207505557","wikidata":"https://www.wikidata.org/wiki/Q4374012","display_name":"Business process modeling","level":4,"score":0.31790000200271606},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.314300000667572},{"id":"https://openalex.org/C2767350","wikidata":"https://www.wikidata.org/wiki/Q6662173","display_name":"Business intelligence","level":2,"score":0.3142000138759613},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.3131999969482422},{"id":"https://openalex.org/C106201281","wikidata":"https://www.wikidata.org/wiki/Q336119","display_name":"Business operations","level":2,"score":0.3100999891757965},{"id":"https://openalex.org/C2776574205","wikidata":"https://www.wikidata.org/wiki/Q1391314","display_name":"Business information","level":2,"score":0.3068999946117401},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3027999997138977},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3000999987125397},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.2985999882221222},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.28760001063346863},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.28139999508857727},{"id":"https://openalex.org/C189076506","wikidata":"https://www.wikidata.org/wiki/Q1518232","display_name":"Business analysis","level":3,"score":0.2799000144004822},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.2685999870300293},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.265500009059906}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/978-3-032-05073-1_7","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-032-05073-1_7","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},{"id":"pmh:oai:re.public.polimi.it:11311/1307651","is_oa":false,"landing_page_url":"https://link.springer.com/chapter/10.1007/978-3-032-05073-1_7","pdf_url":null,"source":{"id":"https://openalex.org/S4306400312","display_name":"Virtual Community of Pathological Anatomy (University of Castilla La Mancha)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79189158","host_organization_name":"University of Castilla-La Mancha","host_organization_lineage":["https://openalex.org/I79189158"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W2121717903","https://openalex.org/W2213201020","https://openalex.org/W2767662337","https://openalex.org/W2948791798","https://openalex.org/W3003372411","https://openalex.org/W3007251795","https://openalex.org/W3008731154","https://openalex.org/W3146612261","https://openalex.org/W3146778731","https://openalex.org/W3179245071","https://openalex.org/W4220899631","https://openalex.org/W4226154508","https://openalex.org/W4285161195","https://openalex.org/W4382983024","https://openalex.org/W4385562826","https://openalex.org/W4387351061"],"related_works":[],"abstract_inverted_index":null,"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}