{"id":"https://openalex.org/W2011910480","doi":"https://doi.org/10.1145/2245276.2232051","title":"On the exploitation of process mining for security audits","display_name":"On the exploitation of process mining for security audits","publication_year":2012,"publication_date":"2012-03-26","ids":{"openalex":"https://openalex.org/W2011910480","doi":"https://doi.org/10.1145/2245276.2232051","mag":"2011910480"},"language":"en","primary_location":{"id":"doi:10.1145/2245276.2232051","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2245276.2232051","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th Annual ACM Symposium on Applied Computing","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013704088","display_name":"Rafael Accorsi","orcid":"https://orcid.org/0000-0001-5620-561X"},"institutions":[{"id":"https://openalex.org/I161046081","display_name":"University of Freiburg","ror":"https://ror.org/0245cg223","country_code":"DE","type":"education","lineage":["https://openalex.org/I161046081"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Rafael Accorsi","raw_affiliation_strings":["University of Freiburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Freiburg, Germany","institution_ids":["https://openalex.org/I161046081"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006344650","display_name":"Thomas F. Stocker","orcid":"https://orcid.org/0000-0003-1245-2728"},"institutions":[{"id":"https://openalex.org/I161046081","display_name":"University of Freiburg","ror":"https://ror.org/0245cg223","country_code":"DE","type":"education","lineage":["https://openalex.org/I161046081"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Thomas Stocker","raw_affiliation_strings":["University of Freiburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Freiburg, Germany","institution_ids":["https://openalex.org/I161046081"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I161046081"],"apc_list":null,"apc_paid":null,"fwci":14.1461,"has_fulltext":false,"cited_by_count":85,"citation_normalized_percentile":{"value":0.99362704,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1709","last_page":"1716"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9890000224113464,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/notice","display_name":"Notice","score":0.746936023235321},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6435520052909851},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.6416091918945312},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6294512152671814},{"id":"https://openalex.org/keywords/process-mining","display_name":"Process mining","score":0.6237986087799072},{"id":"https://openalex.org/keywords/information-security-audit","display_name":"Information security audit","score":0.49058404564857483},{"id":"https://openalex.org/keywords/business-process","display_name":"Business process","score":0.4544423818588257},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4136725962162018},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.35598084330558777},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.3517332673072815},{"id":"https://openalex.org/keywords/business-process-modeling","display_name":"Business process modeling","score":0.27134275436401367},{"id":"https://openalex.org/keywords/work-in-process","display_name":"Work in process","score":0.22756671905517578},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.19599246978759766},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.1855032742023468},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.16834813356399536},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1446465253829956},{"id":"https://openalex.org/keywords/operations-management","display_name":"Operations management","score":0.08907589316368103},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.08254903554916382}],"concepts":[{"id":"https://openalex.org/C2779913896","wikidata":"https://www.wikidata.org/wiki/Q7063001","display_name":"Notice","level":2,"score":0.746936023235321},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6435520052909851},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6416091918945312},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6294512152671814},{"id":"https://openalex.org/C124670913","wikidata":"https://www.wikidata.org/wiki/Q2608526","display_name":"Process mining","level":5,"score":0.6237986087799072},{"id":"https://openalex.org/C39358052","wikidata":"https://www.wikidata.org/wiki/Q2578632","display_name":"Information security audit","level":5,"score":0.49058404564857483},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.4544423818588257},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4136725962162018},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.35598084330558777},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3517332673072815},{"id":"https://openalex.org/C207505557","wikidata":"https://www.wikidata.org/wiki/Q4374012","display_name":"Business process modeling","level":4,"score":0.27134275436401367},{"id":"https://openalex.org/C174998907","wikidata":"https://www.wikidata.org/wiki/Q357662","display_name":"Work in process","level":2,"score":0.22756671905517578},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.19599246978759766},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.1855032742023468},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.16834813356399536},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1446465253829956},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.08907589316368103},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.08254903554916382},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2245276.2232051","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2245276.2232051","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th Annual ACM Symposium on Applied Computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W35303038","https://openalex.org/W1413132195","https://openalex.org/W1520358132","https://openalex.org/W1548034336","https://openalex.org/W1997199359","https://openalex.org/W2001651221","https://openalex.org/W2060208845","https://openalex.org/W2065263054","https://openalex.org/W2087103691","https://openalex.org/W2092614549","https://openalex.org/W2096998948","https://openalex.org/W2098250644","https://openalex.org/W2103676490","https://openalex.org/W2104984601","https://openalex.org/W2113498867","https://openalex.org/W2126639102","https://openalex.org/W2142627613","https://openalex.org/W2145857528","https://openalex.org/W2162171351","https://openalex.org/W2162739315","https://openalex.org/W2170656359","https://openalex.org/W2237291032","https://openalex.org/W2407476789","https://openalex.org/W2502922278","https://openalex.org/W4207059486","https://openalex.org/W4230145224"],"related_works":["https://openalex.org/W2150478723","https://openalex.org/W4365511202","https://openalex.org/W4300560926","https://openalex.org/W4389937450","https://openalex.org/W2050159024","https://openalex.org/W2015021991","https://openalex.org/W2772191613","https://openalex.org/W2133946036","https://openalex.org/W2754184496","https://openalex.org/W2734067265"],"abstract_inverted_index":{"Process":[0],"mining":[1,101],"stands":[2],"for":[3,24,53,92],"a":[4,44,71,83],"set":[5],"of":[6,56,64,85],"techniques":[7],"to":[8,18,75,105],"analyze":[9],"business":[10],"process":[11,90,100],"models":[12],"and":[13,35,94],"logs.":[14],"However,":[15],"the":[16,47,54,61,78],"extent":[17],"which":[19,99],"it":[20],"can":[21],"be":[22,67,103],"used":[23],"security":[25,58,86,108],"auditing":[26,55],"has":[27],"not":[28],"been":[29],"investigated.":[30],"Focusing":[31],"on":[32,43,96],"conformance":[33],"checking":[34],"its":[36],"support":[37],"in":[38,46,98],"ProM,":[39],"this":[40,51],"paper":[41],"reports":[42],"case-study":[45],"financial":[48],"sector":[49],"applying":[50],"technology":[52],"relevant":[57],"requirements.":[59],"Although":[60],"vast":[62],"majority":[63],"requirements":[65,87],"could":[66,102],"verified,":[68],"we":[69,81],"notice":[70],"large":[72],"manual":[73],"effort":[74],"carry":[76],"out":[77],"analysis.":[79],"Moreover,":[80],"identify":[82],"class":[84],"that":[88],"demands":[89],"discovery":[91],"analysis,":[93],"elaborate":[95],"ways":[97],"extended":[104],"better":[106],"suit":[107],"analyses.":[109]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":8},{"year":2019,"cited_by_count":12},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":7},{"year":2016,"cited_by_count":4},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":7},{"year":2013,"cited_by_count":14},{"year":2012,"cited_by_count":6}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
