Enhancing mobile device security with process mining

We present part of a research project aimed at mobile device security. During the project we have tested several methods of processing of data from mobile devices in order to detect attacks and suspicious activity in general. One method we have tested was also mining of processes found in mobile device activity logs and analysis of those processes. We have used several devices with the AndroidTMOS, collected a large amount of activity data, including (simulated) harmful activity, and then modeled processes found in the data. Results of the comparison of these processes to the harmful activity suggest that this application of process mining shows promise, but also requires a lot of further research.