A Survey on Process Mining for Security

Security is one of the main issues in the era of technology that every organization should take into account. Among the existing approach, process mining takes an important role in security investigations. The ability to discover the process and check the conformance of the running process are key features of process mining which helpful to perform security investigation. The deviation between the process model compared to event log data is considered a security issue. Thus, it is important to keep the log data stored safely and well-documented. However, many information systems are not process-aware due to the variability of the event data sources. Therefore, this paper briefly identifies and summarizes previously published studies and recent works in terms of the state-of-the-art process mining techniques used in the security domain. This survey identifies the existing effort on methods, datasets, tools and frameworks. Finally, we summarize possible future works in utilizing process mining for security-related problems.