Detecting abnormal behavior in social network websites by using a process mining technique

Research output: Contribution to journalArticle

9 Citations (Scopus)

Abstract

Detecting abnormal user activity in social network websites could prevent from cyber-crime occurrence. The previous research focused on data mining while this research is based on user behavior process. In this study, the first step is defining a normal user behavioral pattern and the second step is detecting abnormal behavior. These two steps are applied on a case study that includes real and syntactic data sets to obtain more tangible results. The chosen technique used to define the pattern is process mining, which is an affordable, complete and noise-free event log. The proposed model discovers a normal behavior by genetic process mining technique and abnormal activities are detected by the fitness function, which is based on Petri Net rules. Although applying genetic mining is time consuming process, it can overcome the risks of noisy data and produces a comprehensive normal model in Petri net representation form.

Original languageEnglish
Pages (from-to)393-402
Number of pages10
JournalJournal of Computer Science
Volume10
Issue number3
DOIs
Publication statusPublished - 2014

Fingerprint

Petri nets
Websites
Crime
Syntactics
Data mining

Keywords

  • Anomaly detection
  • Genetic algorithm
  • Petri net
  • Process mining
  • Social network

ASJC Scopus subject areas

  • Software
  • Computer Networks and Communications
  • Artificial Intelligence

Cite this

Detecting abnormal behavior in social network websites by using a process mining technique. / Sahlabadi, Mahdi; Muniyandi, Ravie Chandren; Shukur, Zarina.

In: Journal of Computer Science, Vol. 10, No. 3, 2014, p. 393-402.

Research output: Contribution to journalArticle

@article{32798173643c46568ce09dae67991492,
title = "Detecting abnormal behavior in social network websites by using a process mining technique",
abstract = "Detecting abnormal user activity in social network websites could prevent from cyber-crime occurrence. The previous research focused on data mining while this research is based on user behavior process. In this study, the first step is defining a normal user behavioral pattern and the second step is detecting abnormal behavior. These two steps are applied on a case study that includes real and syntactic data sets to obtain more tangible results. The chosen technique used to define the pattern is process mining, which is an affordable, complete and noise-free event log. The proposed model discovers a normal behavior by genetic process mining technique and abnormal activities are detected by the fitness function, which is based on Petri Net rules. Although applying genetic mining is time consuming process, it can overcome the risks of noisy data and produces a comprehensive normal model in Petri net representation form.",
keywords = "Anomaly detection, Genetic algorithm, Petri net, Process mining, Social network",
author = "Mahdi Sahlabadi and Muniyandi, {Ravie Chandren} and Zarina Shukur",
year = "2014",
doi = "10.3844/jcssp.2014.393.402",
language = "English",
volume = "10",
pages = "393--402",
journal = "Journal of Computer Science",
issn = "1549-3636",
publisher = "Science Publications",
number = "3",

}

TY - JOUR

T1 - Detecting abnormal behavior in social network websites by using a process mining technique

AU - Sahlabadi, Mahdi

AU - Muniyandi, Ravie Chandren

AU - Shukur, Zarina

PY - 2014

Y1 - 2014

N2 - Detecting abnormal user activity in social network websites could prevent from cyber-crime occurrence. The previous research focused on data mining while this research is based on user behavior process. In this study, the first step is defining a normal user behavioral pattern and the second step is detecting abnormal behavior. These two steps are applied on a case study that includes real and syntactic data sets to obtain more tangible results. The chosen technique used to define the pattern is process mining, which is an affordable, complete and noise-free event log. The proposed model discovers a normal behavior by genetic process mining technique and abnormal activities are detected by the fitness function, which is based on Petri Net rules. Although applying genetic mining is time consuming process, it can overcome the risks of noisy data and produces a comprehensive normal model in Petri net representation form.

AB - Detecting abnormal user activity in social network websites could prevent from cyber-crime occurrence. The previous research focused on data mining while this research is based on user behavior process. In this study, the first step is defining a normal user behavioral pattern and the second step is detecting abnormal behavior. These two steps are applied on a case study that includes real and syntactic data sets to obtain more tangible results. The chosen technique used to define the pattern is process mining, which is an affordable, complete and noise-free event log. The proposed model discovers a normal behavior by genetic process mining technique and abnormal activities are detected by the fitness function, which is based on Petri Net rules. Although applying genetic mining is time consuming process, it can overcome the risks of noisy data and produces a comprehensive normal model in Petri net representation form.

KW - Anomaly detection

KW - Genetic algorithm

KW - Petri net

KW - Process mining

KW - Social network

UR - http://www.scopus.com/inward/record.url?scp=84894593785&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84894593785&partnerID=8YFLogxK

U2 - 10.3844/jcssp.2014.393.402

DO - 10.3844/jcssp.2014.393.402

M3 - Article

AN - SCOPUS:84894593785

VL - 10

SP - 393

EP - 402

JO - Journal of Computer Science

JF - Journal of Computer Science

SN - 1549-3636

IS - 3

ER -