Nora Boulahia-Cuppens

Playbook Generation for Process Anomalies in Insider Threat Scenarios

This paper proposes a unified approach that classifies log attributes by their importance for insider threat detection using process mining and an anomaly score to identify process deviations to generate Incident Response playbooks for business processes.