Quantifying the Re-identification Risk of Event Logs for Process Mining
Nuñez von Voigt, Saskia; Fahrenkrog-Petersen, Stephan; Janssen, Dominik; Koschmider, Agnes; Tschorsch, Florian; Mannhardt, Felix; Landsiedel, Olaf; Weidlich, Matthias
Peer reviewed, Journal article
Accepted version
Permanent lenke
https://hdl.handle.net/11250/3090503Utgivelsesdato
2020Metadata
Vis full innførselSamlinger
- Publikasjoner fra CRIStin - SINTEF AS [5668]
- SINTEF Digital [2415]
Originalversjon
Lecture Notes in Computer Science (LNCS). 2020, 12127, 252-267. 10.1007/978-3-030-49435-3_16Sammendrag
Event logs recorded during the execution of business processes constitute a valuable source of information. Applying process mining techniques to them, event logs may reveal the actual process execution and enable reasoning on quantitative or qualitative process properties. However, event logs often contain sensitive information that could be related to individual process stakeholders through background information and cross-correlation. We therefore argue that, when publishing event logs, the risk of such re-identification attacks must be considered. In this paper, we show how to quantify the re-identification risk with measures for the individual uniqueness in event logs. We also report on a large-scale study that explored the individual uniqueness in a collection of publicly available event logs. Our results suggest that potentially up to all of the cases in an event log may be re-identified, which highlights the importance of privacy-preserving techniques in process mining.