<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Towards Continuous Behavior Mining</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Sabine Wolny</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Alexandra Mazak</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Rafael Konlechner</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Manuel Wimmer ?</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Christian Doppler Laboratory for Model-Integrated Smart Production (CDL-MINT) TU Wien</institution>
          ,
          <country country="AT">Austria</country>
        </aff>
      </contrib-group>
      <fpage>149</fpage>
      <lpage>150</lpage>
      <abstract>
        <p>With new advances in Cyber-Physical Systems (CPS) and Internet of Things (IoT), more and more discrete software controllers interact with continuous physical systems. Workflow models are a classical approach to define controllers. However, the effect of the associated actions that are activated by executing the workflow may not spontaneously be realized but have to be realized over time. Generally, behavioral model elements such as activities in workflow languages are displayed mostly as black box, meaning that it is not possible to trace variable changes over time in most of the classical modeling approaches. In this paper, we introduce an envisioned architecture to cope with this challenge.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>-</title>
      <p>Workflow Model</p>
      <p>Transformation
Messaging 
Middleware</p>
      <p>SensoLroL Vogagslsue </p>
      <p>Stream</p>
      <p>Event Pattern </p>
      <p>Query
M
a
tsceh
TSDB</p>
      <p>
        A First Architectural Style for Continuous Behaviour Mining
Consider a system where sensors continuously send data to a controller, which sends
signals to the actuators based on these data according to a predefined workflow. This
workflow is modeled at design-time and defines the expected execution order for the
system. At runtime, it is important to trace and monitor whether the system behaves
as intended or not. A promising way to achieve this requirement are event pattern
queries [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ]. Such a query describes a fixed pattern for certain event sequences. In this
respect, the workflow model (WM) may be used to derive such event pattern queries.
Figure 1 shows the sketch of an initial architecture exploiting event patterns to reason
about continuous variable updates.
      </p>
      <p>At runtime, each component within the system communicates via a messaging
system middleware. The middleware can be also used to transfer sensor values to produce
logs of a system in a time series database (TSDB). A single log contains the
following fields: (i) timestamp, the actual time; (ii) sensor, the name of the sensor; and (iii)
value, the received sensor value. By recording the sensor data in a TSDB, it is possible
to illustrate variable changes of components continuously. Beside the recording of the
data, the value streams can be analyzed for detecting the defined activities of the WM.
Thereby, the value streams are filtered by an event pattern query which may be
derived from the WM. By this query, one can continuously sample the runs of the system,
e.g., to detect process duration changes over time (i.e., time between matches becomes
longer or shorter). The query responses produce a stream of matched actions, the
socalled “action stream”. Now, it is possible to map the logs of the received sensor values
and the query matches together in the TSDB to produce condensed figures of
continuous variable value shapes within activities. With the help of the presented architectural
style, complex behavior of the system can be continuously monitored.</p>
      <p>Outline for future work. Based on the logs of the sensors and the logs of the query
matches, it is possible to analyze specific slices of time series. For instance, hidden
activities may be detected where variable changes are observed between two defined
activities, i.e., they are not described in the WM.</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          1.
          <string-name>
            <given-names>D. C.</given-names>
            <surname>Luckham</surname>
          </string-name>
          .
          <article-title>The Power of Events: An Introduction to Complex Event Processing in Distributed Enterprise Systems</article-title>
          . Addison-Wesley,
          <source>third edition</source>
          ,
          <year>2005</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          2.
          <string-name>
            <given-names>A.</given-names>
            <surname>Mazak</surname>
          </string-name>
          and
          <string-name>
            <given-names>M.</given-names>
            <surname>Wimmer</surname>
          </string-name>
          .
          <article-title>Towards liquid models: An evolutionary modeling approach</article-title>
          .
          <source>In 18th IEEE Conference on Business Informatics (CBI)</source>
          , pages
          <fpage>104</fpage>
          -
          <lpage>112</lpage>
          ,
          <year>2016</year>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>