Abstract
In the maritime domain, electronic sensors such as AIS receivers and radars collect large amounts of data about the vessels in a certain geographical area. We investigate the use of process mining techniques for analyzing the behavior of the vessels based on these data. In the context of maritime safety and security, the goal is to support operators in identifying suspicious behavior that may indicate accidents or undesired activities such as smuggling and piracy. Our approach consists of two phases. In the first phase, process mining is used offline to extract from historical data a reference model of the normal vessel behavior, which can be adapted by experienced operators and domain experts. In the second phase, process mining is used online to verify whether the current vessel behavior is compliant with the reference model, thus allowing for the identification of suspicious behavior.