For many years, video analytics have enabled end users to detect specific people or vehicles entering restricted areas, capture license plate information, scan crowds for specific individuals and much more. Today’s Video Management Systems (VMS) and IP cameras are built with powerful processing capabilities, helping to drive the development of more advanced analytics to more accurately detect abnormalities in behaviors that trigger alerts – an important component of predictive analysis.

What Is Predictive Analysis?

With this greater number and variety of data points available to security professionals, the trend toward integrated solutions is fueling growth in the evolving science of predictive analysis. Differing from standard alert triggers, predictive analysis uses information gathered from a wide range of data sources including surveillance, access control, visitor management, incident management and other systems, evaluating the information against established behavioral models, taking into account, earlier incidents, effectively predicting the likelihood of a similar event in the future.

Note that predictive analysis does not always generate binary security events, but typically identifies occurrences such as irregular traffic patterns, motion detection during off peak hours or in restricted areas, and correlates this data with facial detection, access control activity or other system information to indicate anomalous activity or the potential for an incident of interest to occur. When this happens, the system can alert security professionals to take proactive preventive actions.

Predictive Analytics In IP Cameras

Camera-based analytics have improved significantly in recent years but these technologies remain largely reactive, providing valuable information for post-event investigation and follow-up. However, as the security industry continues its momentum toward a more predictive model, intelligent IP cameras will play a key role in allowing security staff to take more meaningful, proactive actions to prevent incidents before they can occur.

Those cameras equipped with video analytics are already driving advancements in predictive analysis, by providing the means to more accurately detect incidents and events and turn those into inputs which provide context systems can be designed to indicate compromising activity, enabling a fast and highly informed response, potentially highlighting potential future risks before they can occur.

People-counting video analytics can be used to detect a large number of people gathering in a particular area off hours

The below real-world example illustrates the value of intelligent IP cameras in enhancing predictive analysis to improve security personnel’s ability to take proactive rather than reactive action and avert threats.

Detecting Unusual Behavior

For example, people-counting video analytics could be used to detect a large number of people gathering in a particular area during off hours. This could be as benign as people gathering to celebrate a coworker’s birthday or it could be something much more sinister, such as a group of disgruntled employees coordinating the theft of company assets and/or data. Without context, however, it’s impossible to tell where on the potential threat spectrum this event would fall.

As the predictive solution begins gathering contextual data for analysis, video analytics can determine whether an alert should be issued. Based on predetermined factors or analysis of prior events, such an off-hours gathering may be enough for the system to alert security staff to a potentially negative situation. The group’s location could also be a factor, as a gathering in a conference or break room would be much lower priority than if it were in a restricted area.

Alerts can also automatically trigger cameras to switch to higher resolution, initiate both on-board and remote recording, maintain focus on a particular area and/or entry point, and even launch facial recognition analytics. This is helpful for security management and staff when responding to an alert, providing more complete understanding of the situation to determine the appropriate course of action.

The system correlates information from intelligent cameras, access control, incident management and other sources
Access control data combined with people-counting may indicate that the number of people assembled exceeds the number of card swipes

Contextual Analysis

Alerts also initiate contextual analysis to determine the specifics of a situation. Technology can’t accurately judge intent; it collects all available information to determine the level of severity of a situation and, in turn, what actions need to be taken – both in the immediate term and post-event.

In the case of a large after-hours gathering, data collected and correlated from additional systems and sources will provide fuller context. For example, access control data combined with people-counting may indicate that the number of people assembled exceeds the number of card swipes. While multiple people entering on a single card swipe is a clear violation of policies, it still may not indicate a threat. Several authorized individuals may have arrived at the door at the same time and simply entered together out of convenience. Using facial recognition both at the edge and within the VMS to compare those who entered against the database of authorized users will determine whether there may be a potential security threat from unauthorized individuals being in a restricted area.

Intelligence-based Action

Once data has been gathered to provide greater context, predictive solutions analyse all available information to determine the level of the threat. At the same time, the system correlates information from intelligent cameras, access control, incident management and other sources to build a profile of either normal or abnormal behavior that will be used to analyze similar occurrences in the future that may or may not indicate a potential compromise.

Once data has been gathered to provide greater context, predictive solutions analyze all available information to determine the level of threat

Information from network-based calendar solutions may reveal that the gathering was simply a scheduled meeting or training. People-counting and facial recognition analytics combined with access control and HR system data could show that all of the individuals present are authorized to be in that particular area and that the discrepancy between the number of card swipes and individuals is indeed the result of tailgating. If this is the case, an email could be sent to employees to remind them of security policies.

However, if unauthorized individuals are found to be in the area, security staff would likely be dispatched to that location to determine the purpose of the gathering and ensure that unauthorized users are removed from the area in compliance with established policies. At the same time, the physical and IT access credentials of those in attendance can be temporarily deactivated to reduce the risk of insider theft. Additionally, intelligent cameras can employ analytics to detect whether objects have been removed from the area and isolate video of any such incidents for response.

As illustrated by the above example, intelligent video cameras play a significant role in more effective predictive analysis. Integrated security and surveillance systems with powerful video analytics can be deployed to improve security, lower risk, reduce fraud and transform traditional security operations from a simply reactive to much more proactive function. The intelligence gleaned from each incident empowers security professionals with the opportunity to avoid potentially dangerous situations before they can even occur.

Download PDF version

Author profile

Jonathan Lewit Director of Technology Leadership, Pelco by Schneider Electric

In case you missed it

Highlighting The Importance Of Security Integrations And Alliances
Highlighting The Importance Of Security Integrations And Alliances

Most technology companies have one goal in mind: to provide customers with high-quality, affordable products that can efficiently help streamline operations. Whether it's surveillance cameras, video management software, access control technology or any other type of security device, today's leading organizations invest in expertise in these product segments and strive to produce the highest quality solutions. To effectively fulfill this task, technology providers are always searching for emerging components to make their products and services even stronger. Oftentimes, a key aspect necessary to build a comprehensively robust solution involves finding like-minded partners that share a common goal and are willing to work together to create an integration that increases insight and intelligence.The interoperability between systems, devices and different types of applications should be intuitive and fast Key Factors For Security Integrations A basic factor in a partnership is openness. For an integration to perform seamlessly for the end user, the platform through which the technologies converge must follow standard protocols, easily operate with other platforms, allow freedom and customization, and provide adaptability. The interoperability between systems, devices and different types of applications should be intuitive and fast, enabling more time to be spent on analyzing critical data and responding to security events. The puzzle of a complete security solution contains many pieces, and it's often necessary to fuse together aspects from various providers to create a best-in-breed technology offering. When organizations collaborate, the end result is a simplified solution with an increased level of value. As threats become more severe and complex, customers demand solutions that combine different security and business elements into a single interface that can address a wide variety of risks.  A unified security system requires a strong collaboration between technology providers and integrated solutions Interconnected Security Devices Users used to only look at specific security devices - such as cameras or door alarms - as each having a strong, autonomous purpose, but now, every device plays an important interconnected role. And the progression of the Internet of Things (IoT) has made this transition even easier, as maintaining a consistent and uniform communication and interconnectivity between devices has now become the norm. The IoT has also made it so that partnerships must not only exist between manufacturers, but also within the customer's organizational structure. Although exceptionally beneficial, the IoT brings with it an increased amount of cyber vulnerabilities. As security systems are networked to increase flexibility, the door is opened to a number of potential threats that could compromise the entire enterprise. This risk highlights the need for an internal partnership and knowledge sharing between a company's physical security professionals and its IT team. IT experts should be pulled into security decisions and positioned as collaborative partners to assist with software updates, data safety protocols and solving complex network challenges, ultimately leading to a more cyber secure solution.Partnerships are beneficial to both the companies involved and their customers Knowledge Sharing And Learning Aside from cybersecurity, the latest prominent security attacks and events have focused primarily on soft targets, such as schools, concerts or shopping malls. This has caused many technology providers to venture into different vertical markets, and strong partnerships streamline this crossover. Innovators can extend their geographic reach and purpose through integrations with other like-minded manufacturers or integrators to add new levels of functionalities. Of course, a partnership cannot operate properly and to the best of its ability without a core component: learning. In today's evolving business and risk environment, knowledge is critical. A shared knowledge base can open up new opportunities and lead to the strengthening of security across many levels. A truly powerful, unified security system requires a strong collaboration between technology providers and integrated solutions. Partnerships are beneficial to both the companies involved and their customers, and the results created through these alliances can reach far beyond a user's expectations, offering enhanced flexibility and extensive safety options.

What Are The Security Challenges Of The Hospitality Market?
What Are The Security Challenges Of The Hospitality Market?

Hospitality businesses work to provide a safe and pleasant customer experience for their guests. Hotels offer a “home away from home” for millions of guests every day around the world. These are businesses of many sizes and types, providing services ranging from luxury accommodations to simple lodging for business travelers to family vacation experiences. Hospitality businesses also include restaurants, bars, movie theaters and other venues. Security needs are varied and require technologies that span a wide spectrum. We asked this week’s Expert Panel Roundtable: What are the security challenges of the hospitality market?

How SecuriThings Boosts Cybersecurity Across Multiple IoT Devices
How SecuriThings Boosts Cybersecurity Across Multiple IoT Devices

As Internet of Things (IoT) devices go, networked video cameras are particularly significant. Connected to the internet and using on-board processing, cameras are subject to infection by malware and can be targeted by Distributed Denial of Service (DDoS) attacks. Hacking of cameras also threatens privacy by allowing unauthorized access to video footage. The performance of hacked cameras can be degraded, and they may become unable to communicate properly when needed. Ensuring cybersecurity is a challenge, and the fragmented structure of the video surveillance market contributes to that challenge. A variety of companies are involved in manufacturing, integrating, installing and operating video systems, and cybersecurity threats can enter the picture at any stage. “It’s not always clear who is responsible,” says Yotam Gutman, vice president of marketing for SecuriThings, a cybersecurity company. “However, the only entities who can ensure cybersecurity are the security integrator and the service provider. They will bear the financial pain and are willing to pay for cybersecurity. An extra $1 or $2 per camera per month is not expensive.” SecuriThings’ “lightweight software agent” runs in the background of video cameras, sending information to an analytics system in the cloud IoT Device Security Management At the recent IFSEC trade show in London, SecuriThings unveiled its IoT Device Security Management (IDSM) approach to enable integrators to ensure cybersecurity. Founded in 2015, the company has around 20 employees in Tel Aviv, Israel, and operates a sales office in New York City. SecuriThings’ “lightweight software agent” runs in the background of video cameras, collecting metadata on camera processes and connections and sending information back to an analytics system in the cloud. Drag-and-drop deployment enables a camera to begin generating data within seconds and requiring only two mouse clicks. The cloud system analyzes data, pinpoints abnormalities, identifies new users, detects multiple entry attempts and tracks other camera processes to identify any cyberattacks. It monitors all devices, gateways, users and APIs to detect threats in real-time and mitigate the threats based on a pre-determined security policy. Machine learning tools also analyze more subtle activities that can indicate insider abuse. For example, a user support center can identify if cameras are being accessed improperly by employees, thus preventing insider abuse. Certified Vendor Agnostic Software SecuriThings is working with camera manufacturers and video management system (VMS) manufacturers to certify operation of its software agents with various camera models and systems. Working through integrators, such as Johnson Controls, is the fastest route to market, SecuriThings has determined. The system can be added after the fact to existing installations for immediate monitoring and remediation, or it can easily be incorporated into new systems as they are launched. “We have a strong sales team in the United States focusing on bringing the technology to more local and national integrators,” says Gutman. Certification ensures SecuriThings’ software agent can be installed in most modern camera models without negatively impacting operation; the software is vendor agnostic. Another eventual route to market is to work with camera manufacturers to install the SecuriThings software agent in cameras at the factory. In this scenario, the system can easily be “clicked on” when cameras are installed. The SecuriThings cloud system generates a dashboard that tracks system activities to identify any cybersecurity threats IoT Security Operations Center SecuriThings operation is transparent to the VMS, and the company works with VMS manufacturers to ensure the code operates seamlessly with their systems. Cloud analytics generate a dashboard that tracks system activities, and/or a managed service monitors the system and notifies customers if there is a problem. “We monitor it from our IoT Security Operations Center, a fully managed service that ensures the real-time detection and mitigation of IoT cyber-threats,” says Gutman. “We found that end-customers don’t have the manpower to monitor the system, so our experts can guide them.”Access control and cloud-based access control will be the next systems under cyberattack, and they are almost as vulnerable" A benefit for camera manufacturers is the ability of a system like SecuriThings to “level the playing field” on issues of cybersecurity, says Gutman. The approach provides a higher level of cybersecurity confidence for integrators and users, including those using cameras that have previously had cybersecurity problems such as “back door” access. SecuriThings has certified its software for use with Hikvision cameras and is in the process of certifying with Dahua, says Gutman. “Western manufacturers say their products are more secure, but we can help all camera manufacturers prove that they are just as secure,” says Gutman. “Integrators and users can log into a device and see all the activity.” Securing Connected Devices From Cyber Threats Beyond video, SecuriThings’ products target the full range of connected devices in the Internet of Things (IoT). The SecuriThings security solution enables real-time visibility and control of IoT devices deployed in massive numbers in smart cities, physical security, building automation, home entertainment and more. Video surveillance is an early focus because of market need, an opportunity to gain traction, and the critical nature of security applications. But the challenges are much broader than video surveillance. “We are seeing similar risks to other devices,” says Gutman. “Access control and cloud-based access control will be the next systems under cyberattack, and they are almost as vulnerable. If you can disable the access control system, you can cause a lot of problems.” Other connected devices that could be at risk include building automation and heating and cooling (HVAC) systems.