Systems and methods for hierarchical acoustic detection of security threats

1. A system for detecting a security threat over a network, the system comprising:

a microphone configured to capture acoustic signals;

a hardware interface configured to generate data samples from the acoustic signals;

a memory storing a plurality of instructions; and

a hardware processor configured to execute the instructions to:

determine a rate of intensity variation of the acoustic signals;

determine, based on the rate of intensity variation of the acoustic signals, whether to transmit the data samples to a remote server;

after determining to transmit the data samples to the remote server:

generate data packets that include the data samples; and

transmit the data packets to the remote server;

wherein the determination of the rate of intensity variation of the acoustic signals comprises:

grouping the data samples into a plurality of data subsets;

determining a first number for each data subset of the plurality of data subsets, the first number corresponding to a number of data samples, in each data subset, of which a value exceeds or falls below a first threshold; and

determining a second number as the number of data subsets of which the first number exceeds the first threshold; and

wherein the determination of whether to transmit the data samples to the remote server for detection of security threat comprises determining to transmit the data samples to the remote server if the second number exceeds a second threshold.

2. The system of claim 1 , wherein the determination of the rate of intensity variation of the acoustic signals comprises:

grouping the plurality of data subsets into a plurality of analysis windows, at least two of the analysis windows including a number of identical data subsets;

wherein the second number is determined based on data subsets grouped into one analysis window.

3. The system of claim 2 , wherein:

the determination of the rate of intensity variation of the acoustic signals comprises determining the second number for each of the analysis windows; and

the determination of whether to transmit the data samples to the remote server is based on a distribution of the second numbers among the analysis windows.

4. The system of claim 1 , wherein:

the system further comprises the remote server; and

the remote server is configured to:

receive the data packets;

reconstruct the data samples from the data packets;

compare the data samples against one or more known patterns of acoustic signals associated with a security threat;

generate a signal based on the comparison result; and

transmit the signal to a monitoring device to cause the monitor device to generate a warning based on the signal.

5. The system of claim 4 , comprising a support vector machine configured to categorize the one or more known patterns of acoustic signals.

6. A method for detecting a security threat over a network, comprising:

receiving acoustic signals;

generating data samples from the acoustic signals;

determining a rate of intensity variation of the acoustic signals;

determining, based on the rate of intensity variation of the acoustic signals, whether to transmit the data samples to a remote server;

after determining to transmit the data samples to the remote server:

generating data packets that include the data samples; and

transmitting the data packets to the remote server;

wherein the determination of the rate of intensity variation of the acoustic signals comprises:

grouping the data samples into a plurality of data subsets;

determining a first number for each data subset of the plurality of data subsets, the first number corresponding to a number of data samples, in each data subset, of which a value exceeds or falls below a first threshold; and

determining a second number as the number of data subsets of which the first number exceeds the first threshold; and

wherein the determination of whether to transmit the data samples to the remote server for detection of security threat comprises determining to transmit the data samples to the remote server if the second number exceeds a second threshold.

7. The method of claim 6 , wherein the determination of the rate of intensity variation of the acoustic signals comprises:

grouping the plurality of data subsets into a plurality of analysis windows, at least two of the analysis windows including a number of identical data subsets;

wherein the second number is determined based on data subsets grouped into one analysis window.

8. The method of claim 7 , wherein:

the determination of the rate of intensity variation of the acoustic signals comprises determining the second number for each of the analysis windows; and

the determination of whether to transmit the data samples to the remote server is based on a distribution of the second numbers among the analysis windows.

9. The method of claim 6 , further comprising:

receiving, by the remote server, the data packets;

reconstructing, by the remote server, the data samples from the data packets;

comparing, by the remote server, the data samples against one or more known patterns of acoustic signals associated with a security threat;

generating, by the remote server, a signal based on the comparison result; and

transmitting, by the remote server, the signal to a monitoring device to cause the monitor device to generate a warning based on the signal.

10. The method of claim 9 , further comprising: categorizing the one or more known patterns of acoustic signals.

11. A non-transitory computer readable medium that stores a set of instructions that is executable by a hardware processor to cause the hardware processor to perform a method for detecting a security threat over a network, comprising:

receiving acoustic signals;

generating data samples from the acoustic signals;

determining a rate of intensity variation of the acoustic signals;

determining, based on the rate of intensity variation of the acoustic signals, whether to transmit the data samples to a remote server;

after determining to transmit the data samples to the remote server:

generating data packets that include the data samples; and

transmitting the data packets to the remote server;

wherein the determination of the rate of intensity variation of the acoustic signals comprises:

grouping the data samples into a plurality of data subsets;

determining a first number for each data subset of the plurality of data subsets, the first number corresponding to a number of data samples, in each data subset, of which a value exceeds or falls below a first threshold; and

determining a second number as the number of data subsets of which the first number exceeds the first threshold; and

wherein the determination of whether to transmit the data samples to the remote server for detection of security threat comprises determining to transmit the data samples to the remote server if the second number exceeds a second threshold.

12. The medium of claim 11 , wherein the determination of the rate of intensity variation of the acoustic signals comprises:

grouping the plurality of data subsets into a plurality of analysis windows, at least two of the analysis windows including a number of identical data subsets;

wherein the second number is determined based on data subsets grouped into one analysis window.

13. The medium of claim 12 , wherein:

the determination of the rate of intensity variation of the acoustic signals comprises determining the second number for each of the analysis windows; and

the determination of whether to transmit the data samples to the remote server is based on a distribution of the second numbers among the analysis windows.