BUILDING RISK ANALYSIS SYSTEM WITH EXPIRY TIME PREDICTION FOR THREATS
A building management system includes one or more computer-readable storage media having instructions that cause one or more processors to receive threat events indicating a potential threat, each threat event comprising a threat category from among a plurality of threat categories. The instructions cause the one or more processors, for each threat event, to assign, using an expiry time prediction model, an expiry time to the threat event based at least in part on the threat category of the threat event, the expiry time prediction model trained using a set of historical threat events. The instructions cause the one or more processors to classify the threat event as inactive upon expiration of an assigned expiry time.
1 . A building management system comprising:
one or more computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to:
receive threat events indicating a potential threat to at least one of buildings, building equipment, people, or spaces within a building, each threat event comprising a threat category from among a plurality of threat categories;
for each threat event:
assign, using an expiry time prediction model, an expiry time to the threat event based at least in part on the threat category of the threat event, the expiry time prediction model trained using a set of historical threat events, each historical threat event in the set of historical threat events comprising:
at least one of the plurality of threat categories; and
at least one of:
an expiry time for the historical threat event; or
a start time and an end time usable by the one or more processors to determine the expiry time for the historical threat event; and
classify the threat event as inactive upon expiration of the assigned expiry time.
2 . The building management system of claim 1 , wherein the instructions cause the one or more processors to process the received threat events into a set of standardized threat event objects each comprising a threat category from among the plurality of threat categories, wherein the instructions cause the one or more processors to apply the expiry times to the standardized threat event objects.
3 . The building management system of claim 1 , wherein the instructions cause the one or more processors to group a set of the threat events together by determining a correlation between the start times of the threat events, the threat categories of the threat events, and locations associated with the threat events.
4 . The building management system of claim 1 , wherein the instructions cause the one or more processors to generate a classifier for the expiry time prediction model using the set of historical threat events and assign the expiry time to each of the threat events using the classifier.
5 . The building management system of claim 4 , wherein the instructions cause the one or more processors to apply a plurality of labels to the historical threat events of the set of historical threat events, the labels applied to each historical threat event determined based on histogram analysis of the expiry time of the historical threat event.
6 . The building management system of claim 5 , wherein the instructions cause the one or more processors to apply the labels by separating the historical threat events into a plurality of classes, each class of the plurality of classes defined by a range of expiry times.
7 . The building management system of claim 6 , wherein the instructions cause the one or more processors to train the classifier using the labeled historical threat events.
8 . A method for risk analysis, the method comprising:
receiving threat events indicating a potential threat to at least one of buildings, building equipment, people, or spaces within a building, each threat event comprising a threat category from among a plurality of threat categories;
for each threat event:
assigning, using an expiry time prediction model, an expiry time to the threat event based at least in part on the threat category of the threat event, the expiry time prediction model trained using a set of historical threat events, each historical threat event in the set of historical threat events comprising:
at least one of the plurality of threat categories; and
at least one of:
an expiry time for the historical threat event; or
a start time and an end time usable by the one or more processors to determine the expiry time for the historical threat event; and
classifying the threat event as inactive upon expiration of the assigned expiry time.
9 . The method of claim 8 , further comprising processing the received threat events into a set of standardized threat event objects each comprising a threat category from among the plurality of threat categories, wherein the method further comprises applying the expiry times to the standardized threat event objects.
10 . The method of claim 8 , further comprising grouping a set of the threat events together by determining a correlation between the start times of the threat events, the threat categories of the threat events, and locations associated with the threat events.
11 . The method of claim 8 , further comprising generating a classifier for the expiry time prediction model using the set of historical threat events and assign the expiry time to each of the threat events using the classifier.
12 . The method of claim 11 , further comprising applying a plurality of labels to the historical threat events of the set of historical threat events, the labels applied to each historical threat event determined based on the expiry time of the historical threat event.
13 . The method of claim 12 , wherein applying the labels comprises separating the historical threat events into a plurality of classes, each class of the plurality of classes defined by a range of expiry times.
14 . The method of claim 13 , wherein the method further comprises training the classifier using the labeled historical threat events.
15 . A building risk analytics system comprising:
one or more computer-readable storage media communicably coupled to one or more processors and configured to store instructions; and
the one or more processors configured to execute the instructions to:
receive threat events indicating a potential threat to at least one of buildings, building equipment, people, or spaces within a building, each threat event comprising a threat category from among a plurality of threat categories;
for each threat event:
assign, using an expiry time prediction model, an expiry time to the threat event based at least in part on the threat category of the threat event, the expiry time prediction model trained using a set of historical threat events, each historical threat event in the set of historical threat events comprising:
at least one of the plurality of threat categories; and
at least one of:
an expiry time for the historical threat event; or
a start time and an end time usable by the one or more processors to determine the expiry time for the historical threat event; and
classify the threat event as inactive upon expiration of the assigned expiry time.
16 . The building management system of claim 15 , wherein the one or more processors are configured to execute the instructions to process the received threat events into a set of standardized threat event objects each comprising a threat category from among the plurality of threat categories, the one or more processors configured to apply the expiry times to the standardized threat event objects.
17 . The building management system of claim 15 , wherein the one or more processors are configured to execute the instructions to group a set of the threat events together by determining a correlation between the start times of the threat events, the threat categories of the threat events, and locations associated with the threat events.
18 . The building management system of claim 15 , wherein the one or more processors are configured to execute the instructions to generate a classifier for the expiry time prediction model using the set of historical threat events and assign the expiry time to each of the threat events using the classifier.
19 . The building management system of claim 18 , wherein the one or more processors are configured to execute the instructions to apply a plurality of labels to the historical threat events of the set of historical threat events, the labels applied to each historical threat event determined based on the expiry time of the historical threat event.
20 . The building management system of claim 19 , wherein the one or more processors are configured to execute the instructions to apply the labels by separating the historical threat events into a plurality of classes, each class of the plurality of classes defined by a range of expiry times, wherein the one or more processors are configured to execute the instructions to train the classifier using the labeled historical threat events.