Security system with cooperative behavior

1. A computer-implemented method for a security system with cooperative behavior, the method comprising executing on a computer processor:

in response to receiving a threat alarm notification from a peer security system that is related to an area monitored by the peer security system, retrieving a selection of historic first sensor data acquired from a protected area, wherein the protected area is different from and geographically separate from the area monitored by the peer security system; and

determining that a security threat is indicated for the protected area by assessing the retrieved selection of historic first sensor data as a function of a relation of the threat alarm notification from the peer security system to the protected area;

wherein assessing the historic first sensor data without the function of the relation of the threat alarm notification from the peer security system to the protected area results in determining that the security threat is not indicated for the protected area.

2. The method of claim 1 , wherein the retrieving the selection of historic first sensor data comprises retrieving historic first sensor data indexed to a reassessment period of time extending prior to a time of receiving the threat alarm notification from the peer security system.

3. The method of claim 1 , wherein the threat alarm notification from the peer security system comprises a regional alert that is relevant to the protected area and that is selected from the group consisting of a news article, a social network posting, a weather services notice, a travel advisory and a public safety agency bulletin.

4. The method of claim 1 , wherein the determining that the security threat is indicated for the protected area comprises assessing the retrieved selection of historic first sensor data as a function of a similarity of a type of the historic first sensor data to a type of other sensor data that is used by the peer security system to generate the threat alarm notification; and

wherein the historic first sensor data is generated in association with the protected area by a first sensor, and the other sensor data is generated in association with the area monitored by the peer security system by a peer system sensor that is different from and geographically remote from the first sensor.

5. The method of claim 1 , further comprising:

revising a threat condition threshold as a function of feedback from the determining that the security threat is indicated for the protected area by assessing the retrieved selection of historic first sensor data as the function of the relation of the threat alarm notification from the peer security system to the protected area;

wherein implementation of the revised threat condition threshold in assessing the historic first sensor data without the function of the relation of the threat alarm notification from the peer security system to the protected area results in determining that the security threat is indicated for the protected area.

6. The method of claim 5 , wherein the relation of the threat alarm notification from the peer security system to the protected area comprises a total count of contemporaneous sensor data events that are reported from each of a group of peer security systems, the method further comprising:

in response to determining that the security threat is not indicated for the protected area by assessing the historic first sensor data without the function of the relation of the threat alarm notification from the peer security system to the protected area, incrementing the total count of contemporaneous sensor data events; and

determining that the security threat is indicated for the protected area in response to determining that the incremented total count of contemporaneous sensor data events meets a threshold value.

7. The method of claim 1 , wherein the determining that the security threat indicated for the protected area comprises assessing the retrieved selection of historic first sensor data as a function of a proximity of the protected area to the area monitored by the peer security system.

8. The method of claim 7 , wherein the determining that the security threat indicated for the protected area comprises increasing a likelihood that the retrieved selection of historic first sensor data to meet a threshold condition in inverse proportion to an amount that is selected from the group consisting of a proximity distance value of the protected area to the area monitored by the peer security system, and a time difference between the time of receiving the threat alarm notification from the peer security system and a time of occurrence indexed to the historic first sensor data.

9. The method of claim 1 , further comprising:

integrating computer-readable program code into a computer system comprising a processor, a computer readable memory in circuit communication with the processor, and a computer readable storage medium in circuit communication with the processor; and

wherein the processor executes program code instructions stored on the computer-readable storage medium via the computer readable memory and thereby performs the retrieving the selection of historic first sensor data acquired from the protected area in response to receiving the threat alarm notification, and the determining that the security threat is indicated for the protected area by assessing the retrieved selection of historic first sensor data as the function of the relation of the threat alarm notification from the peer security system to the protected area.

10. The method of claim 9 , wherein the computer-readable program code is provided as a service in a cloud environment.

11. A system, comprising:

a processor;

a computer readable memory in circuit communication with the processor; and

a computer readable storage medium in circuit communication with the processor;

wherein the processor executes program instructions stored on the computer-readable storage medium via the computer readable memory and thereby:

in response to receiving a threat alarm notification from a peer security system that is related to an area monitored by the peer security system, retrieves a selection of historic first sensor data acquired from a protected area, wherein the protected area is different from and geographically separate from the area monitored by the peer security system; and

determines that a security threat is indicated for the protected area by assessing the retrieved selection of historic first sensor data as a function of a relation of the threat alarm notification from the peer security system to the protected area;

wherein assessing the historic first sensor data without the function of the relation of the threat alarm notification from the peer security system to the protected area results in determining that the security threat is not indicated for the protected area.

12. The system of claim 11 , wherein the processor executes the program instructions stored on the computer-readable storage medium via the computer readable memory and thereby retrieves the selection of historic first sensor data by retrieving historic first sensor data indexed to a reassessment period of time extending prior to a time of receiving the threat alarm notification from the peer security system.

13. The system of claim 11 , wherein the threat alarm notification from the peer security system comprises a regional alert that is relevant to the protected area and that is selected from the group consisting of a news article, a social network posting, a weather services notice, a travel advisory and a public safety agency bulletin.

14. The system of claim 11 , wherein the processor executes the program instructions stored on the computer-readable storage medium via the computer readable memory and thereby determines that the security threat is indicated for the protected area by assessing the retrieved selection of historic first sensor data as a function of a similarity of a type of the historic first sensor data to a type of other sensor data that is used by the peer security system to generate the threat alarm notification; and

wherein the historic first sensor data is generated in association with the protected area by a first sensor, and the other sensor data is generated in association with the area monitored by the peer security system by a peer system sensor that is different from and geographically remote from the first sensor.

15. The system of claim 11 , wherein the processor executes the program instructions stored on the computer-readable storage medium via the computer readable memory and thereby revises a threat condition threshold as a function of feedback from determining that the security threat is indicated for the protected area by assessing the retrieved selection of historic first sensor data as the function of the relation of the threat alarm notification from the peer security system to the protected area;

wherein implementation of the revised threat condition threshold in assessing the historic first sensor data without the function of the relation of the threat alarm notification from the peer security system to the protected area results in determining that the security threat is indicated for the protected area.

16. The system of claim 15 , wherein the relation of the threat alarm notification from the peer security system to the protected area comprises a total count of contemporaneous sensor data events that are reported from each of a group of peer security systems; and

wherein the processor executes the program instructions stored on the computer-readable storage medium via the computer readable memory and thereby:

in response to determining that the security threat is not indicated for the protected area by assessing the historic first sensor data without the function of the relation of the threat alarm notification from the peer security system to the protected area, increments the total count of contemporaneous sensor data events; and

determines that the security threat is indicated for the protected area in response to determining that the incremented total count of contemporaneous sensor data events meets a threshold value.

17. A computer program product for a security system with cooperative behavior, the computer program product comprising:

a computer readable storage medium having computer readable program code embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the computer readable program code comprising instructions for execution by a processor that cause the processor to:

in response to receiving a threat alarm notification from a peer security system that is related to an area monitored by the peer security system, retrieve a selection of historic first sensor data acquired from a protected area, wherein the protected area is different from and geographically separate from the area monitored by the peer security system; and

determine that a security threat is indicated for the protected area by assessing the retrieved selection of historic first sensor data as a function of a relation of the threat alarm notification from the peer security system to the protected area;

wherein assessing the historic first sensor data without the function of the relation of the threat alarm notification from the peer security system to the protected area results in determining that the security threat is not indicated for the protected area.

18. The computer program product of claim 17 , wherein the computer readable program code instructions for execution by the processor further cause the processor to determine that the security threat is indicated for the protected area by assessing the retrieved selection of historic first sensor data as a function of a similarity of a type of the historic first sensor data to a type of other sensor data that is used by the peer security system to generate the threat alarm notification; and

wherein the historic first sensor data is generated in association with the protected area by a first sensor, and the other sensor data is generated in association with the area monitored by the peer security system by a peer system sensor that is different from and geographically remote from the first sensor.

19. The computer program product of claim 17 , wherein the computer readable program code instructions for execution by the processor further cause the processor to revise a threat condition threshold as a function of feedback from determining that the security threat is indicated for the protected area by assessing the retrieved selection of historic first sensor data as the function of the relation of the threat alarm notification from the peer security system to the protected area;

wherein implementation of the revised threat condition threshold in assessing the historic first sensor data without the function of the relation of the threat alarm notification from the peer security system to the protected area results in determining that the security threat is indicated for the protected area.

20. The computer program product of claim 17 , wherein the relation of the threat alarm notification from the peer security system to the protected area comprises a total count of contemporaneous sensor data events that are reported from each of a group of peer security systems; and

wherein the computer readable program code instructions for execution by the processor further cause the processor to:

in response to determining that the security threat is not indicated for the protected area by assessing the historic first sensor data without the function of the relation of the threat alarm notification from the peer security system to the protected area, increment the total count of contemporaneous sensor data events; and

determine that the security threat is indicated for the protected area in response to determining that the incremented total count of contemporaneous sensor data events meets a threshold value.