TY - GEN
T1 - Intrusion Detection in Smart Buildings Using Energy Anomalies
T2 - 24th European Conference on CyberWarfare and Security, ECCWS 2025
AU - Glass, Ayse
AU - Sithungu, Siphesihle
AU - Glass, Roman
AU - Müller-Lietzkow, Jorg
N1 - Publisher Copyright:
© 2025 Curran Associates Inc.. All rights reserved.
PY - 2025/6
Y1 - 2025/6
N2 - The increasing prevalence of smart buildings within urban environments necessitates advanced security measures to detect and mitigate potential threats. This study leverages the data by a private company ASHRAE, the ASHRAE - Great Energy Predictor III dataset (GEPIII). The research question is: How can anomalous energy consumption be used as a proxy for identifying intrusions in smart buildings? By establishing baseline energy consumption patterns for building operations, we investigate how deviations from these patterns may signal the presence of unauthorised individuals. The anomaly detection in this study focuses on deviations in energy consumption patterns, considering not only magnitude and frequency but also duration, timing, rate of change, consistency across similar conditions, correlation with external factors like weather, aggregate daily or monthly usage, geospatial distribution within the building, and statistical outliers. In this study, we employ a Long Short-Term Memory (LSTM) neural network for our anomaly detection task, capitalising on their ability to capture dependencies in sequential data. After training our LSTM model, we conducted extensive validation to assess its performance. The dataset provides meter readings from over 1300 commercial buildings, of which we used a subset of 100 randomly selected buildings for this study due to computational resource limitations. Using IoT with interconnected sensing devices in smart buildings to collect data, combined with AI is an emerging research area in building security. Results highlight the potential of this approach to provide tools for enhancing the security of smart buildings, with implications for broader urban safety systems. Broader implications are that threats can be detected pre-emptively by using the developed model, or buildings can be designed and then a simulation can be run against the developed AI model, influencing future building codes or policy changes for the governance of urban environments.
AB - The increasing prevalence of smart buildings within urban environments necessitates advanced security measures to detect and mitigate potential threats. This study leverages the data by a private company ASHRAE, the ASHRAE - Great Energy Predictor III dataset (GEPIII). The research question is: How can anomalous energy consumption be used as a proxy for identifying intrusions in smart buildings? By establishing baseline energy consumption patterns for building operations, we investigate how deviations from these patterns may signal the presence of unauthorised individuals. The anomaly detection in this study focuses on deviations in energy consumption patterns, considering not only magnitude and frequency but also duration, timing, rate of change, consistency across similar conditions, correlation with external factors like weather, aggregate daily or monthly usage, geospatial distribution within the building, and statistical outliers. In this study, we employ a Long Short-Term Memory (LSTM) neural network for our anomaly detection task, capitalising on their ability to capture dependencies in sequential data. After training our LSTM model, we conducted extensive validation to assess its performance. The dataset provides meter readings from over 1300 commercial buildings, of which we used a subset of 100 randomly selected buildings for this study due to computational resource limitations. Using IoT with interconnected sensing devices in smart buildings to collect data, combined with AI is an emerging research area in building security. Results highlight the potential of this approach to provide tools for enhancing the security of smart buildings, with implications for broader urban safety systems. Broader implications are that threats can be detected pre-emptively by using the developed model, or buildings can be designed and then a simulation can be run against the developed AI model, influencing future building codes or policy changes for the governance of urban environments.
KW - Anomaly detection
KW - Energy consumption patterns
KW - Intrusion detection
KW - Long short-term memory networks
KW - Smart buildings
U2 - 10.34190/eccws.24.1.3753
DO - 10.34190/eccws.24.1.3753
M3 - Conference Paper
AN - SCOPUS:105014910842
T3 - European Conference on Information Warfare and Security, ECCWS
SP - 135
EP - 140
BT - Proceedings of the 24th European Conference on CyberWarfare and Security, ECCWS 2025
A2 - Lipps, Christoph
A2 - Han, Bin
Y2 - 26 June 2025 through 27 June 2025
ER -