Alert prioritization based on security checkpoint relationships

Abstract

Security checkpoint access history data and video may be analyzed to determine physical relationships between checkpoints, such as distances and access dependencies between checkpoints. The physical relationships may be used to determine remaining defense ratings for checkpoints relative to a protected asset. The remaining defense ratings may be used to prioritize security incidents and provide corresponding security alerts. The physical relationships may also be used to issue instructions for caching identity verification data in a local checkpoint data store. The checkpoint access history data may also be used to generate an access model for one or more identities and to detect an inconsistent access behavior that is inconsistent with the access model, thereby indicating a security incident may have occurred.