Timely detection#
A detection only matters if a response can arrive before the adversary finishes. Sandia's physical protection methodology, set out in Garcia's textbook, formalizes this as the probability of interruption along an adversary path. The path is a sequence of elements — approach, fence, yard, door, target — each with a detection probability and a delay . If detection happens at element , the response must arrive within the remaining delay .
where describe the response force time and is the standard normal CDF. This is the structure of the EASI method; we assume detection at the start of each element, which is the conservative choice for barriers.
An illustrative remote substation#
| Element | p(detect) — fence-centric | p(detect) — approach detection | Delay (s) |
|---|---|---|---|
| approach 300 m open ground | 0.05 | 0.85 | 150 |
| climb fence | 0.8 | 0.8 | 20 |
| cross yard 60 m | 0.3 | 0.3 | 40 |
| defeat control-house door | 0.5 | 0.5 | 180 |
| disable equipment | 0.1 | 0.1 | 300 |
Total path delay is 690 s (about 12 minutes). The fence-centric design has a vibration sensor on the fence and cameras on the yard. The approach-detection design adds wide-area radar and a perched EO/IR sentry covering the 300 m of open ground outside the fence. A third variant also raises yard detection with a sentry overhead. Response time standard deviation is 30% of its mean. All values are illustrative (probability_of_interruption.py).
Results#
| Response time | fence-centric | approach detection | approach + yard sentry |
|---|---|---|---|
| 3 min | 0.94 | 0.99 | 0.99 |
| 5 min | 0.90 | 0.98 | 0.98 |
| 8 min | 0.59 | 0.83 | 0.83 |
| 10 min | 0.37 | 0.62 | 0.62 |
| 15 min | 0.10 | 0.22 | 0.22 |
| 20 min | 0.04 | 0.08 | 0.08 |
| 30 min | 0.01 | 0.02 | 0.02 |
Three things stand out.
Response time dominates. For the fence-centric site, falls from 0.90 with a 5-minute response to 0.37 at 10 minutes and 0.10 at 15. Remote substations commonly see response times of 20–30 minutes, where is below 0.05 whatever the sensors.
Earlier detection buys a fixed amount of time. Detecting on the approach adds the approach delay (150 s here) to the response window. At a 10-minute response that lifts from 0.37 to 0.62 — the largest single improvement available without changing the response. At 20 minutes it barely matters.
More detection late in the path adds almost nothing. Raising yard detection from 0.3 to 0.6 moved by less than 0.01 at every response time, because by then most adversaries have already been detected and the remaining question is time.
Sensitivity: response-time variance and added delay#
Response times are not just slow; they are variable, and variance hurts. Holding the fence-centric layout fixed and varying the standard deviation of response time (recomputed at build time with the same formula):
| Mean response | σ = 10% of mean | σ = 30% | σ = 50% |
|---|---|---|---|
| 5 min | 0.92 | 0.90 | 0.85 |
| 8 min | 0.65 | 0.59 | 0.55 |
| 10 min | 0.30 | 0.37 | 0.40 |
| 15 min | 0.01 | 0.10 | 0.21 |
When the mean response is comfortably inside the path delay (5 minutes against 11.5), variance costs a little. When the mean is close to the delay (8–10 minutes), a predictable response is worth a great deal: at a 10-minute mean, going from ±50% to ±10% variability changes from 0.40 to 0.30. Pre-positioned mobile officers, rather than a guard who might be anywhere on a large site, are mostly a variance reduction.
Now add delay instead. Upgrading the control-house door from 180 s to 420 s of delay (a hardened door set, which is a facilities project rather than a security-technology one):
| Mean response | Approach detection | Approach detection + hardened door |
|---|---|---|
| 8 min | 0.83 | 0.96 |
| 10 min | 0.62 | 0.88 |
| 15 min | 0.22 | 0.51 |
| 20 min | 0.08 | 0.23 |
Four extra minutes of delay after the first likely detection point is worth more than any sensor in this model at 10–15 minute response times.
What actually moves the number#
Rearranging the formula makes the levers explicit: raise early , add delay after the first likely detection point, or cut . For remote infrastructure the third is often impossible, which leaves two options. Add delay — hardened control-house doors and equipment enclosures — or change the response model. Remote deterrence from a perched sentry (light and voice within seconds of detection) is not counted as interruption in EASI terms, but in practice it ends most opportunistic intrusions; and continuous tracking means responders arrive with a live picture rather than to an empty yard. We discuss the deterrence evidence separately because it does not fit a timely-detection model.
Limitations#
Single path, single adversary, normal approximations for delays and response time, detection at element start, no adversary adaptation to sensor placement, illustrative numbers. Full vulnerability assessments use multi-path analysis and site-specific performance data; this model is a teaching tool to show the shape of the trade-offs.
Frequently asked questions#
What is probability of interruption?
The probability that an adversary is detected early enough for a response force to arrive before the adversary completes the attack. It combines detection probabilities, path delays and response time.
Does adding sensors always improve security?
No. In our model, extra detection late in the path changed probability of interruption by less than 0.01. Response time and early detection mattered far more.
What is the EASI model?
Estimate of Adversary Sequence Interruption, a Sandia method that computes probability of interruption along a single adversary path from detection probabilities, delays and response time.
References#
- M. L. Garcia, Design and Evaluation of Physical Protection Systems, 2nd ed., Butterworth-Heinemann / Elsevier, 2007. Timely detection, probability of interruption and the EASI method developed at Sandia National Laboratories.
Reproducibility: model code is published at /research-code/ with a README. Results are model outputs under the assumptions stated above, not field trials.