Out of the Ordinary

Finding Hidden Threats by Analyzing Unusual Behavior

John S. Hollywood, Diane Snyder, Kenneth N. McKay, John E. Boon, Jr.

ResearchPublished Oct 14, 2004

This monograph presents a unique approach to “connecting the dots” in intelligence – selecting and assembling disparate pieces of information to produce a general understanding of a threat. Modeled after key thought processes used by successful and proactive problem solvers to identify potential threats, the Atypical Signal Analysis and Processing (ASAP) schema described in this document identifies out-of-the-ordinary, atypical behavior that is potentially related to terror activity; seeks to understand the behavior by putting it into context; generates and tests hypotheses about what the atypical behavior might mean; and prioritizes the results, focusing analysts’ attention on the most significant atypical findings. In addition to discussing the schema, the authors describe a supporting conceptual architecture and present specific techniques for identifying and analyzing out-of-the-ordinary information. An appendix presents the scenario for a hypothetical terrorist attack, describes the events leading up to the “attack,” and shows how ASAP could have been used to help intelligence analysts identify the threat.

Topics

Document Details

  • Availability: Web Only
  • Year: 2004
  • Pages: 188
  • Document Number: MG-126-RC

Citation

Chicago Manual of Style

Hollywood, John S., Diane Snyder, Kenneth N. McKay, and John E. Boon, Jr., Out of the Ordinary: Finding Hidden Threats by Analyzing Unusual Behavior. Santa Monica, CA: RAND Corporation, 2004. https://www.rand.org/pubs/monographs/MG126.html.
BibTeX RIS

This publication is part of the RAND monograph series. RAND monographs were products of RAND from 2003 to 2011 that presented major research findings that addressed the challenges facing the public and private sectors. All RAND monographs were subjected to rigorous peer review to ensure high standards for research quality and objectivity.

This document and trademark(s) contained herein are protected by law. This representation of RAND intellectual property is provided for noncommercial use only. Unauthorized posting of this publication online is prohibited; linking directly to this product page is encouraged. Permission is required from RAND to reproduce, or reuse in another form, any of its research documents for commercial purposes. For information on reprint and reuse permissions, please visit www.rand.org/pubs/permissions.

RAND is a nonprofit institution that helps improve policy and decisionmaking through research and analysis. RAND's publications do not necessarily reflect the opinions of its research clients and sponsors.