Context-aware security frameworks to detect malicious behavior in a smart environment (e.g., a home, office, or other building) are provided. The framework can address the emerging threats to smart environments by observing the changing patterns of the conditions (e.g., active/inactive) of smart entities (e.g., sensors and other devices) of the smart environment for different user activities, and building a contextual model to detect malicious activities in the smart environment.