A system for detecting and classifying a security breach may include at least one sensor configured to detect seismic vibration from a source, and to generate an output signal that represents the detected seismic vibration. The system may further include a controller that is configured to extract a feature vector from the output signal of the sensor and to measure one or more likelihoods of the extracted feature vector relative to set {bi} (i=1, . . . , imax) of breach classes bi. The controller may be further configured to classify the detected seismic vibration as a security breach belonging to one of the breach classes bi, by choosing a breach class within the set {bi} that has a maximum likelihood.