Re:TSA: Fail
by einhverfr on Wednesday February 29, 2012 @06:47PM
(#3650308)
I have a friend who works for the TSA. We argue about the value of the organization a lot. And about airport security a lot.
Here's my view. It's not just the TSA that is to blame. It's the fact that American politics is often driven by hysteria. As an American, I say the answer is teaching people about real security strategy.
The hard truth, and one the American people have not accepted is that any idea of security must be firmly conditioned on the idea of acceptable risk. No matter what we do, the risk will never reach zero, so we are better balancing risk with the intrusiveness of the effort to eliminate it. Any security professional in any field worth his or her salt will tell you that.
So the TSA folks on the ground are put in a bind. They are sold as the answer to security and told they must prevent all future attacks. But the TSA is not in a position to do that. What they are in a position to do is to make it hard enough to carry out an attack that the real security folks (FBI, etc) can stop the plot before the terrorists get to the airport. This means that the right screening measures are important because by the time a terrorist gets to the airport, having planned and prepared with airport security in mind, it's simply too late for airport security to stop them. Therefore you have to see airport security as an assist to security rather than as the mechanism as a whole.
In that regard, the TSA has failed miserably. The article lists a few points, but misses one of the biggest problems with the way the bodyscanners are currently implemented: they replace metal detectors.
Nobody has ever brought down a plane with a bomb detonated by a non-metalic detonator. There have been a few attempts (the shoe bomber, the underwear bomber, etc), but these require a lot more human intervention to set off, and therefore provide crew and passengers a better chance to react. In many cases they are also more difficult to get to work in the first place.
So the bodyscanners eliminate a small security hole but in the process create a much larger one. Metalic devices can be hidden in body cavities and are invisible to the scanners. And without metal detectors we don't even have a chance to detect the worst of them.
The TSA has shown that they are worried about this. They have repeatedly said they are concerned about, say, radio-controlled toys and cell phones, but they have created a situation where they can't do anything about it.
Security is a process and not a product. When it becomes a product, we see what happens. The TSA is both a product of the product mentality (pun intended), and a product that was sold to the American People after 9/11 as the answer to our security woes. Until we can get the American people to go through the security assessment process, we will be stuck with more of the same.
Here's my view. It's not just the TSA that is to blame. It's the fact that American politics is often driven by hysteria. As an American, I say the answer is teaching people about real security strategy.
The hard truth, and one the American people have not accepted is that any idea of security must be firmly conditioned on the idea of acceptable risk. No matter what we do, the risk will never reach zero, so we are better balancing risk with the intrusiveness of the effort to eliminate it. Any security professional in any field worth his or her salt will tell you that.
So the TSA folks on the ground are put in a bind. They are sold as the answer to security and told they must prevent all future attacks. But the TSA is not in a position to do that. What they are in a position to do is to make it hard enough to carry out an attack that the real security folks (FBI, etc) can stop the plot before the terrorists get to the airport. This means that the right screening measures are important because by the time a terrorist gets to the airport, having planned and prepared with airport security in mind, it's simply too late for airport security to stop them. Therefore you have to see airport security as an assist to security rather than as the mechanism as a whole.
In that regard, the TSA has failed miserably. The article lists a few points, but misses one of the biggest problems with the way the bodyscanners are currently implemented: they replace metal detectors.
Nobody has ever brought down a plane with a bomb detonated by a non-metalic detonator. There have been a few attempts (the shoe bomber, the underwear bomber, etc), but these require a lot more human intervention to set off, and therefore provide crew and passengers a better chance to react. In many cases they are also more difficult to get to work in the first place.
So the bodyscanners eliminate a small security hole but in the process create a much larger one. Metalic devices can be hidden in body cavities and are invisible to the scanners. And without metal detectors we don't even have a chance to detect the worst of them.
The TSA has shown that they are worried about this. They have repeatedly said they are concerned about, say, radio-controlled toys and cell phones, but they have created a situation where they can't do anything about it.
Security is a process and not a product. When it becomes a product, we see what happens. The TSA is both a product of the product mentality (pun intended), and a product that was sold to the American People after 9/11 as the answer to our security woes. Until we can get the American people to go through the security assessment process, we will be stuck with more of the same.