Technology Sectors

Market Sectors

New technology’s role in enhancing airport security

Steve Williams

After September 11, 2001, the United States began instituting an array of security measures intended to prevent future terrorism. However, an analysis of measures in place at the nation’s airports reveals that much work remains to be done. Bluntly put, would-be terrorists are still capable of gaining access to U.S. critical infrastructure. 

The problem becomes clearer by spotlighting details of high-profile terrorism cases. Consider the ease with which the 9/11 hijackers gained access to planes that morning. The box-cutter knives they carried were permitted on board because, at the time, any knife with a blade up to four inches long was permitted on domestic flights. 

Just as important, some hijackers lacked a valid, U.S. Government-issued identification card. These Al Qaeda members were allowed to board their planes anyway.    

Next, consider “shoe bomber,” Richard Reid, who was permitted to board an American Airlines flight in Paris on December 22, 2001, wearing plastic explosives in his shoes. He was allowed to board despite his having been prevented from flying the previous day due to his unwillingness to answer all of the passenger screener’s questions, and despite the fact that he did not check any luggage.     

In December 2009, Umar Farouk Abdulmutallab tried detonating plastic explosives in his underwear while on a Northwest Airlines flight en route from Amsterdam to Detroit. A month prior, Abdulmutallab’s father had expressed concerns over his son’s drift toward religious extremism to CIA officers at the U.S. Embassy in Abuja, Nigeria. Although Abdulmutallab’s name was added to one watch list -- the Terrorist Identities Datamart Environment -- it was not on the U.S. no-fly list, nor was his U.S. visa revoked.     

More recently, Times Square bomber Faisal Shahzad successfully boarded an Emirates flight at Kennedy International Airport bound for Dubai before being detained shortly prior to takeoff. He had been placed on the no-fly list earlier in the day, but the airline did not check the list when Shahzad made a reservation, nor when he purchased his ticket with cash. A routine post-boarding check did identify him as being on the list, leading to his arrest. 

Despite the varying circumstances involved in these incidents, they might never have occurred if certain security measures involving new technology had been in place. 

The “no fly” list, created and maintained by the U.S. Government, consists of names of individuals who are barred from boarding commercial aircraft for travel into or out of the country. Created soon after 9/11, its use has stirred controversy for incidences of false positives, in which law-abiding citizens have been mistakenly detained. Additionally, the list played a prominent role in the incidents involving Abdulmutallab and Shahzad. What good is such a list, critics rightfully ask, if it fails to keep such people from boarding planes? 

Although the officials charged with checking the no-fly list may be lax in their duties, technology currently exists to perform such checks efficiently. Electronic devices have been developed that can scan a passenger’s ID card (e.g., a driver’s license or military ID card) at the boarding gate, validate its authenticity, determine whether it is lost or stolen, and check whether the bearer’s identity is included on a watch or terrorist list. 

For example, the Defense ID system, developed by Intellicheck Mobilisa Inc., consists of a handheld device that reads barcodes and magnetic stripes on various forms of ID cards. By scanning and comparing the information to more than 140 “bad guy” and FBI Watch databases, Defense ID can determine in the space of a few seconds if the ID is fake, if it has been reported lost or stolen, if the individual presenting it has any outstanding wants and warrants, and if the individual is on an authorized roster of previously cleared personnel. In addition, Defense ID has photo-capture, incident recording and manual search capabilities. It could easily be adapted to check the federal “no fly” list.  

Cutting-edge verification technology alone will not guarantee the safeguarding of airports against potential terrorist attack, unless the technology is implemented wisely. Keeping potential terrorists away from secure areas in airports, or aircraft, requires an ambitious level of oversight. At airports, security will be maximized only when the implementation of ID readers is complete. 

John F. Kennedy International Airport, out of which Faisal Shahzad nearly managed to fly, has eight terminals and 14 security checkpoints. Yet the expense of fully implementing ID scanning technology at those checkpoints has been estimated to cost as little as $1.5 million. For the price of a few full-body scanning machines, the State of New York could deploy technology that would screen people against the “no fly” list before they ever boarded an aircraft. 

In the future, the fast-evolving science of biometrics will render the use of fake or stolen IDs even less feasible. One can envision a technology in which a passenger’s fingerprint is scanned at the boarding gate and instantly checked against a “no fly” database. Another innovation would be the use of a single universal database consisting of names of individuals of interest, updated in real time, and accessible at all security checkpoints. This would be designed to eliminate oversights, such as that which occurred in the case of Abdulmutallab, whose name appeared on one watch list but not another.

More than a decade after 9/11, the problem of security continues to plague the nation’s airports. As we have noted, the widespread implementation of new technology would go far toward making U.S. airports safer.

 

Recent Webinars

Thu, 04/26/2012 - 2:00pm - 3:00pm

Extracting real-time intelligence from Big Data with deep analytics is valuable but dif

Upcoming Events

Event Details Dates of Event
SANS Security West 2012 May 10 - 18
SANS Toronto 2012 May 14 - 19
SANS Secure Indonesia 2012 May 14 - 19
Emergency Management Seminar May 15 - 15
Counter Terror Expo US May 16 - 17
Emergency Management Seminars May 17 - 17
SANS at iTWeb Security Summit 2012 May 17 - 18
New Fire & Emergency Communications Codes Educational Seminar May 18 - 18
Managing Your Physical Security Program: Collaborate and Manage Smarter May 21 - 24
SANS Brisbane 2012 May 21 - 26
CEIC 2012 (Computer and Enterprise Investigations Conference) May 21 - 24
NERC CIP Compliance Training May 24 - 24
NESCO Town Hall: Security Risk Management Practices for Electric Utilities May 30 - 31
Advanced Hands-On CAMEO Training Jun 4 - 6
Security Program Design: A Critical Infrastructure Protection Model Jun 4 - 5
Facility Security Design Jun 4 - 6
SANS Rocky Mountain 2012 Jun 4 - 9
F5 Government Technology Symposium Jun 6 - 6
SEL Modern Solutions Power Systems Conference Jun 6 - 8
Second Annual Citizen Engagement Seminar Jun 12 - 12
ASIS Assets Protection Course: Functional Management (APC III) Jun 18 - 21
SANS Malaysia 2012 Jun 18 - 23
Data Center Brainstorm 2012 Jun 19 - 19
SANS Forensics and Incident Response Summit 2012 Jun 21 - 27
Vanguard Security & Compliance 2012 Jun 25 - 28
SANS Canberra 2012 Jul 2 - 10
SANSFIRE 2012 Jul 7 - 15
Executive Protection Jul 9 - 10
Military Vehicles Exhibition & Conference Jul 10 - 13
NERC CIP Compliance Training Jul 12 - 12
Security Force Management Jul 16 - 17
Physical and Logical Security: Advanced Applications and Economics Jul 16 - 19
Investigative Interviewing Methods Jul 18 - 19
SANS Thailand 2012 Jul 23 - Aug 4
SANS San Francisco 2012 Jul 30 - Aug 6
College & University Police & Investigators Conference Jul 31 - Aug 3