The technology and the terrorist

On this past Christmas Day, a holiday nightmare was averted when a passenger and good luck kept a terrorist from blowing apart Northwest Airlines Flight 253 as it prepared to land in Detroit. While this story has a happy ending, we're left to wonder why the automated systems designed to catch such people in the first place failed.

And, make no doubt about it, they did fail. After first pretending that some how the systems had worked, Homeland Security Secretary Janet Napolitano admitted on NBC's "Today" show that "Our system did not work in this instance." So, what are these systems anyway and why didn't they stop Farouk Abdulmutallab, a 23-year-old Nigerian, from ever getting on the plane with the powerful PETN (pentaerythritol tetranitrate) explosive.

The main failure was that Abdulmutallab was even allowed to get a ticket and boarding pass in the first place. His own father had reported that he was concerned over his son's "radicalization" to the U.S. Embassy in November. What happened after that is where things began to fall apart.

In the intersection between databases, policy, and what's practical, Abdulmutallab fell through the cracks. As The Washington Post reported an U.S. intelligence official said, "It's got to be something that causes the information to sort of rise out of the noise level, because there is just so much out there."

And, indeed there is. His father's warning earned him a spot on the approximately 550,000 names in the TIDE (Terrorist Identities Datamart Environment), which is a database that's kept by the U.S. National Counterterrorism Center. It's a mis-named database. It's not a list of identified terrorists; it's a grab-all for anyone who might be associated with a terrorist organization.

Every day analysts comb through the list for people who they think deserve more attention. It's at this stage that Abdulmutallab probably dropped off the radar. A father reporting that he was worried about his son becoming involved with Islamic terrorists in and of itself wouldn't have been enough to trigger any more action.

The Counterterrorism Center then forwards a smaller group of names and information at 11 PM Eastern Time to the FBI's Terrorist Screening Center. There, this information is edited and combined with other agencies' information to provide the refined data for TSDB (Terrorist Screening Database). In theory, this provides, according to the FBI, "'one-stop shopping' so that every government screener is using the same terrorist watchlist-whether it is an airport screener, an embassy official issuing visas overseas, or a state or local law enforcement officer on the street."

Actually, it doesn't work that way. The cop on the street corner doesn't have access to the TSDB, nor do the scanners in the airport. Instead, each government agency concerned with terrorism then makes its own call on how to handle the information. So, for example, someone who's on the TSA's (Transportation Security Administration) "no-fly" list of about 4,000 people may not be on the State Department's CLASS (Consular Lookout and Support System PDF Link) and so on.

In addition, while at the moment, most of the concern is about how Abdulmutallab slipped through the system, it wasn't long ago that most of the concern over TIDE and the TSDB was about false positives. For example, former Senator Ted Stevens' wife was frequently delayed in her flights at one time because airlines and TSA staffers confused her, Catherine Stevens, with the then 'no fly' watch-listed, musican Cat Stevens.

So, yes, the database systems failed, but it wasn't a failure of the technology. It was a failure of insufficient data and any system that tries to use fragmentary and incomplete data to tell the difference between a crank and a terrorist.

For all that Republicans are proclaiming that this episode shows how bad our security is now and that President Obama has ordered a review of the nation's terror watch-list system, neither complaints nor reform can render our terrorist defenses invulnerable.

As Christopher Hitchens points out in Slate, "We had better get used to being the civilians who are under a relentless and planned assault from the pledged supporters of a wicked theocratic ideology. These people will kill themselves to attack hotels, weddings, buses, subways, cinemas, and trains. They consider Jews, Christians, Hindus, women, homosexuals, and dissident Muslims (to give only the main instances) to be divinely mandated slaughter victims. Our civil aviation is only the most psychologically frightening symbol of a plethora of potential targets." And, no technology, not how we use it, will provide perfect protection against them.

ITWorld DealPost: The best in tech deals and discounts.
Shop Tech Products at Amazon