Security theater
From Wikipedia, the free encyclopedia
Security theater are security countermeasures that provide the feeling of security while doing little or nothing actually to improve security.[1] The term was coined by Bruce Schneier for his book Beyond Fear but has gained currency in security circles, particularly for describing airport security measures. It is also used by some experts such as Edward Felten to describe the security measures imposed after the September 11, 2001 attacks on the World Trade Center. Security theater gains importance both by satisfying and exploiting the gap between perceived risk and actual risk.
Contents |
[edit] Definition of security theater
Security theater has been defined as ostensible security measures which have little real influence on security whilst being publicly visible and designed to show that action is taking place. Security theater has been related to and has some similarities with superstition.
[edit] Disadvantages
Security theater has a real monetary cost but does not provide tangible benefits. Most security theater involves restricting people's behaviour in very visible ways that likely involve intrusions into liberty and privacy.
The direct cost of security theater may be lower than that of security measures. However, it necessarily reduces the budget for effective security without resulting in adequate gain. In many cases, intrusive security theater measures also create secondary negative effects whose real cost is hard to quantify and likely to dwarf the direct expenses.
Such ripple effects are often connected to fear; visible measures such as armed guards and highly intrusive security measures may lead people to believe that there must be a real risk associated with their activity. Other reasons for ripple effects may be that people are simply unwilling to undergo such intrusions as would be required for some activity by the security measures imposed on it.
An example for both issues is that after a recent increase in restrictions in air travel, many frequent air travellers have expressed that they will try to avoid flying in the future. (Ironically, car travel, which is often considered as the alternative, is in fact riskier than air travel.)[2]
Security theater is a component of the culture of fear.
[edit] Benefits
While it may seem that security theater must always cause loss, there may actually be benefits, at least in a localised situation. This is because perception of security is sometimes more important than security itself. If the potential victims of an attack feel protected and feel safer then they may carry on their business, which would otherwise not take place. In addition, if the potential attackers do not realise that the security measures in place are ineffective, they may not go through with their attack.
Security theater has also proven itself effective in reducing shoplifting, particularly for businesses too small or otherwise unwilling to spend money on actual security measures. Examples of this include the use of mock surveillance cameras and empty camera housings; attachment of devices with blinking indicator lamps (and no other function) to high theft goods; and placing periodic make-believe security-related announcements on the store's public address system such as, "Inventory control...Please zoom cameras, focus and record zones 5, 8, and 9."
Critics of some such schemes such as the ACLU have pointed out that the benefits of security theater are temporary and illusory since after such security measures inevitably fail, not only is the feeling of insecurity increased, but there is also loss of belief in the competence of those responsible for security.
[edit] Examples
It is inherently difficult to give examples of security theater that are clear and uncontroversial. This difficulty is due to the fact that once it is agreed by all that a measure is ineffective, the measure seldom has any noticeable influence on perceived risk. As such the following are examples of alleged security theater.
- The American government has introduced a screening system called Computer Assisted Passenger Prescreening System. This system relies on static screening of passenger profiles to choose which people should be searched. Systems of this nature have been mathematically demonstrated to reduce the effectiveness of searching below that of random searches since terrorists can test the system and use those who are searched least often for their operations.[3]
- Biometric measurements are being introduced in many systems such as the ID Cards in the UK. All currently available biometric systems have been shown to be easy to mislead; further, it has been shown that having false biometric data matching a false identity is no more difficult than having a normal false identity.[citation needed] This is actually a significant impediment to security because one's PIN or password can be changed if an attacker obtains them, whereas fingerprints cannot.
- Random searches on subway systems, such as those taking place on the New York City Subway system have been criticized by the ACLU and others as security theater. They allege that since such searches are only at some stations and that people may decline such a search and simply leave that station, a terrorist could simply find a station where no searches were occurring and board there.[citation needed] Richard Clarke has countered that argument, stating that random searches will likely thwart any coordinated attack on a large piece of infrastructure.[citation needed]
- Conspicuous and clearly non-random searches by the British Transport Police of young Asian males at Leeds station: this has been an increasingly conspicuous trend since the 7/7/05 bombings in London, usually carried out right in front of the ticket barriers or in the main station concourse.
[edit] Avoidance
Many security experts believe that avoiding security theater is a desirable goal. They claim that by training people in risk acceptance and by educating people in the real risk levels of the activities they are involved in, security theater and the waste associated with it could be made to go away. Needless to say, this would be a fairly large task.
An alternative and important approach would be for those in charge of security to attempt to the best of their ability to explain and be honest about security risks. This method may be considered difficult since those who are responsible for making decisions about risk may fear that their own words will be used against them, for example in lawsuits.
[edit] See also
[edit] References
- ^ Schneier, Bruce (2003). Beyond Fear: Thinking Sensibly about Security in an Uncertain World. Copernicus Books, p. 38. ISBN 0387026207.
- ^ (December 2003) "Executive Protection - Alternate travel issues". ÆGIS e-journal 6 (12): 5–6.
- ^ Chakrabarti, Samidh and Strauss, Aaron (2002-05-16). "Carnival Booth: An Algorithm for Defeating the Computer-Assisted Passenger Screening System". Massachusetts Institute of Technology. Retrieved on 2006-09-06.
