Schneier on Security Theater

by Tim Lee on August 14, 2006 · Comments

Bruce Schneier, who I’ve been informed actually invented the phrase “security theater,” has a brilliant op-ed on last week’s foiled terrorist plot:

It’s reasonable to assume that a few lone plotters, knowing their compatriots are in jail and fearing their own arrest, would try to finish the job on their own. The authorities are not being public with the details–much of the “explosive liquid” story doesn’t hang together–but the excessive security measures seem prudent.

But only temporarily. Banning box cutters since 9/11, or taking off our shoes since Richard Reid, has not made us any safer. And a long-term prohibition against liquid carry-ons won’t make us safer, either. It’s not just that there are ways around the rules, it’s that focusing on tactics is a losing proposition.

It’s easy to defend against what the terrorists planned last time, but it’s shortsighted. If we spend billions fielding liquid-analysis machines in airports and the terrorists use solid explosives, we’ve wasted our money. If they target shopping malls, we’ve wasted our money. Focusing on tactics simply forces the terrorists to make a minor modification in their plans. There are too many targets–stadiums, schools, theaters, churches, the long line of densely packed people before airport security–and too many ways to kill people.

Security measures that require us to guess correctly don’t work, because invariably we will guess wrong. It’s not security, it’s security theater: measures designed to make us feel safer but not actually safer.


And as Schneier points out, the most important thing we can do is not to be terrorized. There aren’t nearly enough terrorists to pose any significant danger to the average American. We should take prudent steps to make terrorism more difficult to accomplish, but we shouldn’t paralyze our air transportation network in a futile effort to drive terrorism down to zero. Confiscating toenail clippers and making people take off their shoes for extra scanning is doing the terrorists’ job for them, by vastly exaggerating the scope of the terrorist threat.

Alarmist op-eds have the same effect:

In recent months, we have become so immersed in political wrangling over the ongoing military actions in Iraq that the potential for sudden death from terrorist attack has become a secondary part of the national debate. We can’t allow that to happen.

The fact that certain groups of Islamic zealots will do anything to destroy American lives and the American way of life has to be a consideration in every political, social and tactical decision we make.

The minor inconvenience of longer waits in airport security lines is far better than again suffering the sort of wanton destruction that changed the nation forever just five years ago.

We suffer “wanton destruction” on par with September 11 on our highways every month, yet no one seriously suggests that the “minor inconvenience” of a 35 mile-an-hour speed limit would be a reasonable response. Every week, twice as many people die from smoking-related illnesses as died in September 11, yet few people support the “minor inconvenience” of banning cigarettes.

Rhetoric like this vastly overstates the scope of the terrorist threat. And that’s precisely what the terrorists hope to accomplish. They know they can’t kill a significant fraction of us (aside from getting their hands on a nuclear weapon–something that confiscating toenail clippers certainly won’t stop), but they’re counting on peoples’ lack of critical thinking skills to do the job for them. If they can kill a few dozen of us every year, they’re counting on our media and our politicians to give their actions far more coverage than they deserve.

Finally, there’s never a bad time to plug Cato’s 2004 article, “A False Sense of Insecurity? How does the risk of terrorism measure up against everyday dangers?” (PDF)

(Hat Tip: Jim Lippard)

Comments Posted in: Privacy, Security & Government Surveillance

  • In contrast, it's not clear to me how blowing up an airplane with 100 people on it is inherently more disruptive than a series of car crashes that kill 100 people. Obviously, it'll get more media coverage and cause more people to panic, but if that's what makes terrorist attacks worse, isn't that an argument for downplaying the terrorist threat whenever we can?

    Network disruption. If a network can be disrupted often enough, it becomes useless. The economy is constructed of many networks, overlaid and interdependent. These networks strive to an efficient scale-free topology, under normal and stable market conditions. Those same-scale free networks, because of their very efficiency (part of the efficiency is being not very redundant.), are susceptible to disruption by a planned attack strategy. The optimal network for resisting attack has been shown to be clique and delegation based.

    The goal of those who are planning these attacks is network disruption, not symbolic terrorism.

    The topology of covert conflict
    Shishir Nagaraja, Ross Anderson

  • Thanks for the reply, Tim. I still think that focusing exclusively on the body count -- even if we restrict ourselves to taking about "normal" people as opposed to prominent ones -- is oversimplifying things. Among other problems, it ignores the damage that terrorist attacks do to the physical and cultural infrastructures of liberal societies.



    I've updated my post with a more complete response. Here's the link again:


    http://weblog.roth-cline.net/archives/2006/08/more_than_meets_the_eye.html
  • Tim
    OK, I'll buy the idea that the body count by itself doesn't accurately measure how bad a given threat is. But the Kennedy assassination was bad because the president is an especially important person in our society, and hence killing him disrupts the smooth operation of our government. In contrast, it's not clear to me how blowing up an airplane with 100 people on it is inherently more disruptive than a series of car crashes that kill 100 people. Obviously, it'll get more media coverage and cause more people to panic, but if that's what makes terrorist attacks worse, isn't that an argument for downplaying the terrorist threat whenever we can?

  • Tim, this argument is appealing at first glance, but I think it's oversimplifying things. The social impact of a terrorist attack can't just be boiled down to a body count; there are more contextual factors at work.



    I've replied to this post on my site:


    http://weblog.roth-cline.net/archives/2006/08/more_than_meets_the_eye.html
  • I agree whole heartedly with the general thrust of this post, but there is one item I would like to add.

    It is very true as the the Cato paper states,It should be kept in mind that September 11 continues to stand out as an extreme event.


    However, there exists the possibility that another type of extreme event, utilizing biological weapons, could top, by a large order of magnetude, what happened on 9/11. What is most frustrating is that the threats being planned for now are generally the ones that can't be controlled (bomb in shopping mall, for example, or in luggage at airport) and would be a blip in terms of the deaths say from road accidents, or infections acquired in hospitals, for example.

    However, despite the fact that a biological attack could occur, and it alone (with the exception, say of a lose nuke) could increase by an order of magnitude what occurred on 9/11, almost nothing is being done by the current administration to deal with this threat. Coupled with the dramatic rise in infectious diseases anyway (diseases have historically been transferred from other species to humans at the rate of about one every century, but now, due to a variety of factors, are transmitted at the rate of about one a year) and there are other reasons to begin to build a public health infrastructure.


    Thus, a very credible case could be made for increasing public health expenditures, esp. those targeting disease surveillance and public health in general. But almost no progress on these programs is being made by the current administration, primarily because it is afraid, I suppose of 'socializing medicine' It's called being ideologically hamstrung, and unless a dose of pragmatism enters into this debate, many more lives than necessary will be lost to emerging (or re-emerging) infectious diseases.


    We've actually been very lucky. If for example SARS had an incubation period of just one day longer, current models have predicted it would likely have not been controlled.

  • As I have said... They will strip us naked, shave our heads (might have piano wire in our hair or something like that), ban all luggage--period, strap us to plexiglass plates with handcuffs so that they can see us at every angle, withour legs spread open for on-demand cavity searches...


    And then they will still allow Pakistani, Saudi and Egyptian Muslims to work in the crews out of political correctness.


    The fact that some of the people involved were recent converts does raise a "Muslim problem" with security. On the flip side, it also proves that Islam, not Arab and Pakistani culture, is the root problem.

blog comments powered by Disqus

Previous post:

Next post: