UK To Use "Risk-Profiling Software" To Screen All Airline Passengers and Cargo
dryriver writes "The BBC reports: 'The UK branch of an American company — SAS Software — has developed a hi-tech software program it believes can help detect and prevent potentially dangerous passengers and cargo entering the UK using the technique known as 'risk profiling.' So, what exactly is risk profiling and can it really reduce the risk of international terrorism? Risk profiling is a controversial topic. It means identifying a person or group of people who are more likely to act in a certain way than the rest of the population, based on an analysis of their background and past behavior — which of course requires the collection of certain data on people's background and behavior to begin with. When it comes to airline security, some believe this makes perfect sense. Others, though, say this smacks of prejudice and would inevitably lead to unacceptable racial or religious profiling — singling out someone because, say, they happen to be Muslim, or born in Yemen. The company making the Risk-Profiling Software in question, of course, strongly denies that the software would single people out using factors like race, religion or country of origin. It says that the program works by feeding in data about passengers or cargo, including the Advanced Passenger Information (API) that airlines heading to Britain are obliged to send to the UK Border Agency (UKBA) at 'wheels up' — the exact moment the aircraft lifts off from the airport of departure. Additional information could include a combination of factors, like whether the passenger paid for their ticket in cash, or if they have ever been on a watch list or have recently spent time in a country with a known security problem. The data is then analyzed to produce a schematic read-out for immigration officials that shows the risk profile for every single passenger on an incoming flight, seat by seat, high risk to low risk.'"
Whereas I believe it's unlikely to work, probably expensive, and manifestly open to being gamed.
Sigh.
I used to have a better sig than this, but I got tired of it
Given the number of bad things that happen on airlines, the software could just assign a risk of "zero" to everything. This would be just as accurate as any other way of finding a non-existent needle in a haystack.
"I'm sorry Hassan, I can't let you take that plane"
are the people who invent this shit,
when you see oppressive tools you can be sure they have a UK or US flag on them
Of course, it would also include all google search logs, facebook posts, private e-mail, and any other private information the government deems necessary to do a risk assessment. Perhaps not right away - but that is where all this is going.
Now seriously, ! I'm tired of seeing the same bullshit again and again, just with different icing, to justify what's flawed from the very start. This shows that people taking decisions are tied to their own irrationally feelings and not paying attention to what science tells them.
I once read a scientific paper which recommends, if I remember correctly, randomly selecting 8% of the passengers for extended verification. This procedure has the advantage of transmitting zero information to the bad guys. If you start profiling, you give them a chance to test the system.
They now just have to find somebody which would score as low risk and they won't have any trouble.
What sig ?
This is going to cause major problems for some and not do anything at all to reduce the "threat".
There have been an insufficient number of attacks to warrant doing anything at all let alone inconveniencing a ton of people. This is coming from someone who is a white male from the United States with an upper middle class income and living in an area of extreme stability (it isn't Detroit, Mormon country, or another city/area with security issues or fringe groups).
I had a choice between flying from an airport without any security measures and flying from one with these security measures I would certainly pick the one without. I bet there would be exactly zero people flying from air ports which implemented these measures too provided all things were equal (airports of equal distance, flights of equal cost, etc).
A couple of years ago I went for an interview for one of these companies rather naively. Their product wasn't described as profiling, surveillance or monitoring but "adaptive security". After I finally cut through all the bullshit and worked out what they were actually selling, I bailed on it (with a proverbial "fuck you stasi bastards" and loss of the job agent). However I couldn't help noticing one thing:
The management staff were utterly convinced that this was the best way to go and that the entire world's problems were going to be solved by profiling in this way. I'm not talking about it being the marketing pitch, but actually some kind of crazy psychopathic paranoia about their own mortality in the hands of terrorists. I cannot fathom how these guys actually operate with this mindset at all. It was rather shocking actually and has permanently destroyed my acceptance of capitalism. It was literally like OCP or Weyland corporation were real for a few minutes.
Someone needs to legislate this out of existence because we're fucked if society ends up at the hands of nutjobs like them.
seems to be exactly what they were doing, just calling it something else with the hope of deflecting the expected racist focused backlash
and zero accountability?
Sounds like a plan!
As far as I know, every civilized country considers such behavior to be not only highly illegal, but taboo according to its constitution.
Also, they know exactly, that actual dangerous terrorists would only "land" and go to "checkpoints" in the way that the 9/11 terrorists "landed" and went through "checkpoints".
OK, apart from the even more dangerous terrorists who already were allowed to come to the UK unchecked and try to sell these systems.
As someone who knows a little bit about multi-criteria decision making, risk analysis, probability theory and their friends (plausibility, possibility, fuzzy logics, etc.), I submit that these kinds of software programs are all just hocus-pocus and based on bullshitting customers.
How can I claim that without having seen the software? Simpe answer: The number of terrorist incidents is too low to establish significent correlations. The software is probably better at recognizing Pakistani cooks than at recognizing your next Breivik.
If it won't use race, religion, or country then its a bit like asking someone to run a race without using their legs. When will people accept that a woman's institute member is a lot less likely to be a terrorist than someone who has just converted to Islam
Yep, it's also just like how "redlining" for mortgage rates or for loan applications by banks was just a shadowy-sneaky way of putting race-based triggers into a fancy "computer expert decision system" so that the statistical correlations could be blamed: we're not charging them more because they're black: we're charging them more because they fit the criteria x+y+z which we happened to pick so that they select this particular category. Look up redlining.http://en.wikipedia.org/wiki/Redlining
.
It's the sameway that the airlines had to use to check passenger names with CAPPS and CAPPS-2, the sequel. Look at http://www.aclu.org/national-security/problems-no-fly-list-show-problems-capps-ii-airline-profiling-system to see "Problems With No-Fly List Show Problems With CAPPS II Airline Profiling System." Effectively, it's a sequel and another instance of CAPPS again. (Had to search for phonetic matching airline and nofly to find these references).
Additional information could include a combination of factors, like whether the passenger paid for their ticket in cash, or if they have ever been on a watch list
Great idea, that way anybody that has ever been put on a watch list can be harassed for ever! Not because a court of law determined they did anything wrong, no, but because they're on a list (or have been on one). You see, they probably did something wrong or else they wouldn't have been on that list in the first place...
Never mind the fact that this is all done in secret, with no judicial oversight, no accountability and no way to appeal those decisions and that people basically end up on those lists for exercising their political rights.
Try working as a journalist/filmmaker and reporting on the global war on terror, try actively opposing the US drone war or try supporting wikileaks (or any organization that the US has secretly decided they do not like) and see how quickly you end up on those watch lists.
Of course, you'll never know you're on one of those lists until the next time you try flying to the US, then you'll be detained and questioned (not to mention laptop seizure etc.). It happened many times to Jacob Appelbaum, a Tor developer, it happened to Imran Khan, one of the most popular politician in Pakistan and it happened repeatedly to Laura Poitras, an Oscar-and Emmy-nominated filmmaker. These people are spied on and harassed because of their political opinions, thanks to the global surveillance state we now live in.
How submissive have we become that as people living in democracies we even accept the existence of "watchlists"?
Step 1 Fall for sales pitch from "big software outfit".
Step 2 Sack all human workers.
Step 3 Spend the following years sitting in Commons Select Committees explaining why the software couldn't possibly have foreseen the people that got in or that they would do what they subsequently did.
Step 4 Explain to indignant journalists why it is that Mr and Mrs Smith, born in the UK and resident there for 50 years, have been refused re-entry because "they fit the profile for troublemakers", whilst several dozen people, all claiming to be called Mohammed Khan, sail through unchallenged.
"has permanently destroyed my acceptance of capitalism"
Since when did an economic model have any relevance on what security software a company is developing? You think the russians are just sitting around writing screensavers full of fluffy bunny rabbits?
"I bailed on it (with a proverbial "fuck you stasi bastards" "
Very mature.
Jeez, I've never read such a lot of lefty student tosh in all my life.
If a disproportionately large percentage of all people in group X (where X is, say, 'terrorist risk') have some factor Y in common, (where Y is, say, a particular race, religion, or country of origin), to the point that there appears to be a statistical correlation, but an equally small percentage of people with factor Y in common actually could be delegated to group X, then those factors will balance eachother out, and the software can reasonably exclude factor Y from consideration. However, even if the software involved can consider numerous other factors than Y, the fact that there will still be enough of Y in common among people who are put into group X will still make it appear externally as if factor Y is actually being considered, and profiling based on factor Y will nonetheless still be assumed. It's unavoidable.
File under 'M' for 'Manic ranting'
#1 each screened passenger: win a bit of money
#2 each detected actual threat: win more money
#3 each false positive: lose some money
#4 each terrorist act by someone who went through screening: lose a lot of money
#5 system must generate at least a certain rate of positives
Have different companies operate different gates and assign bonus money according to ranking.
What is it that makes everyone think that airplanes must become flying fortresses instead of just being as secure/dangerous as the rest of our lives already is? I can visit any government building, including courts and parliaments with less security theatre than I can board a plane. Nobody does a background check on you before you can walk in front of the white house. Nobody screens your luggage when you board a train, enter a subway station or stand in line at the museum.
The idea that there is something so special about airports and airplanes that nobody must be allowed to bring a container with more than 100ml of liquid in them is ridiculous.
Oh, 9/11 you say? Reinforced cockpit doors, handguns for pilots. Done.
1 - Why don't you go back to the time when you spent a minimal amount of money on scanning passengers looking for a needle in a haystack, and instead concentrated on intelligence and infiltration of terrorist groups so that you can concentrate your resources?
2 - Why don't you realise that 'terrorists' (and there seem to be very few of them nowadays) aren't doing it because 'they hate our freedom' but because they're pissed off with some foreign activity we've undertaken? Rethinking some of the mad and pointless wars we've been starting would cut back on the terrorist threat AND improve the government's popularity with the 75% of the voters who aren't part of the military/arms production complex...
Agreed, the probability of you being a terrorist is so low that it's beyond any 'hocus pocus', it's well into homeopathy levels.
I prefer to the "Homeopathic Risk Profiling" because it has more to do with the placebo effect than actual security. Governments FEEL they've spent money on the matter, even though they've actually been sold a placebo and the money is wasted.
If not, it's an arbitrary decision. And it leaves their government opened to be sued.
Don't stop where the ink does.
could bring aboard a hand-grenade, untracable, in a body-cavity, remove it on the loo and detonate it without it being damped.
This needs absolutely nothing except from a somewhat dirty imagination and lube.
The fact that this does not happen all the time tells me that there are way less people eager to blow up planes than we are made believe.
I see a lot of contents from people who seem pretty sure of themselves, but clearly have no training or experience in security. Machine learning? That's nothing to do with it, humans can and do input the parameters. You think these criteria can't be effective? There are a number of characteristics which have been true of every single hijacker ever. The most obvious - it's politically to incorrect to notice that they are ALWAYS young males, every single time.
We shouldn't fear every time some new technology is employed to fight evil. Don't just have a knee jerk reaction to this. I know people who have worked on this project and I trust them and their work.
I know governments that have worked on much more serious projects and I don't trust them or their work.
Fight evil? Don't make me laugh. Keep contractors in jobs and bureaucrats in bribes more like.
Now we all know it picks on Arabs who pay cash all the bad guys have to do is legally change their name from Mohammed to Hank, apply for a bank card, and order the standard in-flight meal.
"The company making the Risk-Profiling Software in question, of course, strongly denies that the software would single people out using factors like race, religion or country of origin. It says that the program works by feeding in data about passengers..."
...which singles people out using factors like race, religion or country of origin.
They can deny it as "strongly" as they want. How else would they get anything remotely relevant without resorting to racial or religious profiling? And would that be useful anyway? Is the hypothetical future "airline terrorist" a real problem, or more of an excuse to make money by Fear entrepreneurs and peddlers?
So what exactly is the problem with racial profiling? arabs, muslims, and those born in yemen, on average are much more likely to wish and to actually cause harm to the civilized nations. They have done this time and time again, are we to ignore that? If you put your hand on a hot stove and it burns you, do you next time not avoid hot stove? or do you consider that "object profiling", I mean common, just because the hot stove burned your hand once, does not mean it will again right?
As much as we dont want to admit it, certain people can be profiled to behave certain ways. No one wants to admit it because we all want to say "Hey you cant profile me just because I am a certain skin color from a certain area of a certain age, etc doesnt mean I fit into your little box. I am my own person blah blah blah" but the truth is you can profile people based on certain things with a certain measure of accuracy.
Its like people who think stereotypes are bad when infact stereotypes are born from factual reality. Its called social commentary. If your a black guy from detroit you have a good chance of being a thief or gang member, if youre a white guy from cincinnati chances are good you beat your wife, if your a true jewish person from a jewish family chances are your cheap and or very thrifty, and so on. So it stands to reason you can have a system in place with certain peramiters to profile people who would be considered higher risk than others.
When you toss in a database of people on watch lists, known to have ties to certain organisations, felony list, come from a certain portion of the world where certain activities are more common and so on then you can have a decent guideline to by. Im sure they wont stop and harass every single person to set off an alarm but it does give them a guideline to be able to pay more attention to certain people. Is it fool proof? Hell no but when you lack having a perfect tool youre better off having multiple tools to use together.
I'm not going to comment on whether this right or wrong. Rather, why this is news at all. Risk profiling is already done by airport personnel. This is just leveraging technology to apply it systematically. Which, as noted by other posters, just creates a systematic way of defeating the process if you know the triggers.
The introduction of risk profiling software is more a case of good 'ol CYA. Next time someone makes it through who shouldn't, the boys/girls in charge can pull out a report (thanks to SAS) that proves they applied all the certified screening rules against the offender, and therefore, they are not to blame.
Having worked in law enforcement, and then in software design where one of the projects was risk analysis for fraud detection, all I can do is wobble my head in disbelief. The model will catch those people whose parameters match the model - initially because the model is a reasonable guess, but over time and the players and methods change, the model will appear more successful since those people are being targeted more often. Profile all dark, left handed persons from Denmark or Scotland, and sure enough, you will more than likely find more dark, lefthanded bad persons from those areas. Even if the models are adaptive, they will always be adaptive post hoc. Once again, it's theater, and some are going to make a lot money by promising things that can't be delivered.
So the same idea that led to junk bonds being rated as safe investments is not going to be applied to people?
While I grant you that every method of screening passengers involves risk profiling of some sort, boiling it down to a series of expert-system questions and algorithms (hey it's cheap and fast!) is bound to have some spectacular failures and, more importantly, many, many false-positives. Imagine if this was run at a national level against all citizens, preemptively? Why wait for them to even buy a ticket, let alone go to the airport. Today's technology allows a type of direct control over millions of people that the despots of years past could only dream of.
if (($skintone matthewmcconaughey) do anal_probe;
if ( $passanger.race == Arab || $passanger.religion == Muslim || $passanger.religion == catholic ) { $screening.secondary = 1 }
No, I'm not talking about muslims... I'm talking about the white cretins on here who are lambasting profiling, and trying to make out that targetting MUSLIMS and other 'swarthy types' is NOT a good idea, but instead, we should target people at RANDOM, especially old white people, white people in wheelchairs, white five year old children, etc.etc.
The TSA is one step further on the road to tyranny. It's outrageous. White people are being FORCED to give up our countries to millions of hate-filled, parasitic non-whites. Why are these people here, if whites aren't better than them? Are our countries better than theirs because of the LAND MASSES themselves, or the weather, or is there gold sticking out of the ground here? No, our countries are better and MORE DESIRABLE than their third world shitholes, because of ONE thing - WHITE PEOPLE. White people who BUILT these countries, and made them BETTER places than the third worlders made their country.
And of course, once they become the majority here, they will have turned OUR country into a third world shithole just like the ones they ran away from.
If you're white and you want to live in a 'multi cultural' society, then MOVE TO AFRICA, and stop ruining everybody else's lives, you arrogant, hate-filled control freaks. It isn't up to YOU or anybody else, to decide who I, or anybody else, has to live with, it's up to US.
Risk profiling software will be a forerunner for big data applications that simply watch people.
If you don't think this will work, you are wrong. It will get increasingly better, and the point will be to track "risky" individuals not only in the airplane but in the country itself. The NSA (US) is likely working on this right now.
So instead of arguing it won't work and calling for more pat-down thugs, I would agree with a few thoughtful people here who are pointing out that it will be *abused* in the future.
Now we all know it picks on Arabs who pay cash all the bad guys have to do is legally change their name from Mohammed to Hank, apply for a bank card, and order the standard in-flight meal.
So you assume the bad guys have a first name of Mohammed? :)
Slashdot: Where people pretend to be twice as smart as they really are by behaving like children.
I believe that this establishes a new front in the war on tourism.
and most people think the TSA are tough!
...over fucking with people randomly.
TFA says a company developed this software.
Nowhere does it say that the British Airports Authority, or anyone else, is actually proposing to use it.
So while I don't doubt there are plenty of suckers out there who may be interested and are probably signing up for demos even now, and some part of the UK govenment may well be among them, the headline is patently not supported by the article. The time to start ragging on the UK gov't is when it announces it's going to buy and/or use the stupid software - not when some random company that just happens to be located in the UK announces that it's selling it.
"many, many false positives." No. Like a spam filter, you select the false positive rate you're okay with, setting the thresholds accordingly. The corresponding true positive rate defines how good the system is. Randomly searching 5% of passengers has a 5% false positive rate. Can this system do better than random chance? Probably a little better.
So you assume the bad guys have a first name of Mohammed? :)
I assume that they assume that the bad guys have Mohammed somewhere in their name.
The basic problem with your premise is that fully rational, well-adjusted people are so rare their existence borders on mythology. People in general tend to be fairly easy to manipulate and to follow the group they are in (peer-rejection/accetance is a powerful force), or to seek belonging in a group if they aren't in any. In proper context, my conservative guess is that a good half of people will be vulnerable.
Beware of CCHR. It is a well-known anti-psychiatry arm of the Scientology "church". http://en.wikipedia.org/wiki/Citizens_Commission_on_Human_Rights
We shouldn't fear every time some new technology is employed to fight evil. Don't just have a knee jerk reaction to this. I know people who have worked on this project and I trust them and their work.
I know governments that have worked on much more serious projects and I don't trust them or their work.
Fight evil? Don't make me laugh. Keep contractors in jobs and bureaucrats in bribes more like.
Now we all know it picks on Arabs who pay cash all the bad guys have to do is legally change their name from Mohammed to Hank, apply for a bank card, and order the standard in-flight meal.
The software isn't the problem, it's the assholes using the software that is the problem. With the right information inputted into the program it could be made to profile a cute fuzzy bunny as a terrorist threat.
Risk profileRisk(Person p) { return p.skinColor == "Brown" ? Risk.High : Risk.Low; }