Slashdot Mirror


UK To Use "Risk-Profiling Software" To Screen All Airline Passengers and Cargo

dryriver writes "The BBC reports: 'The UK branch of an American company — SAS Software — has developed a hi-tech software program it believes can help detect and prevent potentially dangerous passengers and cargo entering the UK using the technique known as 'risk profiling.' So, what exactly is risk profiling and can it really reduce the risk of international terrorism? Risk profiling is a controversial topic. It means identifying a person or group of people who are more likely to act in a certain way than the rest of the population, based on an analysis of their background and past behavior — which of course requires the collection of certain data on people's background and behavior to begin with. When it comes to airline security, some believe this makes perfect sense. Others, though, say this smacks of prejudice and would inevitably lead to unacceptable racial or religious profiling — singling out someone because, say, they happen to be Muslim, or born in Yemen. The company making the Risk-Profiling Software in question, of course, strongly denies that the software would single people out using factors like race, religion or country of origin. It says that the program works by feeding in data about passengers or cargo, including the Advanced Passenger Information (API) that airlines heading to Britain are obliged to send to the UK Border Agency (UKBA) at 'wheels up' — the exact moment the aircraft lifts off from the airport of departure. Additional information could include a combination of factors, like whether the passenger paid for their ticket in cash, or if they have ever been on a watch list or have recently spent time in a country with a known security problem. The data is then analyzed to produce a schematic read-out for immigration officials that shows the risk profile for every single passenger on an incoming flight, seat by seat, high risk to low risk.'"

33 of 222 comments (clear)

  1. It Believes by davesag · · Score: 5, Insightful

    Whereas I believe it's unlikely to work, probably expensive, and manifestly open to being gamed.

    Sigh.

    --
    I used to have a better sig than this, but I got tired of it
    1. Re:It Believes by ledow · · Score: 5, Interesting

      All risk-profiling does is make you *think* you're more likely to catch certain people. In fact, what it does is provide a list of constraints that those people will actively avoid triggering and, thus, stand much less chance of being caught. Do you really think any terrorist is thinking of using a liquid bomb since the liquid-size limitation rules came in force? No, they'd do something else just to avoid detection.

      The *only* way, if you don't want to check everyone out manually each time, is to do entirely random security checks. Stick your guys on the frontline to catch anything "funny" but flag 1 in 10 people who go through completely at random and make it a condition of their employment that your security guys must check those people, young or old, rich or poor, first class or economy, in a wheelchair or with a false leg or completely healthy, no excuses.

      All this does is catch the stupid terrorists who would be caught anyway, while giving the sensible ones a perfect opportunity to knowingly and predictably reduce their risk by huge amounts.

      What risk category are you going to enter? Travelled to dodgy countries recently? A stayover for a time in a country will soon time that out so it's not relevant. Or just use a local rather than a foreigner. Age range? That's just getting into the "children / old people can't be terrorists" mentality, which is a stupid place to go. Race? Religion? Credit card history? All of the people you would catch from things like that should be caught ANYWAY by just decent security in the first place. All the rest, that you miss, will deliberately be missed by profiled screening.

      At least with random screening you stand a chance of catching someone that's avoiding your profiling, and a chance of spotting new trends ("Here, John, isn't that the third guy we've stopped who's had a little vial in his bag?"), and a chance of actually scaring off terrorists / smugglers / etc. from trying in the first place.

      But all this is moot while you only enforce a decade-old security policy based on a single (unsuccessful) incident, rather than thinking about what's actually likely to be dangerous and what's not.

      I can't take 100ml of water in a single bottle (but I can take more of "baby milk", so long as I drink from it first - and that check is as rigorous as security watching me put it to my lips and then looking away!), but I can take several bottles that won't be inspected.

      I can also take large poles in a rucksack, and various amount of improvised weapons, and hell I know someone who went through Heathrow three times while carrying CS spray (which is illegal to possess in the UK, let alone on the plane). It wouldn't be hard to fashion an instrument from perfectly ordinary hand luggage capable of levering open the cabin door and threatening the pilot (and UK cockpits are not armed and don't have armed officers onboard) if that was your intention.

      If you want security, automated profiling is like shouting "friend or foe?!". Nobody with any brains is ever going to shout foe (or be flagged by your profiling) if they have hostile intent.

      Want to improve security? Scrap the enormous queues at every major UK airport - by scrapping all the stupid hand luggage restrictions (obviously keep things like "explosives" on the list, though!) and other crap (grab a tray, take off your belt, your shoes, put your laptop separately in here, etc.), and with all the time you spare your security people can have a 10 second chat with each passenger as they go through the gates rather than just dumbly standing there "checking" your passport (which is basically a "computer says no" exercise) or having 4-5 of them wave you through the metal detector while they have a chat.

      Let them stop anyone they like and send them to a private queue for proper pat-down (out of the main queue, away from accomplices, not backing up the frontline guys), and also have automated gates that send 1-in-10 or 1-in-50, or whatever ratio, of people that way completely at r

    2. Re:It Believes by Joce640k · · Score: 5, Insightful

      The biggest joke of all is the underlying assumption that terrorists are helpless so long as they can't get past airport security.

      If I were a terrorist I'd just detonate my bag full of explosives/ball bearings in the line for the scanner.

      Or just do it in any other place where there's lots of people. Doesn't really matter where, eg.. The car park for the superbowl would be a good place for a truck bomb.

      Remind me again why we're spending so much on airport security...?

      --
      No sig today...
    3. Re:It Believes by Joce640k · · Score: 2

      Want to improve security? ...security people can have a 10 second chat with each passenger as they go through the gates.

      That doesn't work because any basic anti-depression medication will stop people from having nervous reactions when lying.

      Just rehearse the scenario a couple of times and pop a double-dose half an hour before you go through.

      --
      No sig today...
    4. Re:It Believes by Gaygirlie · · Score: 3, Informative

      That doesn't work because any basic anti-depression medication will stop people from having nervous reactions when lying.

      Just a minor nit-pick: that's not anti-depressants, that's anti-anxiety. Anti-depressants generally take 2-3 weeks to even start working and they do not affect nervousness. I just quit anti-depressants, so I'd say I know.

    5. Re:It Believes by Gordonjcp · · Score: 3, Insightful

      So, by making the cockpit door out of slightly thicker plywood and fitting a bolt to it - similar to the one you are familiar with from your bathroom door - we can eliminate that threat entirely, for about 20 quid a plane. Less, really, because the DIY store will give you a discount on a large order of bathroom door bolts.

    6. Re:It Believes by Joce640k · · Score: 3, Informative

      The unspoken intention of the airport security is that it's better to have a few hundred people killed at the security checkpoint than have someone get control of an airplane and fly it into a building. The security isn't to protect the passengers, that's just a PR campaign.

      The new cabin doors and increased passenger awareness already achieved that. Job done.

      --
      No sig today...
    7. Re:It Believes by JonathanCombe · · Score: 2

      The new cabin doors and increased passenger awareness already achieved that. Job done.

      Really? In the last year I've travelled on several planes flying from UK Airports with no door between the passenger compartment and the cockpit. Indeed you can sit right behind the pilot on some flights with no barrier or partition at all. Unless you have a door on every plane flying from every airport the rules are pointless. Similarly if I can get on a plane without going though luggage scanners then so can a terrorist so putting in scanners at some airports and not all airports makes it pointless. I suspect it is done in the hope it shuts up those that always claim "something must be done" after a terrorist attack. There are also airports in the UK with no seperation to airside so even after I've checked in, I can wander back outside (and potentially pick something up). The current situation is like having 50 bolts on your front door and leaving the back door wide open.

    8. Re:It Believes by jonnyj · · Score: 4, Interesting

      Credit risk profiling is part of my job and these models do indeed wok. Unfortunately, they need large sample sizes to be effective. Unless the UKBA has intercepted more than 1,000 terrorists about to jump on a plane, I'd be very sceptical indeed.

      Another big concern is that these models all assume that the future is the same as the past. Feeding the model data on Islamic terrorists isn't likely to help you detect extreme right nationalist groups, for example. As conflict moves around the world, there's a risk that the model will find last year's terrorist-turned-nobel-peace-prize-winner and completely ignore the perpetrator of next year's atrocity.

    9. Re:It Believes by jenningsthecat · · Score: 3, Insightful

      The biggest joke of all is the underlying assumption that terrorists are helpless so long as they can't get past airport security.

      To me, the "biggest joke" is that we believe we're powerless to address this problem at its source. I don't think I'm going all 'kumbaya' when I say that if nations set out with a will to stop meddling in each other's affairs for political and financial gain, a LOT of the terrorist threats would simply disappear. We wouldn't be totally safe - there'll always be crazies with an axe to grind - but we could go back to the days when travel security was a minor inconvenience and not a major hassle / personal violation.

      As for the 'terrorist threats' since 9/11, how many have there been, apart from those made up by the FBI and other agencies in order to fatten their funding and broaden their power base? Does anyone here have access to credible stats on the real increase in terrorist activity in the developed world over the past decade?

      --
      'The Economy' is a giant Ponzi scheme whose most pitiable suckers are the youngest among us and the yet-unborn.
    10. Re:It Believes by jenningsthecat · · Score: 4, Insightful

      If I were a terrorist I'd just detonate my bag full of explosives/ball bearings in the line for the scanner.

      The unspoken intention of the airport security is that it's better to have a few hundred people killed at the security checkpoint than have someone get control of an airplane and fly it into a building.

      If terrorists were as motivated, competent, and plentiful as all the security theatre seems to indicate, wouldn't they do precisely that, i.e. set bombs off at the check-in points of a half-dozen major airports? Not as much splash as flying a plane into a building, but it would still make air transport grind to a halt and cause huge economic and psychic damage.

      The terrorists won on 9/11. The proof of that is seen in the pervasiveness, (and growing acceptance), of surveillance, loss of personal privacy, curtailment of personal freedoms, and an underlying siege mentality. They really don't need to fly any more planes into any more buildings.

      --
      'The Economy' is a giant Ponzi scheme whose most pitiable suckers are the youngest among us and the yet-unborn.
    11. Re:It Believes by fustakrakich · · Score: 4, Funny

      Vacuum seal the cockpit, to extend the shelf life of the pilots

      --
      “He’s not deformed, he’s just drunk!”
    12. Re:It Believes by FooRat · · Score: 2

      Islamic terrorists want to die in the attack so they can become martyrs and collect their 72 virgins

      It is because of this that terrorists mostly prefer not to target airlines ... because airline security is so tight, they tend to end up just getting caught and rot in jail. But it's trivial to blow up e.g. a cafe in Tel Aviv for example and collect your virgins.

    13. Re:It Believes by rwise2112 · · Score: 2

      Less, really, because the DIY store will give you a discount on a large order of bathroom door bolts.

      You're forgetting, of course, that the bolts have to be aviation certified, which will, no doubt, make the cost 10x at least.

      --

      "For every expert, there is an equal and opposite expert"
    14. Re:It Believes by CohibaVancouver · · Score: 2

      This obsession with subjecting airline passengers to harassment, sexual molestation, and taking away their drinks does very little for security as a whole.

      It's not about security, though. It's about making Ma and Pa Kettle feel 'safe' so a) the government looks like it's doing their job and b) people keep flying so the airlines stay in business. Certainly the airlines lose some business due to security (trips that can be done by car), but most people still fly from Des Moines to Disney World, not drive.

    15. Re:It Believes by CohibaVancouver · · Score: 2

      Remind me again why we're spending so much on airport security...?

      Because

      a) American voters like it - It makes them feel "safe."
      b) American voters don't care about spending billions running up the deficit and adding to the national debt.

    16. Re:It Believes by Gordonjcp · · Score: 2

      Oh yeah, absolutely, and they'd need to be fitted with NACA-approved screws following a twelve-page document that details the precise make and model of screwdriver to use.

      You could probably get around this issue by somehow registering your fleet in the UK as leisure aircraft and operating them on a Permit to Fly instead of a Certificate of Airworthiness, and let the passengers fly for free when they pay £200 for a coffee ;-)

    17. Re:It Believes by davester666 · · Score: 2

      What makes it stupid is that it will use data sent at "wheels up", as in, AFTER you've gone through security and boarded the plane.

      This sounds like it's more for immigration control.

      --
      Sleep your way to a whiter smile...date a dentist!
  2. Why is this hi-tech? by badfish99 · · Score: 2

    Given the number of bad things that happen on airlines, the software could just assign a risk of "zero" to everything. This would be just as accurate as any other way of finding a non-existent needle in a haystack.

    1. Re:Why is this hi-tech? by mwvdlee · · Score: 2

      Bayesian filters essentially learn by failure, not really something you want in this situation.

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
  3. Still the same profiling bullshit by daem0n1x · · Score: 3, Interesting

    Now seriously, ! I'm tired of seeing the same bullshit again and again, just with different icing, to justify what's flawed from the very start. This shows that people taking decisions are tied to their own irrationally feelings and not paying attention to what science tells them.

    I once read a scientific paper which recommends, if I remember correctly, randomly selecting 8% of the passengers for extended verification. This procedure has the advantage of transmitting zero information to the bad guys. If you start profiling, you give them a chance to test the system.

  4. This makes it easier for terrorists by dam.capsule.org · · Score: 4, Insightful

    They now just have to find somebody which would score as low risk and they won't have any trouble.

    --
    What sig ?
  5. I could have worked for one of these outfits by pointyhat · · Score: 4, Interesting

    A couple of years ago I went for an interview for one of these companies rather naively. Their product wasn't described as profiling, surveillance or monitoring but "adaptive security". After I finally cut through all the bullshit and worked out what they were actually selling, I bailed on it (with a proverbial "fuck you stasi bastards" and loss of the job agent). However I couldn't help noticing one thing:

    The management staff were utterly convinced that this was the best way to go and that the entire world's problems were going to be solved by profiling in this way. I'm not talking about it being the marketing pitch, but actually some kind of crazy psychopathic paranoia about their own mortality in the hands of terrorists. I cannot fathom how these guys actually operate with this mindset at all. It was rather shocking actually and has permanently destroyed my acceptance of capitalism. It was literally like OCP or Weyland corporation were real for a few minutes.

    Someone needs to legislate this out of existence because we're fucked if society ends up at the hands of nutjobs like them.

    1. Re:I could have worked for one of these outfits by pointyhat · · Score: 2

      Yes. I can see the religious programming now:

      "Looks like Bin Laden" - HRESULT_FULL_CAVITY_SEARCH

      "Has hook instead of hand" - HRESULT_FULL_CAVITY_SEARCH

      "Darker than a bag of flour" - HRESULT_FULL_CAVITY_SEARCH

      "Has Koran instead of Bible" - HRESULT_FULL_CAVITY_SEARCH

      "Has Casio F91-W watch" - HRESULT_STRAIGHT_TO_GITMO

  6. Another fat contract by opus_magnum · · Score: 2

    and zero accountability?
    Sounds like a plan!

  7. Hocus-pocus Business by aaaaaaargh! · · Score: 5, Insightful

    As someone who knows a little bit about multi-criteria decision making, risk analysis, probability theory and their friends (plausibility, possibility, fuzzy logics, etc.), I submit that these kinds of software programs are all just hocus-pocus and based on bullshitting customers.

    How can I claim that without having seen the software? Simpe answer: The number of terrorist incidents is too low to establish significent correlations. The software is probably better at recognizing Pakistani cooks than at recognizing your next Breivik.

  8. Great idea! by anti-pop-frustration · · Score: 5, Interesting

    Additional information could include a combination of factors, like whether the passenger paid for their ticket in cash, or if they have ever been on a watch list

    Great idea, that way anybody that has ever been put on a watch list can be harassed for ever! Not because a court of law determined they did anything wrong, no, but because they're on a list (or have been on one). You see, they probably did something wrong or else they wouldn't have been on that list in the first place...

    Never mind the fact that this is all done in secret, with no judicial oversight, no accountability and no way to appeal those decisions and that people basically end up on those lists for exercising their political rights.

    Try working as a journalist/filmmaker and reporting on the global war on terror, try actively opposing the US drone war or try supporting wikileaks (or any organization that the US has secretly decided they do not like) and see how quickly you end up on those watch lists.

    Of course, you'll never know you're on one of those lists until the next time you try flying to the US, then you'll be detained and questioned (not to mention laptop seizure etc.). It happened many times to Jacob Appelbaum, a Tor developer, it happened to Imran Khan, one of the most popular politician in Pakistan and it happened repeatedly to Laura Poitras, an Oscar-and Emmy-nominated filmmaker. These people are spied on and harassed because of their political opinions, thanks to the global surveillance state we now live in.

    How submissive have we become that as people living in democracies we even accept the existence of "watchlists"?

  9. Pointless Suggestions for modding down... by Anonymous Coward · · Score: 3, Informative

    1 - Why don't you go back to the time when you spent a minimal amount of money on scanning passengers looking for a needle in a haystack, and instead concentrated on intelligence and infiltration of terrorist groups so that you can concentrate your resources?

    2 - Why don't you realise that 'terrorists' (and there seem to be very few of them nowadays) aren't doing it because 'they hate our freedom' but because they're pissed off with some foreign activity we've undertaken? Rethinking some of the mad and pointless wars we've been starting would cut back on the terrorist threat AND improve the government's popularity with the 75% of the voters who aren't part of the military/arms production complex...

  10. Re:CAPPS, CAPPS-2, No-fly lists, etc. by locofungus · · Score: 2

    I think you're misunderstanding the problem.

    A loan company might have two rates, one for higher risk people and one for lower rate people.

    If 90% of black people are high risk for repaying a loan but 10% of white people are high risk for repaying a loan then it's simple for the loan company to charge black people the higher rate and white people the lower rate and their error rate will be relatively small.

    But this is racial discrimination - the 10% of low risk black people are being discriminated against based on their colour and the 10% of high risk white people are being positively discriminated for as well.

    Instead, the company needs to find tests that discriminate based on the risk of the person. If as a result, 10% of black people get the good rate and 10% of the white people don't then that isn't discrimination. All the tests will merely be proxies for what might happen but colour isn't allowed to be used as a proxy.

    We've had a similar issue in the UK recently with insurance premiums. Motor insurance has been very heavily weighted for young drivers based on their sex - women get much lower rates.

    Now, if young women tend to drive different cars to young men then the weighting the insurance company is likely to use based on type of car might, effectively, be a proxy for sex *but* a young man with an identical driving record to a young woman should be able to get the same premium for the same car.

    In the UK you aren't *allowed* to *discriminate* based on colour or sex. For some things it's possible for people to "cheat" - if I only have one job then it's possible for me to discriminate but claim it's based on objective factors but when thousands of identical items are being sold, whether that is mortgages or insurance, it's pretty obvious if the discrimination is being done based on race or sex.

    Tim.

    --
    God said, "div D = rho, div B = 0, curl E = -@B/@t, curl H = J + @D/@t," and there was light.
  11. Is It Open Sourced? by shawnhcorey · · Score: 2

    If not, it's an arbitrary decision. And it leaves their government opened to be sued.

    --
    Don't stop where the ink does.
  12. Re:Kudo to them and the UK by 1s44c · · Score: 3, Insightful

    We shouldn't fear every time some new technology is employed to fight evil. Don't just have a knee jerk reaction to this. I know people who have worked on this project and I trust them and their work.

    I know governments that have worked on much more serious projects and I don't trust them or their work.

    Fight evil? Don't make me laugh. Keep contractors in jobs and bureaucrats in bribes more like.

    Now we all know it picks on Arabs who pay cash all the bad guys have to do is legally change their name from Mohammed to Hank, apply for a bank card, and order the standard in-flight meal.

  13. Re:Kudo to them and the UK by GreyWolf3000 · · Score: 2

    Now we all know it picks on Arabs who pay cash all the bad guys have to do is legally change their name from Mohammed to Hank, apply for a bank card, and order the standard in-flight meal.

    So you assume the bad guys have a first name of Mohammed? :)

    --
    Slashdot: Where people pretend to be twice as smart as they really are by behaving like children.
  14. Re:Alternative: make it a game by Hognoxious · · Score: 2

    You could have a different game at each gate. You could have the passengers vote, like Weakest Link.

    At another a Sid James lookalike or a man with a cat on his head set people tasks - and let's face it there's time, with the queues and all. The three worst performers insult each other and one gets sent to Gitmo.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."