|
|
|
|
|
|
|
||
|
|
Note: This page contains a SPECIAL EXPANDED VERSION of this article. It includes content that was not able to be fit into the space available in the printed magazine. The new material is marked with yellow highlighting, as this paragraph has been marked. "These events have redefined Civilian Aviation Security forever," said Mark Denari, Manager of Aviation Security and Special Systems at San Francisco International Airport (SFO), regarding the recent terrorist attacks on the World Trade Center and other U.S. targets. But should a civilian aviation system be expected to withstand acts of war? Not many days ago this would have been a purely academic question. These are questions that we ask not only as protection professionals and engineers but also as a society, a society whose very purpose is individual liberty, and a society that holds no value higher than the value of human life. These are no longer academic questions. Helping to protect human life, and to protect important physical assets, is what the security industry has been about since before its official inception. The growth of the security industry is a reflection in part of the growth of the threats to our lives and liberty. The recent tragic events did not stem from a failure of technology. As security professionals already know, it takes a combination of people, programs and technology to adequately implement security, based upon a realistic idea of the security needs. A failure or shortfall in any one of these elements can mean a failure of the entire system. In testimony before Congress on September 21, 2001, Kenneth M. Mead, Inspector General for the U.S. Department of Transportation, described the "vulnerability of the of the current security system." See the sidebar Inspector General's Address. Airport Security SummitIn response to growing awareness that aviation security needed strengthening, the first annual 3-day Airport Security Summit conference was held in San Francisco this summer, produced by World Research Group of New York City, and chaired by Mark Denari. The title of the conference was, "Strengthening Your Security Efforts Through Best Practices and The Latest Technologies." Hijackings and terrorism were two of the key agenda topics at this conference, which began on July 30th, less than 45 days before the recent terrorist attacks took place. In one sense the Airport Security Summit conference was born out of the tremendous success of U.S. civilian aviation, and the collection of challenges (of which security is only one) that this success presents to airports and air carriers. Figure 1 shows the annual increases in passenger travel since 1940, including the FAA's estimate for 2011.
Figure 2 below is a diagram of the categories of criminal threats that confront aviation security. It includes the various groups and agencies that have responsibility for managing security related to each category of crime. The categories are:
Security Solutions Can Themselves Become ProblemsIt's ironic that one of the security measures in place for one category of crime, terrorism, has actually created the opportunity for another category of crime, theft at checkpoints. In some airports this is roughly 30% of the crime encountered at the airport. Officer Bruce "Bruno" Choueiri of the Las Vegas Metropolitan Police Department explained that career criminals would even case out their victims at the casinos, and follow them to the checkpoints where they know they will be separated from their belongings. Thanks go to the Los Angeles Airport Police and the Last Vegas Metropolitan Police for providing information and discussion about the nature of airport law enforcement activity. Figure 2 (Click on picture to pop up larger image) Complex Security PictureAirports have a much more complicated security picture than shopping malls or office buildings. Due to the wide spectrum of possible crime there are many companies and agencies that are involved in airport security. According to Captain Ronald Boyd at Los Angeles International Airport, "Organized criminal activity requires a very high level of cooperation between local law enforcement and federal agencies. This is a very key factor, and it's not always easy." As shown in Figure 2, five federal offices can be involved depending upon the type of crime. Airports, airlines and security screening companies also have primary security roles. Looking at this picture it's easy to see why the U.S. Department of Transportation has proposed creating a single Federal entity that would be responsible for all security at airports, and would take over security responsibilities from the airlines. The stated benefit would be to allow airlines to concentrate on their main purpose, passenger service. However, airlines would still have operational security requirements, and would be required to establish security training for their personnel. So in practice the airlines can't be completely removed from the security picture. Security ChallengesRegardless of who performs the security management, the security challenges remain the same. Fifteen years ago composer, writer and entertainer Steve Allen recorded these serious words from a speech he gave in 1971 concerning social change, "It is perhaps the primary task of this century to determine if the inherent contradiction between freedom on the one hand and security on the other can be reasonably balanced." (Although most well known for his comedy and entertainment, Allen's deep humanitarian convictions and his active roles in elevating social issues resulted in his being elected unanimously to the International Academy of Humanism as a Humanist Laureate.) Since the FAA began publishing aviation security regulations airports and airlines have been struggling to achieve a workable balance between fast, efficient and unrestrictive service, and reasonable levels of security. Some of the chief concerns voiced at the Airport Security Summit were:
Negative impacts on security budgets were expected to come from the anticipated FAA 2001 budget cutbacks and the fact that most airlines were losing money for the first time in a decade. But given the recent events, it would be reasonable to expect that security budget barriers will be quickly overcome one way or another. Even without budgetary restrictions, the challenge yet remains to accomplish the balance between important new levels of security and the levels of streamlined, efficient and unrestrictive service that today's sophisticated travelers have learned to expect. As a result the aviation industry has the following general challenges for security technology:
Security InitiativesJohn Becker, Assistant Commissioner of Security & Information Systems at O'Hare International Airport, has been extremely proactive in implementing security at O'Hare. "O'Hare is the largest airport in the world," explained Becker. "In 1991 we handled more passengers than all but four of the airports will handle at their facilities in a year. That's why we were the first to implement an integrated security system that combined access control and security monitoring, ID badging, and 911 emergency response systems all into one office. While you can find off-the-shelf software that can integrate those functions today, nothing like that existed back in 1991. So our system was a $54 million system using custom software developed for us by TRW. Today we could accomplish the same thing over again for significantly less. But we wouldn't go without those systems regardless of the cost, because we needed them." Becker intends to keep O'Hare's security strong by continually advancing it. Becker is not alone in this approach. Los Angeles International Airport has recently launched a program to implement advanced use of CCTV technology that would allow the Airport Police to view activity in their cars and on handheld devices, according to Captain Boyd. Al Krisch, Airport Security Administrator for McCarran International Airport in Las Vegas, explained that McCarran is expanding the use of their CCTV equipment to include broadcasting of captured video to selected checkpoints, terminal gates and Flight Information Display System boards. The FIDS board video display will include text asking, "Have you seen this person? If so call this number …" Most airports have CCTV initiatives of one kind or another on the drawing boards or already being executed that go beyond what is required by the FAA. Some air carriers have also been implementing security improvements, although many carriers have a policy of not discussing their security programs. Some initiatives are too obvious to escape comment, like those involving passenger-screening points, which are obvious and in plain site. "Continental Airlines has renovated a large part of its terminal space at Newark International Airport, increasing the number of passenger screening lanes, and adding a brand-new CCTV system to provide full coverage of the screening areas," explained Reggie Baumgardner, Senior Regional Security Manager for Continental Airlines. "All cameras signals go to a Loronix Information Systems, Inc. digital recording system in Continental's newly built Security Command Center at the airport. This project, which establishes a higher level of security for our screening points, is the new standard for upgrades of other Continental terminals." By increasing the capacity of the screening points Continental also improves the speed of service, something that is important to airlines, airports and passengers. It also demonstrates an important point about the conflict between the demand for fast and unrestrictive service, and the restrictions required for security: maintaining very high levels of service in spite of the security measures increases the cost of security. Proactive vs. ReactiveThe recent Airport Security Summit was a forum not only to share information about the existing security improvement programs, but to brainstorm about how airports can be proactive in forwarding airport security. Historically, advances in airport security have been reactive. The significant security initiatives have been prompted by major security incidents, usually resulting in Congressional action that ultimately directs the FAA to respond to the new assessment of aviation security requirements. Attendees at the Airport Security Summit met in the hope of breaking out of that cycle. Part of the problem that airport security managers face is the fact that national security issues and the threat of terrorism make it difficult to assess how far to take security initiatives. Previously it has been up to the FAA to take that lead. Furthermore, the cost of anti-terrorism technology is extremely high compared to other security technology. For example, the CTX-5000 explosives detection machines have previously cost about $1 million each. Thus the FAA has also provided financial grant assistance for such equipment. However, many security challenges have been identified that don't require input from the FAA in order for airports to take action. The challenges fall into these categories:
These are areas where technology has great value. Access Control/Personnel IdentificationTo eliminate the problem of stolen or counterfeit badges being used for unauthorized access, some airports such as San Francisco International have already begun deployment of biometric systems, such as the Recognition Systems hand reader. A primary weakness of door and gate access control is its typical dependency upon the human factor to prevent tailgating. Security revolving doors exist that incorporate anti-tailgating/anti-piggybacking features. Sally ports have been used successfully at airports to provide reliable automated vehicle access control. Baltimore Washington International Airport has had success using the Fastlane Door Detective, which utilizes an infrared field across a doorway to monitor the passage of every individual passing through the door and generate an alarm if more than one person attempts passage. Smart card technology is getting national attention and is currently being suggested for use in a national ID card program, in which the multiple-use ID card would be used for passenger identification. Smart cards can incorporate biometric information, which makes them high-security as well as high-tech. Another point of challenge is reconciling fire code requirements with security requirements, for example, with regard to controlled doors that must also serve as fire exits. Delayed egress technology is currently used to address this issue. It's also an issue with regard to checkpoint design, which must be compatible with emergency evacuation procedures. Checkpoint ScreeningA primary tool to combat checkpoint theft is CCTV. When used with a digital recording system to speed video review and searches, it has the added customer service benefit of being able to quickly resolve false incidents of missing items such as where one family member has picked up another family member's item. When a sufficient number of cameras are used that all activity in the screening area can be recorded, thefts are recorded and the video record can be used as evidence. When video displays are installed so that passengers and potential thieves are made aware of the cameras, the cameras can be a significant deterrent. Checkpoint cameras are also a primary point to use facial recognition against a database of known terrorists, a technology in which airports now have a renewed strong interest. Baggage Inspection/Baggage MatchingSan Francisco International Airport is the first airport to implement an integrated Checked Baggage Inspection System (CBIS), which is part of the new 2.5 million square foot international terminal complex, the largest international terminal in North America. It has 24 wide-body gates, and 128 common-use ticket counters. Its baggage handling system includes 7 miles of conveyor belts. The system is able to perform 100% x-ray of all outbound international bags. If x-ray technology determines that the bag is suspect, it is further selected explosives detection screening (EDS) examination. This level of baggage scrutiny is far in excess of what is required by the FAA. The system uses Single Chip Systems/Ultra Electronics 2.45 GHz tag-reading system for bag routing. Encoders at the ticket counters write data onto the tags, which are then attached to the bags. Screening of bags that are selected for EDS examination are automatically routed to the detection equipment, which is completely out of sight of passengers. This eliminates ticket counter personnel having to confront passengers regarding selected baggage inspections. It has also reduced the contract security staffing requirement by 50%, providing a significant return on investment. The SFO International Terminal features the highest level of security for international travelers found anywhere in the world. Furthermore, it processes 5,000 people each hour through U.S. Customs and Immigration, making SFO's federal inspection process among the most efficient in the U.S. Technology for automated matching of bags with passengers has not yet evolved to the same level of sophistication and ease of use as automated baggage checking, but it remains an area of strong interest to airports. Common Use Terminal EquipmentThe SFO International Terminal is also the most technologically advanced terminal in the country, featuring one of the largest "common use" environments of any airport in the U.S. The common-user system allows different airlines to share ticket counters and gates, providing unparalleled customer service and efficiency. A wireless Ethernet system allows international travelers to remain connected while traveling. What makes the SFO International Terminal baggage-screening initiative remarkable is the fact that under FAA regulations it is the airline companies, not the airports, which have responsibility for baggage screening. So why did the airport undertake this initiative? First of all, by providing common use baggage screening equipment costs can be shared by the airlines, making a higher level of technology and security available to all airlines at a lower cost than if each airline were to independently try to establish a similar system. Second, it allows the airport itself to establish the security standard. An Airport Business Philosophy That Supports High Security
One reason that San Francisco International Airport has been able to step well beyond the FAA requirements is that it has a business philosophy designed to support the establishment of high standards for service and security. The City and County of San Francisco's appointed Airport Commission operates the airport as a separate enterprise department of the city. The airport is an independent economic entity and receives no direct taxpayer revenue. The following underlying commercial philosophy continues to govern the SFO:
By including clearly-defined security objectives in its business planning, and by integrating security into operations in ways that facilitate high levels of service, SFO enables itself to excel in both service and security. San Francisco International Airport Launches 100% EDS InitiativeDuring the week of October 15, 2001, SFO launched a $50 million initiative to make it possible to use explosives detection screening (EDS) for ALL bags, international and domestic. They would be the first airport to do 100% EDS screening of all bags. Rather than wait for an FAA directive in this regard, the airport is establishing a task force to work out how this can best be accomplished as quickly as possible. SFO has a distinct advantage over many other airports for two reasons. First, they already perform 100% x-ray screening and selective EDS screening of all outbound bags in the new International Terminal. They know the issues involved in implementing the kind of baggage handling system required. Second, the SFO business model minimizes red tape and encourages airport initiative for the airport's sake and for the sake of its airline tenants and passengers. They are able to define objectives and mobilize personnel without the hindrances that are typical of most governmental bureaucracies. Perimeter SecurityBaltimore Washington International Airport utilizes a perimeter intrusion detection system that includes underground coaxial cable and microware technology to provide a one-way alarm barrier for vehicle traffic. It allows vehicles to exit, but not enter the secured area. This type of technology is very helpful for managing cargo areas. Responding to Security IncidentsTime is of the essence in real-time security response, but it must be informed response for security personnel to be maximally effective. The ability to transmit a video image of a suspect to security personnel can make or break the ability to recognize and apprehend the suspect. The ability to publicly display a suspect's image can speed the location of the suspect and can also act as a deterrent. After the fact, documentation of the incident is of high importance. If the suspect is apprehended, the video record of the crime is essential for prosecution, and in almost all cases results in a plea bargain, reducing court appearances and their attendant expense. Deploying Security TechnologyThe importance of thorough assessment, evaluation and planning cannot be overstated. SFO's Mark Denari is a strong proponent of rigorous assessment and evaluation as part of security development. "In the past security has often been a fix or an add-on superimposed upon existing operations", said Denari. "This can result in strain on the people involved and can also detract from the normal levels of service. When deploying technology, the people and programs parts of the picture must be considered in order to achieve maximum success and maximum return on investment." Evaluations Must Be Thorough To Avoid Creating New ProblemsSecurity assessment and evaluation can often omit a critical step: a re-evaluation to take into account the new risks and problems that may be introduced by the proposed security measures. This is a process that may have to be performed in several iterations. One example is the institution of passenger screening points. The separation of passengers from their belongings creates an opportunity for crime that didn't exist previously. That calls for additional security measures due to the created risk, both preventive (such as attentive security personnel and/or police, and public displays of video camera signals) and remedial measures (recorded video that can be used as evidence). Due to recent events, biometric systems are getting high attention and rightly so. However, it would be a mistake to think that the solution is as simple as putting biometric access control at critical doors, without thinking through the consequences. For one thing, biometrics alone won't prevent a piggybacked entrance. Right now it may be possible to steal an ID card, say from off a worker's winter jacket during lunchtime, and have a half-hour or so of time in which to use the card to access the airfield before the theft may be noticed. The use of biometric access control would prevent that scenario, but could it possibly introduce a worse one? That's what happened with auto theft, which was reduced by the use of many types of anti-theft devices. Serious car thieves were left with only one option - steal a car out from under the driver. Thus there has been an increase in car-jacking in the U.S. and in some other countries as well. It is not very likely that a drug smuggler would risk exposing his activities by forcing an authorized person to open a biometrically secured door at gunpoint. The chances of successful escape would be minimal. However, a terrorist could easily resort to such a tactic. We must ask, what other additional security precautions must also be put into place? Some airports use a combination of access control, intercom, duress devices, motion-activated CCTV recording and alarm-based zone lockdown to provide a more complete door security solution. Such advanced technology solutions require thoughtful integration into security programs, including appropriate training and security drills for personnel. Another technology that opens the door to additional risks is smart card technology. Quite apart from the civil liberty issues involved in a national ID card program are the risks of information misuse. Smart cards can store large amounts of identification and other information, and so should not be implemented without giving sufficient consideration to safeguards appropriate for the intended use of the technology. Don't Neglect Low-Tech SolutionsIn the rush to apply technology, sometimes low-tech solutions are overlooked. Supermarkets prevent confusion about whose goods are on the checkout conveyor belts by using flexible rubber markers to separate one shopper's goods from another's. Would a similar approach at passenger screening points, perhaps using color-coded separators, make it easier for passengers to locate their belongings and facilitate supervision of the process by security personnel? Are there other simple ways to improve that aspect of the passenger screening process? Low-tech solutions can often be implemented very quickly. Another advantage of low-tech solutions is that they are often low-cost, and can help counterbalance the use of other more expensive technology. Advanced Systems Can Provide Operational BenefitsOne category of advanced technology is that which performs "smart real-time processing" of data, such as video technology that can detect when a walking person has fallen down or has changed direction. This type of capability is increasing the value of CCTV systems by allowing them to perform more than the typical visual monitoring and recording function. Motion-triggered video alarms can be used for economy in video recording, so that doors or escalators areas are only recorded when there is actual activity in the area. This can speed video review time as well as reduce video storage requirements. Soon video systems with software-based monitoring stations will be able to perform advanced functions on a workstation-by workstation basis. For example, a manager who wants to track snow removal progress will be able to mark an area of a camera image and be notified when the area turns from white to gray. If that change doesn't happen within the user-specified time frame, an alarm would be generated. The same feature could be used to monitor critical no-parking zones, or even plane arrivals and departures at the gates. Thus when assessing potential return on investment from advanced security technology, its operational benefits should also be taken into account. This is not a new concept; for example, many access control systems have been used for time and attendance tracking. However, given the general advances across the boards in security technology, exploring technology operational benefits technology should be a standard part of any security evaluation. Database Utilization: Improving Security and ServiceOne aspect of security technology that will be getting more attention at airports is the use of external databases or shared databases to improve security. It can be seen from Figure 2 that database links to Federal systems (ATF, DEA, FBI, INS and Customs) and local law enforcement systems (City, County and State) would cover the full spectrum of known criminals that the airports have to contend with. Different databases would be appropriate depending upon the type of usage. Human resources may need to access records of all known felons to support its hiring practices. Airport screening checkpoints would perhaps use only the set of known (or known and suspected) terrorists. The use of personal information databases raises the "freedom vs. security" issue, an issue that Americans don't take lightly. In peacetime we generally prefer more freedom and less security. Now that our peacetime living has been attacked by terrorism, we may tend to favor increased security. If that happens, how long will that preference last? The utilization of personal information databases means that special attention must be given to their use. That applies not only to external databases, but also to data that is accumulated within the airports. For example, expect to see limits on how long recorded video information can be kept. Except for video records of criminal activity, video storage limits will probably range between 48 hours to 30 days, depending upon the type of activity being recorded. The exact nature of video monitoring, along with the disclosure of storage practices, may well become a standard public disclosure item for airports and airlines. One possible outcome of the "freedom vs. security" issue may be the institution of two levels of service. It may be that faster security screening will be provided to persons who participate in traveler ID programs, whether or not they utilize a national ID card. This would put the decision to participate in such a system in the lap of the customer, making it a "freedom vs. service" issue for the customer rather than a "freedom vs. security" issue for airports. However a computerized ID system is only one part of the three-part "people, programs and technology" triangle. As already mentioned, for technology implementation to achieve a successful result all three parts must be addressed. For critical systems, a way of routinely testing the system and verifying its operation must be included in its implementation, and the review of such test results must become part of the responsible agency's audit procedures. The two terrorists who flew American Airlines Flight 77 into the Pentagon escaped existing detection systems (CAPS, IBIS and NAILS, see below), due to holes in the "people, programs and technology" aspect of their implementations. For example, CAPS is only utilized for passengers who have checked luggage, and the terrorists didn't check any luggage.
|
Third International Aviation Security Technology Symposium |
While long-term solutions are being evaluated, and short-term solutions are immediately being put into place, here are ways that we can help:
As security professionals, now more than ever before our knowledge and skill will be called upon. Our diligence in applying ourselves to our tasks, in doing a thorough and complete job, and in taking into account the full context in which security technology is to be deployed will result in sound airport security applications that help safeguard lives and protect valuable assets.
Copyright © 2001 Cygnus Business Media. All rights reserved.
![]()
![]()