Tuesday, March 11, 2008

Apple MacBook Airs are Cleared for Takeoff

Photo of a MacBook Air laptop
Photo Courtesy Apple.com
So I was looking through my Google Alerts yesterday morning and something caught my eye. From a cursory glance of the day's blog entries, it looked as if the TSA was denying travel to Apple owners. I've never taken part in the war between Mac & PC users... I've used both and I enjoy using both, but I thought surely the TSA wasn't diving into the digital trenches and waging war against Apple. I know we're a versatile agency, but I would have to admit this would definitely be mission creep.

After digging into the articles, it turns out that a gentleman was traveling with his new MacBook Air. To make a long story short, it turns out the Transportation Security Officers (TSOs) gave some special attention to his new MacBook. Mac fans would tell you the TSOs simply couldn't resist getting a closer look at a fine piece of machinery. PC fans would tell you the TSOs are all PC fans and flagged the computer just to hassle the Mac guy. As a security fan, I can tell you that TSOs are trained to look for anomalies. Each TSO X-ray operator sees hundreds of laptops a day and some have been doing this for 6 years. They know what laptops are supposed to look like.

Here is my theory. Along comes the new MacBook Air. The thing is as thin as a potato chip, and looks completely different than any other laptop the TSOs have ever seen. They are seldom seen at TSA checkpoints due to their newness and the fact that they can be hard to find sometimes.

To help prove my theory, I've contacted Apple to see if I can process a MacBook Air through an X-ray and see how it looks. If it does indeed look odd, I'm going to take a picture and send it to TSA Training to help avoid future issues with MacBooks. The jury is out for now, but I'll post an update as soon as I can get my hands on the MacBook Air.

Click here to see my MacBook Air screening results (and, I've put together a movie).

One thing is for sure though. This was just a case of diligent TSOs paying special attention to something that caught their eye. Exactly what they are trained to do.

Bob
TSA Evolution Blog Team
*********** Update 3/12/08 ************
Still checking with Apple, but I wanted to highlight a post we received from Mr. Nygard. He’s the gentleman who posted about the experience he had while traveling with his MacBook Air. I’d like to thank Mr. Nygard for taking the time to comment on our blog. Here’s what he had to say:

It was my experience and blog post that got all this attention recently.

One of my purposes in writing this piece was to point out something I thought was interesting: namely that the x-ray screeners are trained to look for certain things--"landmarks", if you will--in the images they review.

Before last week, I had never given a moment's thought to the training or procedures behind the ubiquitous screening. Like many people, I supposed that they were just looking for obvious problems: suspicious outlines, coils of wires, etc.

I found it interesting that there might be a similar checklist of things that should be present: battery, hard drive, optical drive, and so on. I don't think most people would realize that.

Some people have interpreted me as variously "blasting", "vilifying", or "insulting" the TSA agents in question. This was not my intention. It appears to come mainly from people reacting to second-hand information, instead of reading the original post. ~ Michael Nygard


Bob

TSA Evolution Blog Team

Tuesday, March 4, 2008

How Intelligence Drives Operations at TSA

Bloggers Note: Keith Kauffman heads up TSA’s Office of Intelligence. He is a 20-plus year veteran of the National Security Agency (NSA) and is a well-established and respected member of the Intelligence Community. He joined TSA in May 2007. Click here for his full bio.


The Office of Intelligence (OI), which I lead, is part of the larger Department of Homeland Security Intelligence Enterprise and is responsible for integrating timely and actionable information into TSA's daily operations. We also use intelligence to educate and inform the TSA workforce, our partners in airports, airlines, mass transit, etc., and law enforcement on terrorist threats and the tactics, techniques and procedures used by our adversaries.

My office staffs a 24/7 watch operation, which receives intelligence information around the clock from a variety of sources. We have analytic personnel integrated into Intelligence Community organizations, which also gives us insight into evolving threats to U.S. transportation systems. In addition, first thing every morning, Kip Hawley, Mo McGowan (who leads our Office of Security Operations) and I, attend a daily meeting led by the National Counterrorism Center and all the major players in counterterrorism activities, which enables us to discuss and track emerging and ongoing threats.

My office briefs the TSA senior leadership team every morning on the intelligence we obtain and analyze. It's after these briefings that we discuss and use the information presented to make operational decisions. Intelligence we provide routinely results in decisions, such as determining which flights will be covered by our Federal Air Marshals (FAMs). Intelligence also leads to the development of new operational policies at the checkpoints. One recent example has to do with remote control (RC) toys. Our adversaries have been observed using RC toy components to help build, or to detonate Improvised Explosive Devices. The policy developed to help counter this threat in the aviation domain did not mandate prohibiting passengers from carrying RC toys on commercial airplanes. Rather, it educated our Transportation Security Officers about the potential threat from these devices and directed them to use their judgment in selecting passengers with RC cars for additional screening. We also made this information public at the same time—a first for us.

We also routinely use intelligence to inform our government and industry partners about threats we receive to their respective transportation modes, so they can take appropriate actions. We focus on threats to the U.S., but track and report on threats abroad as well.

For example, if we receive intelligence about threat to a foreign airport used by U.S. carriers, we make sure all the carriers providing service to that airport are aware and might also use that information to increase FAM coverage at those locations. We also work with foreign governments to increase security as needed. We also use intelligence to assist with operational exercises and joint exercises. Along with the Federal Aviation Administration in December, we used intelligence to design 13 realistic terrorism scenarios. Those scenarios, which were played out during the exercise, helped us and our FAA partners review and refine contingency plans and determine how best to work together, in the event that any of those or similar scenarios occur in the future.

I spent 24 years as a member of the Intelligence Community before coming to the TSA. Often, intelligence agency personnel don’t see the results of their efforts. It’s been incredibly rewarding personally, to see how the work done by the dedicated men and women of our agencies involved with the counterterrorism mission, is put to great use at TSA each day.

I also travel with my family and talk to my friends, some of whom have been know to grumble from time to time (and you know who you are!) about taking off their shoes, etc. I wanted to join this blog effort, so I could relay the same message to you that I’ve discussed with my family and friends. There really is a robust and dedicated intelligence effort in place at the TSA, that is well connected to the larger Intelligence Community and which drives everything we do on a daily basis, to protect our Nation’s transportation systems and those who use them for travel and commerce.

Keith Kauffman

Why We Do What We Do: When Security Officers Find Illegal Items at the Checkpoint

A number of readers have raised questions about TSA's legal authority to make a referral to other law enforcement entities when evidence of a crime unrelated to aviation security is discovered during the screening process. This post explains that Transportation Security Officers (TSOs) are required to make such referrals. TSO referrals have led to the arrest and/or conviction of individuals for serious crimes such as illegally possessing narcotic drugs, transporting child pornography, and bulk cash smuggling.

As you know, the job of our security officers is to screen passengers and their belongings for weapons, explosives, and other prohibited items that pose a risk to transportation security. In the course of performing that responsibility, security officers sometimes come across illegal items that are not directly related to transportation security. For instance, last month in Guam, TSOs screening checked baggage discovered almost $900,000 in U.S. currency along with an undisclosed amount of crystal methamphetamine. Although anyone in the United States is free to travel with currency, the failure to make a currency report to Customs and Border Protection when leaving the country with more than $10,000 in cash is a violation of federal criminal law. 31 U.S.C. §§ 5316 and 5322. Attempting to smuggle bulk cash out of the country also violates 31 U.S.C. § 5332, a felony that carries a possible prison term of up to 5 years.

As a component of the Department of Homeland Security, TSA's standard operating procedures require Transportation Security Officers to report evidence of potential crimes to the appropriate local, state or federal law enforcement authorities. When a TSO opens a bag and discovers a large stash of ecstasy or obvious child pornography, he or she is not permitted to close the bag and turn a blind eye to these serious offenses. Instead, a TSO is required to call for law enforcement support. It is up to the responding law enforcement authorities—not our TSOs—to decide whether an arrest is warranted.

TSA's practice of referring evidence of criminality to other law enforcement entities is not only good public policy, it is fully supported by the court decisions. The courts have recognized that illegal items found during a warrantless “special needs” or administrative search, such as the search of an airline passeger's luggage for weapons or explosives, may be turned over to the police. See, for example, United States v. $557,993.89, More or Less, in U.S. Funds (pdf), 287 F.3d 66, 81-83 (2d Cir. 2002) (plain-view seizure of large number of money orders valid because airport security screeners permitted to search briefcase for weapons were not required to ignore evidence of crimes).

This case and others apply the principle of the plain-view doctrine, which allows a police officer to seize an unlawful item that he discovers in plain view, even if he comes across the item while carrying out unrelated duties. For instance, police who enter a residence in response to a call for medical assistance may seize contraband they see in plain view. See, for example, United States v. Quezada, 446 F.3d 1005, 1008 (8th Cir. 2006) (seizure of shotgun in plain view valid because officer entered apartment with reasonable belief that someone was inside but unable to answer).

The incidental discovery of illegal items in the screening of carry-on bags, is not, as one post suggested, akin to forcing a motorist to open his trunk at a sobriety checkpoint. Police officers conducting field sobriety tests at a vehicular checkpoint have no need to look in the trunk of a car to determine if the driver is impaired. By contrast, TSA screeners need to inspect every carry-on bag for weapons, explosives, and other prohibited items that pose a risk to transportation security. To do so, they must examine all compartments of the bag that are capable of concealing such items. If their task causes them to discover evidence of crime, they must ensure a prompt law enforcement referral.

Friday, February 29, 2008

The Truth Behind the Title: Behavior Detection Officer

Ever get the feeling you’re being watched? Usually it’s just nerves or a good dose of electromagnetic energy, but if you’re traveling through a TSA checkpoint, chances are there are several sets of eyes on you. What are they looking at? Is your hair messed up? Looking flustered after problems at the ticket counter? Have toilet paper stuck to the bottom of your shoe? No. You’re being watched by Behavior Detection Officers, or BDOs in government acronym-speak.

The program was designed by Paul Ekman (PhD), a psychology professor at the University of California Medical School, San Francisco. He’s been studying behavioral analysis for the past 40 years and has taught the TSA, Customs and Border Protection, CIA, FBI and other federal agencies to watch for suspicious facial expressions of tension, fear or deception. He has even taught animators at Disney-Pixar to create convincing faces for film characters. After passing along his skills to US Customs, their “hit rate” for finding drugs during passenger searches rose to 22.5 percent from 4.2 percent in 1998.

Behavior analysis is based on the fear of being discovered. People who are trying to get away with something display signs of stress through involuntary physical and physiological behaviors. Whether someone’s trying to sneak through that excellent stone ground mustard they bought on vacation, a knife, or a bomb, behavior detection officers like me are trained to spot certain suspicious behaviors out of the crowd. Once we make our determination, we refer these passengers for additional screening or directly to law enforcement.

Just recently at the Cincinnati Northern Kentucky International Airport, (CVG) two of my fellow BDOs spotted behaviors on a passenger and conducted secondary screening. They were unaware at the time the individual was an undercover “passenger” involved in covert testing. The concealed item was an unassembled weapon in a carry-on bag. The BDOs caught this right away, and when the testing was over, it was revealed that the passenger also had plastic explosive simulants in the cups of her bra. This was an excellent catch, and proof the behavior detection program works. If this were the real thing, we would have caught it.

Between July 1, 2007 and February 7, 2008, 514 people were arrested after being referred for additional screening or directly to law enforcement officers by behavior detection officers. The arrests include unlawfully carrying concealed firearms or other weapons, possession of fraudulent documents, transporting undeclared currency, possessing illegal drugs, immigration law violations, and outstanding warrants.

Some will say that it shouldn’t be TSA’s job to look for drugs, or money - our job is airport security. But when we spot someone behaving suspiciously, we don’t know what they have; all we know is they’re behaving in a way that says they might pose a threat. In many cases, we find things that might have otherwise gotten through security (money, drugs) and that’s a good sign because it could just as easily been plastic or liquid explosives. The behaviors these drug and currency smugglers exhibit are the same behaviors we expect a terrorist to exhibit.

In the ABC interview below, former United Airlines ticketing agent Mike Tuohey discusses gut feelings he had about behaviors Mohamed Atta and Abdulaziz al-Omari were displaying on 9/11. BDOs are trained to recognize behaviors and likely would have subjected them to secondary screening and questioning.


At a time when almost anything can be made into a weapon, it’s important to focus on the people with intent to do harm, not just on the items they might use. For more information on the program, click here.

Bob
TSA Evolution Blog Team and Behavior Detection Officer

Gripes & Grins, Part 3

Have more TSA experiences that you want to share? This is the blog post to share your TSA experiences -- both the good or the bad. (Click here to see Part 2 and Part 1).