The Quixotic Quest for Invulnerability

Schneier on Security: Homeland Security Cost-Benefit Analysis.

A very worthwhile read – basically:

The premises:

  1. The number of potential terrorist targets is essentially infinite.
  2. The probability that any individual target will be attacked is essentially zero.
  3. If one potential target happens to enjoy a degree of protection, the agile terrorist usually can readily move on to another one.
  4. Most targets are “vulnerable” in that it is not very difficult to damage them, but invulnerable in that they can be rebuilt in fairly short order and at tolerable expense.
  5. It is essentially impossible to make a very wide variety of potential terrorist targets invulnerable except by completely closing them down.

The policy implications:

  1. Any protective policy should be compared to a “null case”: do nothing, and use the money saved to rebuild and to compensate any victims.
  2. Abandon any effort to imagine a terrorist target list.
  3. Consider negative effects of protection measures: not only direct cost, but inconvenience, enhancement of fear, negative economic impacts, reduction of liberties.
  4. Consider the opportunity costs, the tradeoffs, of protection measures.

There’s nothing new here – this is all common sense stuff, really. This paper just backs it up with research and evidence. Now, if we could just get our leaders to ACT on it, instead of their current tactic of fear-mongering and ass-covering, we’d all be a lot better off.

By Keith Survell

Geek, professional programmer, amateur photographer, crazy rabbit guy, only slightly obsessed with cute things.