Technology Sectors

Market Sectors

OPINION / Remaining attentive through the last tactical mile

Dennis Blair

 

Three administration intelligence officials appeared before two separate Senate committees on January 20 to discuss specifically the failure to keep the alleged Christmas Day underwear bomber off the Northwest Airlines flight, but more generally to describe the difficulty in making the crucial, final intelligence connections in what the officials termed the "last tactical mile."

They all acknowledged that various U.S. intelligence operatives and analysts had collected various bits and pieces of the story that should have fingered Umar Farouk Abdulmutallab. But they also pointed out the huge challenge in spotting one unique and genuinely threatening piece of information among the thousands of pieces of data the Intelligence Community receives and processes each and every day.

 "Although we must and will do better, we must also recognize that not all of the pieces rise above the noise level," Dennis Blair, the Director of National Intelligence, and Michael Leiter, the Director of the National Counterterrorism Center, told the Senate Homeland Security and Governmental Affairs Committee, in their prepared testimony. They were joined by DHS Secretary Janet Napolitano.

Blair talked about the progress that the Intelligence Community has made in recent years in improving intelligence sharing throughout the federal government, as well as between federal, state and local law enforcement agencies and fusion centers. Blair seemed particularly proud of the Intelligence Community's "collaborative tools," such as:

Intellipedia, the Intelligence Community's version of Wikipedia, which was announced in 2006 and now allows 16 intelligence agencies and other national security-related offices to collaborate with Top Secret, Secret and Sensitive But Unclassified information;

A-Space, or Analytic Space, which is a project developed by the Office of the Director of National Intelligence that enables intelligence analysts to use a collaborative work space to gain access to interagency databases, Web-based messaging and other tools;

iVideo, a video sharing Web site, akin to YouTube, that offers Top Secret videos to the intelligence agencies, Secret information to the Defense and State Departments, and Sensitive But Unclassified video to other government employees as well as some outsiders; and,

Intelink, the secure intranet used by the Intelligence Community since 1994 to promote the dissemination of intelligence information.

Advances like these and others can make a huge difference in intelligence collection and analysis, but it seems to me that more attention needs to be focused on the inherent – and virtually unavoidable – quality in human nature to lose attentiveness when one is swimming in a vast ocean of information.

In the physical security field, it has long been recognized that security personnel cannot monitor a large bank of video screens – each streaming a different scene, often without anything interesting happening – for more than 20 minutes or so, before their eyes glaze over and they lose all attentiveness. The security industry has tried to address this short human attention span by developing video analytic software, which supposedly can spot behavior "anomalies" within a few seconds and trigger the appropriate alert, and will never tire of looking at dozens or hundreds of video feeds. Unfortunately, though these analytic packages can indeed remain vigilant for weeks on end, they have not yet proven to be as accurate or useful as promised.

So, the question becomes: How can an individual intelligence analyst remain alert and attentive when he or she is reviewing fragmentary pieces of preliminary intelligence about an individual who has not yet been identified as a bona fide terrorist threat? Put another way: If the analyst is reviewing bits and pieces of data about 50 separate individuals on a particular day – and none of the "derogatory" information about any one individual rises to a level that is unquestionably worrisome – how does the analyst determine which of the 50 potential paths he ought to pursue that day?

It is, of course, easy to say after-the-fact that an analyst could have – and should have – assembled the entire mosaic that would have revealed the underwear bomber's Christmas day plot, but that would have required more attentiveness to seemingly unimportant details at the time than most human beings seem to possess.

 

Recent Videos

It's been a banner year for the Whitestone Group, according to John Clark, CEO of the facility security, asset/force protection and investigations...
Jeff Horne explains that Denver, CO-based Accuvant , Inc has two different businesses – the Value Added Reseller (VAR) side, in which it is one of...
GSN caught up with Dave Natelson for a quick interview at the Cocktail Reception at the 2011 Awards Dinner, before he learned that Nasatka had earned...
Ann Pickren discusses MIR3’s Mass Notification System that was awarded a Winner’s Trophy in GSN’s 2011 Homeland Security Awards Program. She explains...
Former Coast Guard Commandant Thad Allen, who served through a long and distinguished career in the United States Coast Guard and later answered the...

Upcoming Events

Event Details Dates of Event
SANS Phoenix 2012 Feb 13 - 18
Gov TechTalks Lunch & Learn Session 7: Application Security Feb 15 - 15
SANS Secure India 2012 Feb 20 - 25
The Airport Law Enforcement Symposium Feb 23-24, 2012 Feb 23 - 24
Learn How to Simplify Data Management and Reduce Storage Costs - with Steak & Eggs Feb 23 - 23
Physical Security: Introductory Applications and Technology Feb 27 - Mar 1
Conducting Corporate Investigations Feb 27 - 28
ISC CHINA 2012 (International Security Conference & Exposition CHINA) Feb 27 - 29
RSA Conference 2012 Feb 27 - Mar 2
SAP Public Sector Partner Exchange Feb 28 - 28
SANS Secure Singapore 2012 Mar 5 - 17
SANS Germany 2012 Mar 5 - 10
Homeland Security Finance Forum 2012 Mar 6 - 6
Basic Hands-On CAMEO Training Mar 12 - 14
ASIS Assets Protection Course: Principles of Security (APC I) Mar 12 - 15
SANS Mobile Device Security Summit 2012 Mar 12 - 15
Aviation Week's Innovation Challenge Showcase Mar 13 - 14
Symantec Government Technology Summit Mar 20 - 20
STI at SANS 2012 Mar 23 - 30
SANS 2012 Mar 23 - 30
The 9th Two Day Conference On Indian Medical Devices & Plastics Disposables Industry 2012 Mar 23 - 24
SANS Northern Virginia 2012 Apr 15 - 20
Active Shooter Apr 18 - 19
SANS AppSec 2012 Apr 24 - May 2
SANS Cyber Guardian 2012 Apr 30 - May 7
Telework Exchange Spring 2012 Town Hall Meeting May 2 - 2
5th Sample Prep - Sample Preparation for Virus, Toxin, & Pathogen Detection & Identification May 3 - 4
SANS Security West 2012 May 10 - 18
SANS Toronto 2012 May 14 - 19
Counter Terror Expo US May 16 - 17
CEIC 2012 (Computer and Enterprise Investigations Conference) May 21 - 24
SANS Rocky Mountain 2012 Jun 4 - 9
Data Center Brainstorm 2012 Jun 19 - 19
SANS Forensics and Incident Response Summit 2012 Jun 21 - 27
Vanguard Security & Compliance 2012 Jun 25 - 28
SANS Canberra 2012 Jul 2 - 10