Information Security News mailing list archives
Security headaches grow
From: William Knowles <wk () C4I ORG>
Date: Mon, 13 Nov 2000 02:15:03 -0600
http://www.bangkokpost.net/today/131100_Business12.html IMTIAZ MUQBIL November 13, 2000 The brave new world of globalisation is raising a new set of safety and security concerns, many of which significantly affect the travel and tourism industry, according to experts at a global security congress held in Bangkok last week. Speakers at the World Security Congress 2000 said terrorism had become just one element among security challenges that now included increased use of fraudulent documentation, Internet virus and hacker attacks, money laundering, industrial espionage, anti-globalisation protests and even whistle-blowing by disgruntled employees. No matter how good the defence mechanisms, they said, preventing crime and terrorism risked remaining one step behind because of the sheer magnitude of the problem, involving as it does high equipment costs, legal issues and training across borders, all made worse by corruption. The stakes are rising in an era when companies walk a very thin between profit and loss. Protection of information is becoming equally and perhaps more important than protection of physical assets and manpower. Tour companies, airlines and hotel chains are all susceptible to these security threats because of their increasingly global reach and fight for market share, which often drives them to bend if not necessarily break laws in countries in which they operate. According to security experts, many of these companies are dominant brands and very prominent parts of what is being described as a wholesale export of western culture and influence over markets, standards and education. UK security consultant Stewart Kidd cited this example which he said was "not exaggerated but slightly dramatised": An Internet-based company located in Stockholm employs US and Canadian college students to sell phoney investment bonds to Germans via a web site located on a Belgian server and owned by a French telecommunications company. The company is registered in Liechtenstein under Luxembourg law and is partly owed by an Indian with dual UK nationality who lives on a Panamanian-registered yacht in the Antilles and banks his cash in the Cayman islands. Questions: Where has the crime been committed? Who will investigate? Who will prosecute? What are the chances of the owner going to jail? Finally, apart from those who lose money, does anyone care? No governments do, he said. "It's not their problem." Mr Kidd said that while mergers and takeovers-which are rife in the travel and tourism industry-required a totally transparent process of due diligence, some companies ignored warnings to run personal checks on management executives of the company being bought. One of his clients ignored advice to do so and found an accounting system full of holes. Another speaker, David Judge, sales and marketing director of 3M, which manufactures secure cards and equipment to detect fraudulent travel documents, said: "With 283 countries now issuing passports and with approximately six legal variations of each passport, plus a 10-year [validity] period, the ability of border control staff to be able to administer effective security evaluation over the whole range of possibilities is now impossible." He said airlines were paying billions of dollars a year in fines for carrying illegal immigrants and asylum-seekers, who were finding increasingly ingenious ways to get into countries. The UK alone dealt with 99,000 claims for political asylum in 1999, of which 46,000 were still outstanding at year-end. With airports getting bigger and busier, Mr Judge said, "it is possible to live in one for several days without having to disclose one's presence, by which time all trails have gone cold". He said technology was being developed to detect fraudulent documents to ensure that such people either never get on aircraft in the first place, or are nabbed at transit points (in case they swap documents with others en route). Because airlines must pay to repatriate such "travellers", they are being approached to start including digitised pictures along with the Passenger Name Record (PNR) created by the reservations computer, which now tracks only the usage of the ticket. Inserting a picture will effectively convert the booking into an ID check. Some of the new technology can include templates of all the hundreds of different passport types. Mr Judge said an electronic manifest can be created as passengers board a flight, allowing all passport information to be shown, along with facial images, at each point of the itinerary. He said the increasing capacity and speed of electronic systems also allowed security devices to be loaded with files of wanted faces, a list that could be updated in real time so that every device anywhere in the world could contain the most up-to-date list. Australian security consultant Dominic Boyle said multinational companies-now called "corporate states" because they are becoming bigger than most countries-would increasingly have to start creating their own security and intelligence apparatus because they could no longer count on governments to protect them. "To this end, the corporate state has developed security capabilities including corporate security policing, investigations and counter-intelligence and perhaps the most controversial, private military companies such as Sandline and DSL." He was referring to mercenaries. The exhibition that accompanied the security congress included a range of products, many of them designed for sale to the travel and tourism industry, such as airport X-ray machines that can detect everything from explosives to precious metals and organic foodstuffs. Mr Kidd said one big issue corporations face is that of loyalty. If the security director of major corporation, a local citizen hired by a global corporation, discovers that the company is doing something that is against the interests of his country, where will his loyalties lie? He asked the question without venturing an answer. *==============================================================* "Communications without intelligence is noise; Intelligence without communications is irrelevant." Gen Alfred. M. Gray, USMC ================================================================ C4I.org - Computer Security, & Intelligence - http://www.c4i.org *==============================================================* ISN is hosted by SecurityFocus.com --- To unsubscribe email LISTSERV () SecurityFocus com with a message body of "SIGNOFF ISN".
Current thread:
- Security headaches grow William Knowles (Nov 13)