Difference between revisions of "Talk:Lecture 2"

From CyberSecurity
Jump to: navigation, search
Line 58: Line 58:
  
 
I actually thought that an interesting idea Professor Maurer alluded to was that outsourcing may be a more inefficient way of conducting business for terrorists than keeping things in-house would be.  Professor Maurer mentioned the economist Ronald Coase.  From what I read on the internet, Coase pointed out that, while outsourcing may traditionally be thought of as the most efficient way to get things done (since the market makes sure that tasks are performed by the firms that can do them at the least cost), transaction costs sometimes make outsourcing more inefficient than doing things in-house.  In the case of a terrorist organization, I’m guessing that the most significant transaction costs are “enforcement and policing costs.”  That is, when you contract out some part of a terrorist plot, you have to make sure that the party with whom you’re contracting 1) actually does what you’ve paid them to do and 2) doesn’t leak information to the authorities either on purpose or inadvertently.  As Professor Maurer mentioned, Bin Laden has gotten burned trying to orchestrate complex plots using outside contractors (e.g. spending millions on unusable uranium, or having hard drives with sensitive information on them found by U.S. authorities).  Anyway, I guess I’m wondering if Bin Laden’s outsourcing may make his plots easier to foil since outsourcing must make it harder for him to ensure quality and secrecy.  Avi Springer
 
I actually thought that an interesting idea Professor Maurer alluded to was that outsourcing may be a more inefficient way of conducting business for terrorists than keeping things in-house would be.  Professor Maurer mentioned the economist Ronald Coase.  From what I read on the internet, Coase pointed out that, while outsourcing may traditionally be thought of as the most efficient way to get things done (since the market makes sure that tasks are performed by the firms that can do them at the least cost), transaction costs sometimes make outsourcing more inefficient than doing things in-house.  In the case of a terrorist organization, I’m guessing that the most significant transaction costs are “enforcement and policing costs.”  That is, when you contract out some part of a terrorist plot, you have to make sure that the party with whom you’re contracting 1) actually does what you’ve paid them to do and 2) doesn’t leak information to the authorities either on purpose or inadvertently.  As Professor Maurer mentioned, Bin Laden has gotten burned trying to orchestrate complex plots using outside contractors (e.g. spending millions on unusable uranium, or having hard drives with sensitive information on them found by U.S. authorities).  Anyway, I guess I’m wondering if Bin Laden’s outsourcing may make his plots easier to foil since outsourcing must make it harder for him to ensure quality and secrecy.  Avi Springer
 +
 +
 +
SMM:  Yes, this is exactly what I was trying to get people to think about.

Revision as of 18:15, 11 September 2005

Ok, here we go.

I am not too sure of the perfect way to start this up, but I will just start with throwing out questions that came up for me in lecture.


General Issues

Premise: Something has changed, with the Third Wave of terrorism, so that now terrorists have a new goal of waging war. My first impression is that this still sounds like a tactic to me - the goals should be more concrete, such as gaining concessions from the United States, or Western Nations.

Q: Have the goals of terrorism changed? Under what conditions would Al Qaeda decide to call off the war, negotiate a truce, etc?


SMM: The goal/tactic distinction is fairly definitional. You could call everything in the first lecture (publicity, forcing concessions) a tactic if you wanted also. The reason I don't do that is that we usually think of terrorism as a tactic. Also, I have tried to abstract away from the goals that particular terrorists want -- Rather, the question has been, given some set of goals is terrorism a rational way to proceed? Your way might be more conventional usage, though.

So call mass violence a tactic if that helps. The point of the second lecture is that warfare/mass violence has always been a tactic that nations (but not terrorists) used to attain goals. And what we know about this tactic tends not to work without exceedingly large casualties. This is not to say that casualties are the only variable -- clearly they are not -- but since we lack a good theory of warfare, the only way to proceed is to develop an intuition for the most important variables one at a time.

Of course, you can't ignore the other variables altogether. At some point you have to add them. These variables include the particular conditions under which the parties might call off a war or negotiate a truce. In a full theory (which doesn't exist!), the level of these demands would interact with how many casualties the US is willing to sustain or, equivalently, Al Qaida needs to inflict. The demands would presumably also shift over time depending on how well the war is going for one side or the other. But as I say, we don't have any very good theory of how these things happen.

One really important consideration is to task whether Al Qaida could call a truce even if it wanted to. If they can't, then the struggle becomes bloodier all around.


Premise: There have been changes in the nature of terrorism that now terrorists are more inclined towards causing mass casualties. In the past, perhaps it was constrained by the need to maintain good public support, or the support of the state sponsor.

Q: Does Al Qaeda have anything to protect that would cause it to shy away from total warfare?

  • My thoughts: They seem unconcerned with public opinion within the US, besides perhaps creating fear. This may be a mistake since the ability of the U.S. government to wage counter-warfare is dependent upon public support. They certainly need to protect public opinion within the Arab world, whether among the people who are potential recruits, or the people who donate money to the organization. As such, I would expect that they would still be constrained in similar ways as under state sponsorship.


SMM: I think that's right, although sponsors have a return address and are therefore afraid of being bombed. People who send recruits/donors are much less likely to see that kind of incentive, their responsibility is diffuse.

Another angle on the problem is that the terrorists in most of the plots in Europe and North America stayed in those places for months or years or were even born there. In those cases, local Moslem community sympathy (or at least neutrality) plays a significant role in letting terrorists to "stay invisible."


Technology Issues

Complexity/Magic tree idea: One weakness that we have against terrorism is the complexity of our society, the fact that there are interdependent systems that often have hubs and leverage points. Case in point, a single tree falling in the right spot can cause wide-ranging power outages (with resulting problems).

Q: Does engineering systems to be robust against natural disasters (and minor ones like trees) and hooligans provide enough protection against a lot of the things that terrorists would do? Or are there ways in which terrorists might attack a complex system that is very different from nature and the hooligans?


SMM: There's a nice NATURE article (27 July 2000) about the Internet which says that you can imagine two different ways that the network could be connected. In the first, the number of connections that each node has is a Gaussian ("bell curve"). This leads to most nodes having some similar interconnectedness. In that world, system performance diminishes more or less linearly if you take out nodes at random. Furthermore, an intentional attack (picking the most connected nodes) doesn't do much better, because the bell curve guarantees most nodes are pretty average.

On the other hand, you can imagine a "power law" distribution in which a few nodes are hugely connected but the overwhelming majority of nodes have only a few. In this case, the system is enormously resistant to natural disaster but also more vulnerable to terrorism.

Even though the article is about the Internet, the same logic fits most complex systems. For example, during the Cold War the military worried about attacks on the phone system that might disrupt the President's ability to authorize a strike during a nuclear attack. The answer in the 1960s was reassuring -- There were so many ways to route a telephone call that destroying a few switches wouldn't matter. The answer in the 1980s was less reassuring -- By then, a large volume of traffic was shuttling through a small number of huge switching centers. Contrary to our usual intuitions, society has become less complex (by some measures) and more vulnerable.

Social Issues

I am just going to pose the question that Maurer asked, so that maybe some people will take a stab at it.

Q: Is outsourcing the most efficient way for Al Qaeda to wage war?

yes, because they want to get the message across with mass publicity. Then they take the blame for a terrorist action, and boom, more publicity...

But heres another question, should US and other democratic nation-states increase security on the 9/11 ann., or should this been happening everyday?


I actually thought that an interesting idea Professor Maurer alluded to was that outsourcing may be a more inefficient way of conducting business for terrorists than keeping things in-house would be. Professor Maurer mentioned the economist Ronald Coase. From what I read on the internet, Coase pointed out that, while outsourcing may traditionally be thought of as the most efficient way to get things done (since the market makes sure that tasks are performed by the firms that can do them at the least cost), transaction costs sometimes make outsourcing more inefficient than doing things in-house. In the case of a terrorist organization, I’m guessing that the most significant transaction costs are “enforcement and policing costs.” That is, when you contract out some part of a terrorist plot, you have to make sure that the party with whom you’re contracting 1) actually does what you’ve paid them to do and 2) doesn’t leak information to the authorities either on purpose or inadvertently. As Professor Maurer mentioned, Bin Laden has gotten burned trying to orchestrate complex plots using outside contractors (e.g. spending millions on unusable uranium, or having hard drives with sensitive information on them found by U.S. authorities). Anyway, I guess I’m wondering if Bin Laden’s outsourcing may make his plots easier to foil since outsourcing must make it harder for him to ensure quality and secrecy. Avi Springer


SMM: Yes, this is exactly what I was trying to get people to think about.