A recent document from the Department of Homeland Security (DHS) shows an update to Advanced Imagery Technology (AIT) protocols used by the Transportation Security Administration (TSA) at airports across the United States.
This means that U.S. authorities could make electronic body scanning mandatory for fliers that TSA agents think pose an above-average security risk. Until recently, passengers were able to refuse passing through the electronic scanners in favor of a direct, physical search.
Most fliers claim that they opt-out of electronic scanning for privacy reasons, as reports showed that some of the devices were able to portray the person's body rather accurately. Moreover, fliers were concerned that the "naked" images could be stored and distributed over the Internet.
During the summer of 2014, at a USENIX security conference in San Diego, a research team showcased its conclusions concerning the privacy and efficiency of the Rapiscan Secure 1000 full-body scanner.
"A clever attacker can smuggle contraband past the machines using surprisingly low-tech techniques," University of Michigan professor, J. Alex Halderman, stated.
He added that the results of the research were "shocking."
The research team underlined how ill-prepared the security scanner is when facing "adaptive adversaries."
"It is possible to conceal knives, guns, and explosives from detection by exploiting properties of the device's backscatter X-ray technology," the abstract of the paper reads.
The TSA, the authority in charge of national airport security, introduced advanced imaging technology in 2009. Over $1 billion were spent in order to discourage and prevent terrorist threats in airports.
In 2013, following accusations of privacy invasion via Rapiscan Secure 1000, the security scanners were removed from airports. They were subsequently distributed to public service institutions, such as prisons or courthouses.
The TSA avoided admitting that the devices present easy exploits for malevolent passengers.
A leaked FBI report from last summer also pointed out that TSA screeners were unable to find 95 percent of contraband items. If the information does not faze you, know that "contraband items" means plastic explosives, as well. In the aftermath of the federal investigation, former TSA leader Melvin Carraway was replaced by Peter Neffenger.
Under the new leadership, the TSA works closer with the DHS to improve the airport safety procedures and to make sure that the security gizmos actually do what they are meant to.
"TSA is updating the AIT PIA to reflect a change to the operating protocol regarding the ability of individuals to opt opt-out of AIT screening in favor of physical screening," the DHS writes [PDF] in the recently released documents.
The regulators do not explain in detail what caused the change in airport security's modus operandi. It might be that an increasing number of passengers found ways to by-pass the full-body scanners while carrying dangerous objects, as was revealed in the Rapiscan study.
The official document underlines that the privacy of air travelers is guaranteed. The new scanners cannot store or send graphical images of the passengers' bodies, but only display it for the use of TSA agents nearby. Like so, security officers can check if there is anything suspicious with their hand-held metal detector.
After it was revealed that the Rapiscan devices were both invading privacy (read: taking nude images) and unsafe, the new security devices approach the full-body scan in a different fashion. Specifically, the system "replaces the individual's image with that of a generic figure," according to the DHS document.
"While passengers may generally decline AIT screening in favor of physical screening, TSA may direct mandatory AIT screening for some passengers," the DHS points out.
It might be a good idea for the TSA and DHS to start a public awareness campaign, so all potential fliers are aware of the changes before they reach the Departure gate.
