Tuesday, January 13, 2004

What Price Security? US-VISIT:
"Attention taxpayers: The United States government is about to spend at least $10 billion to build a state-of-the-art nationwide computer system that will use biometrics to track the comings and goings of visitors to this country.

Hang on to your wallets and a copy of the Bill of Rights.…"

This system is supposed to enable the government to effectively check in and check out every non-citizen on arrival and departure. Presumably the government will also be able to use it to check out and check in every U.S. citizen who visits foreign lands. If it works, US-VISIT will link up federal law enforcement and intelligence databases to automatically identify suspected terrorists or common criminals who are wanted for arrest in the United States or overseas.

The designers are going to have to build massive databases to store and process the biometric data and link them to a variety of existing law enforcement agency databases. This alone will be a remarkable achievement considering that inter-agency rivalries helped ensure information wasn't shared in a highly automated fashion.

In short, building US-VISIT will be like building a new space shuttle from scratch. Delays and cost overruns are a virtual certainty.…

The problem is that when it comes to connecting biometrics to a global data processing system, nobody knows what is the state of the art. The government is going to have to pay somebody to invent it.

Late last year DHC asked Accenture LLP, Computer Sciences Corp. and Lockheed Martin Corp. to submit bids based on proposals the companies had submitted earlier. The government plans to choose one of these companies to be the lead contractor for US-VISIT by next May.

When the government tells you that it might cost as much as $10 billion to design, build and deploy such a system, increase that figure two or three times because US-VISIT is as complex and risky a project as some of the biggest weapons procurement programs in the country's history.

Just how risky can be judged from the federal government's atrocious record of trying to deploy modern and efficient data processing systems for fundamental public service agencies, such as the Social Security Administration or the Internal Revenue Service. The record is full of accounts about delays, cost overruns and outright failures in a multitude of government computer procurement programs.

Even with all of the engineering and computer science talent on their payrolls, neither the government nor the contractor candidates can be absolutely certain that they can successfully assemble this system—no matter what they might say publicly.…

It is a sad fact of history that most of the great advances in science and technology have been achieved only because governments are prepared to spend huge sums to build new weapons and defense systems.

The atomic bomb, nuclear submarines and the nascent U.S. antimissile system are just a few examples of the lengths that the government is prepared to go in the name of national security.

An early successful example of the government harnessing computer technology for national defense is a 1960s era museum piece called SAGE (Semi Automatic Ground Environment) developed by IBM based on research by the Massachusetts Institute of Technology. It used radar and computer power to allow air defense controllers to track intruding aircraft. It was a precursor of the current civil air traffic control systems used worldwide.

It was also nowhere near as complex as the US-VISIT system.

Even so, it is entirely possible with massive investments of money, time and human resources the government will actually deploy a US-VISIT system that reliably performs what it was designed to do. But that doesn't mean we will be one iota safer from attack by determined terrorists.

If we are very lucky, the nation will somewhat be less blind to terrorist threats than we were before 2001. We will have also paid a heavy price beyond the yet uncounted billions to build the system.

http://www.eweek.com/print_article/0,3048,a=116163,00.asp

No comments:

Post a Comment

con·cept