28 May 2011

the vanity of the security analyst

"unattractive figures whose writings betray their intellectual vanity" ... or merely the desire for attention?

From 'Protecting Sensitive Information: The Virtue of Self-Restraint' [PDF] by Dallas Boyd in (2011) 7 Homeland Security Affairs -
Changes in societal mores are probably more responsible than any technological development for the increased traffic in sensitive information. Irresponsible disclosures frequently occur without any social penalty for those who make them. This represents a dramatic shift from earlier generations, when cooperation with the government on security matters was more uniform. In one well-known example, American physicists refrained from publishing results on nuclear fission experiments during World War II for fear of assisting the Nazi bomb program. Even among provocateurs, there is precedent for self-restraint. Daniel Ellsberg’s name is synonymous with exposing government secrets, having leaked the Pentagon Papers. Yet Ellsberg conscientiously withheld four volumes regarding sensitive negotiations out of concern that they would disrupt the peace process. Such discretion can still be found, although it is uncommon enough to be conspicuous. In their analysis of radiological terrorism, for example, James Acton et al. stopped short of revealing a radiation immersion scenario that they claimed would “readily kill several hundreds and disrupt a large city.” As for the specifics of the plot, they wrote, “We will not describe it.” In an earlier episode, the government sought a voluntary embargo of the details of a 1984 incident in which religious cultists poisoned 751 people in Oregon with Salmonella. Fearing the attack would inspire copycats, officials asked the Journal of the American Medical Association to refrain from describing the method for twelve years; the editors agreed.

As an alternative to formal restrictions on communication, professional societies and influential figures should promote voluntary self-censorship as a civic duty. As this practice is already accepted among many scientists, it may be transferrable to members of other professions. As part of this effort, formal channels should be established in which citizens can alert the government to vulnerabilities and other sensitive information without exposing it to a wide audience. Concurrent with this campaign should be the stigmatization of those who recklessly disseminate sensitive information. This censure would be aided by the fact that many such people are unattractive figures whose writings betray their intellectual vanity. The public should be quick to furnish the opprobrium that presently escapes these individuals.

The need to influence the behavior of scientists is particularly acute. The Corson panel, while expressing little enthusiasm for restrictions on scientific communication, noted the existence of a category of research that merited "limited restrictions short of classification" on a largely voluntary basis. This category represented a "gray area" lying between research that can be discussed openly and that which the government has good cause to classify. While the need for voluntary self-censorship among scientists is already well recognized, there is still some resistance to the idea that scientific communication should ever be constrained. To wit, one of the researchers involved in the Australian mousepox experiment defended their publication on the grounds that "Anything scientifically interesting should be published." An effort must be made to temper this attitude and make clear that the pursuit of scientific knowledge does not absolve researchers of their social responsibility.

An understandable objection to self-censorship arises when one considers that huge quantities of classified information are being maliciously leaked under the auspices of WikiLeaks. It might seem curious to criticize well-meaning professionals for discussing unclassified information that is far less damaging than the genuine secrets being revealed. Yet the nihilism of this small group is not the standard against which one’s actions should be measured. Nor does it release conscientious citizens from their duty not to endanger the nation.
All security analysts are exempt from vanity, the professional imperative for self-promotion etc?