|
 |
|||
|
||||
|
Back to Top
When you find your suitable answer for your questions, or benefit from the page, I sincerely hope that you can kindly put a backlink to our page in order to spead the word and the site to more people who seek for tips to generate more benefits in life. Your kind action for putting a backlink is a great motivation for us. I am asking for your help to make this page (which
I last modified on
Monday June 18, 2007
) a success. If each of you who read this could forward the link to two others,
and they forward the link to two others, we will have over 1,000,000 readers
in only 20 iterations! Believe in the power of word-of-mouth and spread the
word...
|
Bookmark|
There are 12,104 words on this page. Find this page fast. Type 1ytiruces in a searchbox . (that's "security1" spelled backwards)
What is Surveillance?Surveillance is the monitoring of behavior. Systems surveillance is the process of monitoring the behavior of people, objects or processes within systems for conformity to expected or desired norms in trusted systems for security or social control. Clinical surveillance refers to the monitoring of diseases or public healthrelated indicators (for example symptoms indicating an act of bioterrorism) by epidemiologists and public health professionals. Although the word surveillance in French literally means "watching over", the term is often used for all forms of observation or monitoring, not just visual observation. Nevertheless, the all-seeing "eye in the sky" is still a general icon of surveillance. However, surveillance also includes simple, relatively no- or low-technology methods such as direct observation, observation with binoculars, postal interception, or similar methods. Counter surveillance, inverse surveillance, sousveillance. Surveillance is the art of watching over the activities of persons or groups from a position of higher authority. Surveillance
may be covert (without their knowledge) or overt (perhaps with frequent reminders
such as "we are watching over you"). Surveillance has been an intrinsic
part of human history. Sun Tzu's The Art of War, written 2,500 years ago, discusses how spies should be used against a person's enemies. However, modern electronic and computer technology have given surveillance a completely new field of operation. Surveillance can be automated using computers, and people leave extensive records that describe their activities. Counter surveillance is the practice of avoiding surveillance or making surveillance difficult. Before computer networks, counter surveillance involved avoiding agents and communicating secretly. With recent developments the Internet, increasing prevalence of electronic security systems, and computer databases counter surveillance has grown in scope and complexity. Now counter surveillance involves everything from knowing how to delete a file on a computer to avoiding becoming the target of direct advertising agencies. Inverse surveillance is the practice of reversalism on surveillance, e.g., citizens photographing police, shoppers photographing shopkeepers, and passengers photographing cab drivers who usually have surveillance cameras in their cabs. A well-known example is George Haliday's recording of the Rodney King beating. Inverse surveillance attempts to subvert the panoptic gaze of surveillance, and often attempts to subvert the secrecy of surveillance through making the inverse surveillance recordings widely available (in contrast to the usually secret or restricted surveillance tapes). Surveillance (a term coined by Steve Mann, a professor at the University of Toronto) is inverse surveillance that includes the recording of an activity by a participant in the activity. Recent
surveillance workshops such as Microsoft's Continuous Archival and Recording
of Personal Experience are evidence of a growing surveillance industry including
Microsoft (wearable cameras), Nokia, Hewlett Packard ("Casual Capture")
and many others. Clinical surveillance is the monitoring of events (including, for example, the occurrences of infectious diseases or chronic diseases) with a significant impact on public health. Increasingly, clinical surveillance is being used to inform public policy in allocating health care resources and meeting patient needs. As health care becomes increasingly dependent on information systems and the use of clinical surveillance becomes more widespread, privacy concerns may arise. Patient-centeredness is a form of clinical surveillance in which information is managed with equivalence and transparency. Equivalence is the balance between surveillance and sousveillance. It has been suggested that equivalence might better preserve the contextual integrity of veillance data. Impact of surveillanceThe greatest impact of computer-enabled surveillance is the large number of organizations involved in surveillance operations. The state and security services still have the most powerful surveillance systems, because they are enabled under the law. However, today levels of state surveillance have increased, and using computers, they are now able to draw together many different information sources to produce profiles of persons or groups in society. Many large corporations now use various form of "passive" surveillance . This is primarily a means of monitoring the activities of staff and for controlling public relations. However, some large corporations actively use various forms of surveillance to monitor the activities of activists and campaign groups who may affect their operations. Many companies trade in information lawfully, buying and selling it from other companies or local government agencies that collect it. Companies who wish to use it for marketing or advertising purposes usually buy this data. Many small groups and individuals obtain personal information. Some of this is for harmless purposes, but increasingly sensitive personal information is being obtained for criminal purposes, such as credit card and other types of fraud. Modern
surveillance cannot be totally avoided. However, non-state groups may employ
surveillance techniques against an organization, and some precautions can
reduce their success. Some states are also legally limited in how extensively
they can conduct general surveillance of people they have no particular reason
to suspect. Note: In all the forms of surveillance mentioned below, the issue
of patterns is important. Although in isolation a single piece of communications data seems useless, when collected together with the communications data of other people it can disclose a lot of information about organizational relationships, work patterns, contacts and personal habits. The collection and processing of communications data is largely automated using computers. See also Traffic analysis. Telephones and mobile telephonesThe official and unofficial tapping of telephone lines is widespread. The contracts or licenses by which the state controls telephone companies means that they must provide access for tapping lines to the security services and the police. For mobile phones, the major threat is the collection of communications data. These not only include information about the time and duration of the call, but also from where the call was made and to whom.
These data can be determined generally because the geographic communications cell that the call was made in is stored with the details of the call. However, it is also possible to get greater resolution of a person's location by combining information from a number of cells surrounding the person's location. Mobile phones are, in surveillance terms, a major liability. This liability will only increase as the new third-generation (3G) phones are introduced. This is because the base stations will be located closer together. Postal servicesAs more people use faxes and e-mail, the significance of the postal system is decreasing. (This may not be the case in all countries, certainly the case with international communications, but probably not local.) However, interception of post is still very important to security services. Surveillance devices or "bugs"Surveillance devices, or "bugs", are not really a communications medium, but they are a device that requires a communications channel. A "bug" usually involves a radio transmitter, but there are many other options for carrying a signal; you can send radio frequencies through the main wiring of a building and pick them up outside. You can also pick up the transmissions from cordless phones, and you can pick up the data from poorly configured wireless computer networks or tune in to the radio emissions of a computer monitor.
Bugs come in all shapes and sizes. The original purpose of bugs was to relay sound. Today the miniaturization of electronics has progressed so far that even TV pictures can be broadcast via bugs that incorporate miniature video cameras (something made popular recently during TV coverage sports events, etc.). The cost of these devices has dramatically fallen. Computer surveillanceAt a basic level, computers are a surveillance target because large amounts of personal information are stored on them. Anyone who can access or remove a computer can retrieve information. If someone is able to install software on a computer system, they can turn the computer into a surveillance device. Computers can be tapped by a number of methods, ranging from the installation of physical bugs or surveillance software to the remote interception of the radio transmissions generated by the normal operation of computers.
Spy ware, a term coined by computer security expert Steve Gibson, is often used to describe computer surveillance tools that are installed against a user's will. High-speed Internet connections have made computers more vulnerable than ever before.
PhotographyPhotography is becoming more valuable as a means of surveillance. In recent years, there has been a significant expansion in the level of stills and video photography carried out at public demonstrations in many countries. Photographs have long been collected as a form of evidence. However, as protest and civil disobedience become an ever-greater liability to governments and corporations, images are gathered not only as evidence for prosecution, but also as a source of intelligence information. The collection of photographs and video also has another important function it scares people. Closed-circuit televisionClosed-circuit television (CCTV) with which the picture is viewed or recorded, but not broadcast initially developed as a means of security for banks. Today it has developed to the point where it is simple and inexpensive enough to be used in home security systems, and for everyday surveillance. The widespread use of CCTV by the police and governments has developed
over the last 10 years. In the The justification for the growth of CCTV in towns is that it deters crime although there is still no clear evidence that CCTV reduces crime. The recent growth of CCTV in housing areas also raises serious issues about the extent to which CCTV is being used as a social control measure rather than simply a deterrent to crime. You will not be able to drive or walk anonymously around a city. Demonstrations or assemblies in public places could be affected, as the state would be able to collate lists of those leading them, taking part, or even just talking with protesters in the street. Electronic trailsModern society creates large amounts of transaction data. In the past, this data would be documented in paper records and would leave a "paper trail" but today many of these records are electronic, resulting in an "electronic trail" that is easily reconstructed through automated means. Every time you use a bank machine, pay by credit card, use a phone card, make a call from home, or otherwise complete a recorded transaction you generate an electronic record. When transactions are electronic, that anonymity may be lost. Today, large aggregations of transaction information are assembled by marketing, credit reporting, and other data aggregation companies in order to analyze consumer behavior to determine how companies should manage their marketing or sales strategies, or to assess counterparty "trust" for financial transaction. These data sets are also sold to other companies or to government agencies for additional use. The availability of large data sets of transaction information facilitates the use of automated surveillance or analysis techniques such as data mining to perform dataveillance. Data profiling of individualsData profiling in this context is the process of assembling information about a particular individual in order to generate a profile that is, a picture of their patterns and behavior (compare this use of the term data profiling with that used in statistics or data management where data profiling is the examination of information describing the data or data set itself). Data profiling is used in security, law enforcement and intelligence operations for a variety of applications for example, to assess "trust" for security clearances or to grant authorization relating to a trusted system, or to identify or apprehend suspects or threats. The government is able to access information from third parties for example, banks, credit companies or employers, etc. by requesting access informally, by compelling access through the use of subpoenas or other procedures, or by purchasing data from commercial data aggregators or data brokers. Under Information relating to any individual transaction is easily available because it is not generally highly valued in isolation; however, when many such transactions are aggregated they can be used to assemble a detailed profile revealing the actions, habits and preferences of the individual.
In the past, much information about individuals has been protected by practical obscurity (a term used by Justice Stevens in his opinion in USDOJ v. Reporters Committee, 1989). Practical obscurity refers to the practical difficulty of aggregating or analyzing a large number of data points in different physical locations. In addition, information was often transient and not easily available after the fact. Further, even where data was available, correlation of paper-based records was a laborious process. Electronic,
particularly digital, record-keeping has undermined this practical obscurity
by making data easily available and potentially making aggregation and analysis
possible at significantly lower costs. Thus, as more information becomes available in electronic form for example, as public records such birth, court, tax and other records are made available online the ability to create very detailed data profiles increases and may raise concerns. IdentitiesThere are instances when we wish to hide our identity to remain anonymous for a whole range of reasons. To eliminate this will be a serious erosion of our civil liberties. This is possible as we move towards the development of electronic identities. There are two aspects to this: 1. Development of systems of credentials where you carry a card or a document; and 2. Development of biometrics where you are recognized from your unique biological characteristics. The development of identity systems is being pushed on two fronts: 1. The banking industry, who wish to find a more fool-proof system of verifying financial transactions than the possession of a plastic card or the use of a signature; 2. Law enforcement, who want a way of identifying individuals easily, even if they have no reason (i.e. evidence) to do so. One of the simplest forms of identification is the carrying of credentials. Some countries have an identity card system to aid identification. Other documents, such as driver's licenses, library cards, bankers or credit cards are also used to verify identity. The problem with identity based on credentials is that the individual must carry them, and be identifiable, or face a legal penalty. This problem is compounded if the form of the identity
card is "machine-readable," usually using an encoded magnetic stripe
that corroborates the subjects identifying data. In this case it may create a document trail as it is used to verify transactions, like, for instance, swiping an ID card before entering a night club or bar to confirm age and possibly aid police in case of a criminal incident on the premises. As a means of combating the problem of people carrying or falsifying credentials, researchers are increasingly looking at biometrics measuring biological or physical characteristics as a way to determine identity.
One of the oldest forms of biometrics is fingerprints. Every finger of every person (identical twins included) has a unique pattern, and these have been used for many years to help identify suspects in police inquiries. A finger/thumb print can be reduced to a brief numeric description, and such systems are being used in banks and secure areas to verify identity. However, it should be noted that as of 2006, electronic fingerprint readers are subject to high error rates, misidentifying individuals as frequently as one time in ten. A more recent development is DNA fingerprinting, which looks at some of the major markers in the body's DNA to produce a match.
However, the match produced is less accurate than ordinary fingerprints because it only identifies people to a certain probability of matching. Further, identical twins have identical DNA, and so are indistinguishable by this method. Handwriting primarily one's signature has been used for many years to determine identity. However, other characteristics of the individual can also be used to check identity. However, perhaps the two most viable portable systems, because identities can be reduced to a series of numeric data points rather than a detailed image or sound, are: 1. Iris recognition. Some banks are now using this method of security. The human iris has a unique pattern that can be reduced to a simple series of numeric descriptions. The iris reader matches the pattern of the iris to one stored and verifies the match. 2. Facial recognition. The configuration of the facial features can be used to accurately identify one individual from another. Again, the configuration can be reduced to a short numeric description. By combining some form of personal identifying feature, with a system of verification it is possible to do everything from buying food to traveling abroad. The important issue is how this information is managed in order to reduce the likelihood of tracking. If you were to combine a particular biometric system with new smart card technology to store the description, that system would be immune from tracking (unless the transaction produced a document/electronic trial). However, if the identifying features are stored centrally, and a whole range of systems have access to those descriptions, it is possible that other uses could be made of the data; for example, using high resolution CCTV images with a databases of facial identities in order to identify people at random. Human operatives and social engineeringThe most invasive form of surveillance is the use of human operatives. This takes two forms: 1. The use of operatives to infiltrate an organization; and 2. The use of social engineering techniques to obtain information. In
groups dealing with issues that are directly contrary to government policy
the issue of infiltration often arises. In addition, where groups oppose large
corporations, infiltration by agents of the corporation may occur.
As well as operatives, the police and security services may put pressure on certain members of an organization to disclose the information they hold on other members. Running operatives is very expensive, and for the state, the information recovered from operatives can be obtained from less problematic forms of surveillance. If discovered, it can also be a public relations disaster for the government or corporation involved. For these reasons, the use of operatives to infiltrate organizations is not as widespread as many believe. However, infiltration is still very likely from other organizations who are motivated to discover and monitor the work of campaign groups. This
may be for political or economic motivations. There are also many informal
links between large corporations and police or security services, and the
trading of information about groups and activists is part of this relationship.
It is not possible to guard against the infiltration of an organization without damaging the viability or effectiveness of the organization. Worrying too much about infiltration within the organization can breed mistrust and bad working relationships within an organization. Rather like other forms of surveillance, the professional infiltration of operatives into an organization is difficult to guard against. Another more likely scenario, especially when dealing with third-party collections agencies or banks seeking debt payment, as well as the media or corporate public relations, is social engineering, also known as "pretexting." This involves the inquiring agent phoning or physically talking to the subject in a way as to make him believe they are someone else, or someone with an innocuous interest in the subject.
The inquirer's real, clandestine interest is to obtain some specific information that they believe the subject possesses. This form of information gathering is most often used, on a regular basis, by financial operatives pursuing delinquent debts. In order to avoid disclosing sensitive information to undesirable third parties, precautions may be taken. One should not disclose sensitive information over the telephone or in person to unverified third parties. Social engineering may be identified by asking a series of questions to see if the inquirer is aware of facts or future plans that they should not be aware of. In case the inquirer claims to represent a familiar financial institution or other "trusted" organization, one may ask for a number to call back, which may then be verified, either through a phone directory or organization web site. Journalists for well known media organization can be verified by phoning the editor of that organization, but freelance or independent journalists should be treated with care they could be working for anyone. In case one is member of certain organizations, such as activist groups, a balance between privacy and accessibility is often necessary, especially when running a public campaign. This often requires a security policy for dealing with media and other inquiries. Personal counter-surveillance
Counter-surveillance is reliant on good information security planning. Protecting information is the first stage of counter-surveillance. But counter surveillance must also be seen as a balancing of opposing objectives. If you are very good at restricting all information, that state
or corporations will have problems monitoring you. However, you are also likely
to become more isolated and secretive in the process. Therefore, like information security, counter surveillance requires an effort to protect those activities or information that are sensitive, while giving less emphasis to those activities that can be open to all. Information security is primarily based on protecting equipment with security procedures and barriers. Personal counter-surveillance is based on much the same process, but instead you provide security and barriers around your own personal habits. As humans we are creatures of habit. If we exhibit very predictable habits, this makes monitoring of our activities easier. But if on certain occasions we break our habits, it can also give away the fact that we are doing something at that time which is not part of our everyday work. The best way to begin thinking about avoiding surveillance is to think about breaking the regular patterns in your life. This masks regular activity, so making it harder to practice routine surveillance. But it also masks the times when you may undertake activities out
of the ordinary. Breaking regular patterns does not mean going to bed at different
times, or working different hours everyday. Instead it requires that any activities
you wish to avoid being the subject of surveillance are integrated into the
other events in your life but not to the extent that they become predictable.
If you change the route you take to work or to shop on a random basis, you make it more difficult to monitor your movements. If you build irregular appointments into activities that might involve surveillance, it creates a background "noise" in the pattern of your activities that masks any change in your habits. Securing the information on your computer will help your overall security. If you have a portable computer you are presented with a whole new problem because you move that system outside of your ordinary systems of security and access barriers. Therefore special care should be taken with portable computers: The system should be secured with a BIOS password to prevent booting; Use encryption of the hard disk, where possible, to prevent access to the contents of the hard disk if it is removed from the machine; Ensure that your portable computer has different passwords than those used on your static equipment. Securing
your information is fairly easy. But the main issue you will have to deal
with when considering personal surveillance is how to carry out meetings,
and networking with people, when you need to discuss sensitive issues.
Primarily, when dealing with sensitive information, avoid generating any kind of documentation or opportunities for surveillance. Think about implementing the following as part of your work: Travel If you are traveling to a sensitive meeting take a different route going there and coming back, and if possible do not use the same bus or station when going to or leaving the location you are traveling to. This lessens the likelihood that your destination will be identified. If traveling on sensitive business, try to use public transport. Using you own private cars will provide a traceable identity. To avoid the CCTV systems in public places move with the crowd; don't rush, don't cut corners, and don't look around for CCTV cameras. If you can build in other events/appointments as part of your journey, that will help provide an alternate motive for traveling to that area of a town or city. Facial recognition systems work primarily on the configuration of facial features. To work they need to get a good view of the face. Looking at a slight angle towards the ground, and wearing a hat with a brim, helps fool the system. If you travel using public transport, roaming tickets are preferable to tickets for a specific journey they give you more flexibility over the route, and they are more difficult to associate a route traveled with a particular ticket purchase. If you have the time available and you can obtain a roaming ticket, build in some extra time to your journey and change trains to make it hard to piece together your journey from CCTV and surveillance sources.
If traveling in a town, avoid moving through the major shopping areas, or "controlled environments" such as shopping centers. These have the highest level of CCTV coverage. Always assume that public transport vehicles have CCTV installed traveling during peak hours will help mask your presence. To make following you in person or via CCTV more difficult do not wear distinctive clothes or carry distinctive objects blend in. Darkness aids anonymity, but is not a foolproof solution to the latest CCTV cameras that can see in the dark. Mobile phones If in doubt, turn it off. Better yet, remove the battery or leave the phone in a place far enough away or contained so that if its microphone is remotely activated, it won't be able to pick up your conversation. If traveling to a sensitive location, in urban areas do not use your phone within two or three miles of the location, or in rural areas do not use it within ten or fifteen miles of the location. This will prevent the creation of a trail that associates you with that location on that day. If the location you are going to is nowhere near a route you regularly travel, turn off your phone before you start your journey there.
However, do not always go to places far from your home. A truly random sequence will include clustering. If you are always going locations far from your home, they can be able to back track you to your home or office based on the locations you are avoiding. If
you desperately need to mask your location, let someone else carry your phone
around for the day but this is only realistic if you take all precautions
to prevent generating other document trails while you are moving around.
Payments If you are traveling to a sensitive location, don't pay by credit/debit card or take money from a cash machine. If you need to spend cash when traveling to/working around a sensitive location, do not spend the notes taken directly from the cash machine (their sequential numbers may be logged). Keep a supply of notes received as change elsewhere and use those. If you need to buy something when traveling to/working around a sensitive location, do not give any loyalty cards or personalized money-off tokens as part of your purchases they are traceable. Communications If you need to make a sensitive phone call that must not be directly associated with you, do so from a public phone box. But beware, if you are associated with the person at the other end of the call, and the content of their calls (rather than just the data) is being monitored, your location at that date and time will be discovered. If
using public phone boxes, try to use them randomly across an area rather than
the ones that are closest to you. Also, try to avoid phone boxes on direct
transport routes to your home or place of work.
If you wish to send something sensitive through the post, wear gloves to prevent creating fingerprints when producing/packing the item, do not lick the envelope or stamps to prevent creating a DNA sample, and post it in a different location to where you normally post your letters (the further the better) using stamps bought on a different day. If you print something, use a printer that can not be traced back to you. With printer steganography it may be possible to find out when, and where a document was printed. If you need to send a sensitive fax, use a copy shop/bureau that has a self-service desk. If you desperately need to keep in communication, buy a pay-as-you-go mobile phone and only use it f |
