Security theater

security theatre
2026-10-26 add · 651 words

A term for highly visible security measures carried out to produce a feeling of being protected, even though they do little to raise actual safety. It spread after the cryptographer Bruce Schneier used it in his 2003 book Beyond Fear. The crux is a structure in which the value of a measure is judged not by how much it reduces the threat but by how many people it reassures. The problem tends to arise in areas like airport screening, where cost and effort are large, visibility is high, and yet the effect in actually stopping attacks is hard to verify.

Spread of the term

The word came into general circulation after the terrorist attacks of September 11, 2001. It took hold as a critical name for the new security measures introduced one after another after the attacks, especially the screening regime at airports. Schneier's own concern is that the authorities implementing the measures come under a need to "look as if they are doing something effective", so that measures get chosen for motives unrelated to whether they work.

What makes evaluation hard is that failures of this kind of measure are difficult to count. When no attack happens, there is no way to tell whether that is the result of the measure or whether no attack was coming in the first place. As a result, "no incident since introduction" is readily treated as evidence of effectiveness, and the decision to stop becomes extremely hard to make.

Substance of the criticism

The central criticism is directed less at the harm of an ineffective measure in itself than at the resources it takes away. In his 2009 essay "Beyond Security Theater", Schneier argued that such theatrics consume resources that could have been used elsewhere. Since personnel, budget and time are finite, whatever is allocated to highly visible measures reduces the share left for activities that promise results but attract little attention, such as intelligence gathering and investigation.

In addition, while the burden a measure places on users is certain to occur, evasion by attackers is often relatively easy. If the targets and procedures of screening are public, a way of getting through outside them can also be designed. Regarding airport body scanners, too, Schneier has repeatedly made criticisms to the effect that they "won't catch anybody".

When "theater" is justified

Although Schneier proposed the term, he does not take the position that theater has no value at all. Around 2008 he offered the reservation that when people's anxiety has swollen beyond the actual risk, that gap in perception can itself become a problem to be solved. Where restoring a sense of safety is meaningful in itself, a measure that works on perception is, by this reasoning, effective for its purpose.

Moreover, even a measure that is only for show retains some effect in deterring attackers who are not thorough, or those unwilling to take even a small risk. The practical question is therefore not a binary choice between theater and effectiveness, but one of allocation and accountability: how much of the resources it is reasonable to devote to the side of perception, and whether that can be explained without being confused with measures that actually work.

To verify

The exact first wording and location in Beyond Fear. Several secondary sources say that Schneier "coined" the term, but this has not been confirmed in the primary source, including whether there were earlier uses
Which writing or statement of Schneier's the 2008 "new view" reports are based on. What was consulted was headline-level information from news articles collected on his own site, and the argument of the original text has not been confirmed
"Beyond Security Theater" is said to have appeared in New Internationalist issue 427 (November 2009) and is also included in his newsletter CRYPTO-GRAM of November 15, 2009, but the full text has not been consulted

References

Mentioned in

none

Similar