Title
Security analysis of a full-body scanner
Abstract
Advanced imaging technologies are a new class of people screening systems used at airports and other sensitive environments to detect metallic as well as nonmetallic contraband. We present the first independent security evaluation of such a system, the Rapiscan Secure 1000 full-body scanner, which was widely deployed at airport checkpoints in the U.S. from 2009 until 2013. We find that the system provides weak protection against adaptive adversaries: It is possible to conceal knives, guns, and explosives from detection by exploiting properties of the device's backscatter X-ray technology. We also investigate cyberphysical threats and propose novel attacks that use malicious software and hardware to compromise the the effectiveness, safety, and privacy of the device. Over-all, our findings paint a mixed picture of the Secure 1000 that carries lessons for the design, evaluation, and operation of advanced imaging technologies, for the ongoing public debate concerning their use, and for cyberphysical security more broadly.
Year
Venue
Field
2014
USENIX Security
Computer science,Computer security,Security analysis,Scanner,Compromise,Malware,Public debate
DocType
Citations 
PageRank 
Conference
3
0.47
References 
Authors
2
9
Name
Order
Citations
PageRank
Keaton Mowery11185.85
Eric Wustrow256437.93
Tom Wypych330.47
Corey Singleton430.47
Chris Comfort530.47
Eric Rescorla640545.43
J. Alex Halderman72301149.67
Hovav Shacham87653415.38
Stephen Checkoway9110065.10