The Devil in the Data Leadership & Management Hong Kong's Cave of Wonders

Home , Hong Kong Police Force, Samy Kamkar

Issue 3, 2013 HK$40

Cover Story The Devil in the Data Leadership & Management Hong Kong's Cave of Wonders

Legal Speak New Competition Ordinance Are You Prepared? Printed by R&R Publishing Ltd Suite 705, 7/F, Cheong K. Building, 84-86 Des Voeux Rd, Central, Hong Kong

Publisher Richard Silkstone, R&R Publishing Ltd Issue 3, 2013 Contributors Trefor Moss Jill Wong, Howse Williams Bowers

Staff Writer Colin Robson Publication Manager Ian Harling T: (+852) 2126 7815 E: [email protected] Contents Advertising Sales – Print & Web Colin Robson T: (+852) 2126 7812 E: [email protected] Regional Advertising Representative EBconcepts Cover Story Edo Bersma T: (+852) 9641 1936 4 THE DEVIL IN THE DATA – We look at the E: [email protected] techniques employed by governments to collect Circulation Ian Harling personal data and what they do with it. Has Edward T: (+852) 2126 7815 E: [email protected] Snowden done us a favour by exposing what Web Manager & Design governments are up to? Ian Harling Magazine Design Jacky Ngan LEADERSHIP AND www.Security-Asia.net 10 MANAGEMENT Supported by: The Hong Kong Security Association HONG KONG's CAVE of WONDERS – Malca- Amit are leaders at transporting and storing valuable goods from diamonds to works of art. We talk to General Manager Ido Tomasis to see how they do it. Circulation of Security Asia Security Asia is delivered directly to the following associations and decision makers, throughout the Asia Pacific region, who are responsible for the purchasing of security related services products surveillance and services: 14 GERMAN CCTV COMPANY HITS Members of HKSA Government security bureaus JACKPOT in MACAU"S CASINOS – German Security consultants Law and accountancy firms company Dallmeier seems to have taken the lead Financial institutions Insurance companies in providing the most extensive IP-based video Facilities management providers Security hardware and software manufacturers systems to the casino's of Macau. Also available at: Security exhibitions Conferences and seminars Quality book stores CYBER SECURITY 18 BASIC PC PROTECTION FOR TECHNOPHOBES – Top 10 security tips for your computer from the Information

Published by R&R Publishing Services and Technology Department of the Suite 705, 7th Floor K. Cheong Building Massachusetts Institute of Technology. 84-86 Des Voeux Road Central Hong Kong, SAR Tel: (+852) 2126 7815 [email protected] www.RRPublishing.com.hk 3 HKSA – Message from the HKSA Chairman

12 legal – New competition Oridnance Any opinions expressed in this publication are those of the author only and do not represent the opinion of the publisher, R&R Publishing. The publisher cannot be held responsible 16 looking Ahead – Top 10 security threats for 2014 for any errors or inaccuracies provided by contributors or advertisers. 20 in THE NEWS – Latest issues from around the Asia-Pacific region The publisher accepts no responsibility for any loss which may occur from such reliance. The views herein are not necessarily shared by 22 WORLD FOCUS – Latest issues from around the world the staff or publisher. The content of this publication is the property 24 tHE BACK PAGE – A satirical look at security of the publisher and no part of this magazine may be produced without the written permission from the publisher. ©2013

ISSN 2306-8701 THE HONG KONG SECURITY ASSOCIATION

The Hong Kong Security Association and our members are dedicated to provide and maintain the best service and product standards.

The Hong Kong Security Association was founded in 1984 and is the only Association of companies holding security licenses issued by the Security and Guarding Services Industry Authority.

Our member companies are principally engaged in providing many different apects of security services: Guarding services-commercial and residential. Cash transport services by armoured vehicle. Installation and maintenance of alarm systems and equipment. Remote monitoring of alarms, fire alarm and CCTV systems. Supply of security systems and products. Investigation and security consultancy services.

The Association works with the Security & Guarding Services Industry Authority for the regulation of the industry.

The Association works closely with the Security Companies Inspection Unit of the Crime Prevention Bureau of the Hong Kong Police Force.

The Association, being a member of the Security Services Training Board of the Vocational Training Council contributes towards quality framework and training standards.

The Association forms working groups to tackle assignments and special projects.

The Association holds social functions to provide platforms for idea sharing and opportunity for members to meet.

HK SECURITY We are here to support you and the Industry. ASSOCIATION Become a member of the Hong Kong Security Association today. T: 2960 1142 F: 2960 4262 E: [email protected] SecurityAsia W: www.thehksa.com Hong Kong security Association HONG KONG SECURITY ASSOCIATION Raising the standards within the security Industry Message froM the hKsa ChairMan By Douglas renwick

his year has seen a number of exciting activities in the T Hong Kong security industry – including the launch of a new Security magazine “Security Asia”, The Hong Kong Security Association’s subtle re-branding and the launch of the Associations new website. The membership numbers of the Hong Kong Security Association continue to grow, which is highly encouraging. Our collective voice is used to raise issues with the Security Authority, Police, Labour Department and other Government bodies. These assist with the Associations aim to continually looking at opportunities to improve and raise standards within the Security Industry and tackle head-on the issues that affect our industry now and in the future. Kong in general and more especially in So as an industry we need to act now to The Governments Policy Study the Security industry. ensure our talented manpower can be on Standard Working Hours has been To combat the increases, service retained. published and the Standard Working charges and staff salaries must follow On a lighter note, The Hong Kong Hours Committee has convened. The suit. Many companies already operate Security Association will be celebrating its Association is working diligently to on a very low profit margin, therefore 30th (Pearl) Anniversary in 2014 so keep ensure our industry related issues are increasing salaries and charge rates must a look out for the association’s activities. heard and considered. be considered as a viable option. While There will be a Anniversary publication Manpower and labour issues looking at options to attract people to to celebrate the Associations activities continue to blight the security industry – work in the security industry… including over the last 30 years - I encourage under the current importation of labour pay and conditions, working hours and you to use the opportunity to tell your scheme there is not a viable option to garnering additional respect for the anecdotes, share your experience with swell the ranks of the security industry. work conducted. the Association and to also advertise in The security companies, end users, The Hong Kong Government the publication to ensure you promote customers and Government must sit up infrastructure projects, expansion of your companies products and services and take-stock. The short term affect is Macau casinos and the overall general to your target market. salaries will continue to rise as the lack increase in construction projects are Merry Christmas & Happy New Year of manpower continues to affect Hong forecast to continue well beyond 2014. 2014

SecurityAsia 3 Cover Story The Devil in the Data

4 SecurityAsia Modern communication systems are not only convenient for everyday users. The Devil in They also enable governments and corporations to trawl through the Big Data of emails, phone calls and internet logs to understand more – perhaps more than they should – the Data about the activity of their citizens and customers. he information age, whistleblower Edward Snowden have as we are all now added new levels of detail to what we fully aware, is also the already knew, or at least assumed, information-gathering about government monitoring T age. practices. The revelations have There has never been so much centred on the NSA and to a lesser information about what people are extent its British equivalent, GCHQ. doing, or more interest in harvesting However, there is no doubt that other and recording that information. governments with highly developed Communication technologies have security apparatuses are employing become all-pervasive, and every similar tactics of blanket monitoring interaction, whether by phone, combined selectively with more mobile network or the internet, is an intensive surveillance. opportunity for those with the right technology and enough incentive Layers of observation to learn something, however small, When it comes to monitoring emails about the behaviour of groups or and similar internet traffic, the NSA individuals. uses sophisticated computer programs The motivation for doing so that act as a filter, automatically varies. Governments view us as scanning billions of emails and flagging citizens or taxpayers or voters – but up those which contain suspicious also as potential criminals or threats content. In particular, the NSA has to national security. Corporations been operating a program called see us as customers, or potential Xkeyscore, which unselectively records customers. Thus businesses are everything from Google searches to more interested in understanding Facebook posts. In much the same patterns of behaviour and, from way, it uses complex algorithms to them, interpreting our likely future scan billions of phone calls for key purchasing choices. Governments, on word combinations. Governments are the other hand, are more concerned particularly interests in the metadata with sifting through the infinite attached to these communications haystack of communications in search – not the contents themselves, so of rare needles of value – intelligence much as related information such uncovering a terrorist plot, for example, as the identity of the callers, and call or evidence of illegal activity. duration. Such operations are termed Revelations about the mass “massive intercepts”, and target entire surveillance activities of the US populations. National Security Agency (NSA) by The efficacy, never mind the

SecurityAsia 5 Cover Story

legality, of wholesale data sweeps has user data about specific individuals global market for surveillance systems inevitably been called into question. from major tech players such as Apple, grew from zero to $5 billion annually, After a decade of massive intercepts, Facebook, Google and Microsoft. as governments around the world it appears that the US government Facebook, for example, reported grew increasingly interested in obtained information that helped it to that it has handed over the private private-sector solutions that would prevent a terrorist attack on just one data of around 19,000 individuals at allow them to monitor their citizens’ or two occasions. Moreover, in some the request of intelligence and law activities. That market remains strong cases US intelligence agencies were enforcement agencies. in spite of Snowden. But now, in the in possession of data which might Bruce Schneier, a commentator face of customer outrage over the have been used to trace terrorists, but on security and surveillance practices, sharing of personal data, companies they missed the vital clues because has termed this the “public/private also see a business opportunity in of failures in analysis – because surveillance partnership”. Tech firms investing in technologies which aim to they had too much information to on whose services we all rely on a daily defeat government snooping efforts. sort through, in other words. Even basis have access to their customers’ This raises the prospect of a private- so, the US government still appears personal data, which they undertake sector surveillance arms race, with to value this broad-brush tactic. In to keep private; but then they share ever-improving monitoring systems new legislation brought in response it with governments without their on one side and countermeasures on to public concern over mass data customers’ permission in the name the other. For example, one standard approach to protecting data communications is to encrypt emails (Secure- In the decade after 9/11, the global market for surveillance systems grew from zero to $5 billion annually, as governments around the world grew increasingly

collection, a new FISA Improvements interested in private-sector solutions that would allow Act – FISA being the pre-existing them to monitor their citizens’ activities. Foreign Intelligence Surveillance Act – banned “the collection of bulk communication records” except in certain circumstances, from which of national security. This alliance, Socket Layer encryption, or SSL, is the critics inferred that massive intercepts Schneier argues, “allows both the most common system). In the wake of would probably continue. government and corporations to the NSA scandal, major email service However, more targeted get away with things they couldn’t providers that didn’t already encrypt surveillance naturally requires smarter otherwise”, because both parties their users’ messages, such as Google technology, more manpower – and get access to huge amounts of data, and Yahoo, announced that they would quite possibly cooperation from third and neither side is motivated to back introduce SSL encryption to their parties. legislation to restrict its collection. email offerings. This certainly makes This is where governments have However, the backlash against NSA it a lot more difficult for governments turned to the private sector. It’s surveillance has resulted in a surprising or other parties to monitor email now clear that the US and other bifurcation of the surveillance market, communications. In November, Yahoo governments monitor the activities with some companies working to confirmed that it was moving ahead of individuals with the assistance support government surveillance with its encryption strategy, effectively – sometimes offered willingly, and others now working to obstruct confirming that it valued the trust of sometimes reluctantly – of big it. Some companies now realize its users over the trust of government technology companies. The NSA’s that there is a reputational “cost intelligence agencies. Meanwhile, notorious PRISM program, which to co-operating” with government Google underlined the growing sense of Snowden uncovered, is one such surveillance programs, according to industry opposition to the government effort: through PRISM, the NSA has Schneier. when Eric Grosse, the company’s vice been obtaining supposedly privileged In the decade after 9/11, the president for security engineering,

6 SecurityAsia confirmed Google’s own encryption providers of secure email services the question of the legality of the interested in private-sector solutions that would allow plans in September, characterising have of course seen their business government’s insistence that Lavabit them to monitor their citizens’ activities. the emerging technology struggle as models challenged by government hand over its security keys continues an “arms race” in which “government court orders demanding that they to be addressed in the courts, with agencies [are] among the most skilled hand over security keys in order to potentially far-reaching implications players in the game”. facilitate surveillance activities. One for future surveillance activities. However, there are off-the-shelf such provider, Lavabit, shuttered The problem with encrypted products which can crack SSL and other its service in the summer when the communications, though, is that they forms of encryption. US firm Blue Coat US government demanded access arouse the suspicion of governments Systems is the market leader of this specifically so that it could monitor the and law enforcement agencies, whose type of solution; its ProxySG system communications of Edward Snowden, natural inclination is to wonder what can decrypt any SSL communications a Lavabit customer. Another secure the users of encrypted systems have and relay the decoded messages to a email provider Slient Circle then to hide. It is alleged that governments third party, which would most likely followed suit. routinely intercept and store encrypted be a government or law enforcement However, Lavabit founder Ladar communications, even when they are agency. The company did not respond Levison is now working on a new unable to crack them, with a view to requests for comment, but in May initiative with Silent Circle, called Dark to revisiting and decoding them if it was widely reported that the Syrian Mail, which will offer an improved necessary at a later date. government had obtained Blue Coat version of the companies’ secure So encryption is not bullet proof, Systems’ technology and was using it protocols as open-source code, and neither, it seems, are other, to monitor internet traffic. And if Syria encouraging encryption to be adopted simpler means of avoiding government has managed to acquire this type of more widely. While it will still be surveillance. Most cell phone users capability, it seems likely that many possible to crack encrypted messages, are aware that their phone, when others have done so, too. Levison argues that mass surveillance switched on, can be tracked because This is leading some messaging will become extremely difficult if most the device broadcasts its location providers to go even further. Specialist emails are sent securely. Meanwhile, within the network. But it has recently

SecurityAsia 7 Cover Story

emerged that governments have individual or organisation responsible example, it’s easy to assume that this developed ways of tracking mobile for deploying it. information has no value, and would devices even when they are switched The simple conclusion, as not be of interest to any third parties. off. The method remains classified, articulated by FBI intelligence analyst- However, this is far from the but security analysts assume that turned-commentator Tim Clemente, case. Tracking cookies have been the process involves the uploading is that “no digital communication is commonly deployed for years now of malware to a phone which a law secure”. Or, as Ladar Levison concluded by internet companies interested enforcement agency wishes to track; after pulling the plug on Lavabit: “I’m in learning more about user habits: this malware then ensures that the taking a break from email. If you knew these are programmes uploaded phone’s broadcast functions remain what I know about email, you might to your computer, often without active, even when it appears to be not use it either.” your knowledge, which send back switched off. information to their originators about The legality of hacking into phones Corporate surveillance your usage and browsing patterns. This in this way is murky at best. In the If governments need to access our is why banner ads for flights to Tokyo, same way, we tend to regard computer communications through secretive for example, will suddenly appear on hacking as a criminal activity – and yet and legally questionable means, websites you visit, if you’ve recently there is a thriving, legal market in the businesses have a far simpler been searching online for information development and sale of ‘exploits’, which mechanism for obtaining our data. We about Tokyo. Indeed, some sites will are essentially off-the-shelf hacking give it to them, freely. install several dozen cookies onto your solutions. French cyber-developer It stands to reason that the computer to track various different Vupen is one example of a company providers of services such as email, types of behaviour. which markets offensive exploits, though internet and telephony should be privy But this description does not do only, it stresses, to “trusted countries to their customers’ communications, justice to the level of analysis which and government agencies”. These as well as personal data and billing some businesses now apply to the offensive exploits could have a number information. And while we generate monitoring of browsing habits. By of purposes, but in many cases they will huge volumes of data – Big Data, closely monitoring user activity, data be used to monitor supposedly secure as analysis companies describe it – metrics companies are able to provide systems, and relay sensitive data to the simply by spending time online, for clients with a detailed picture of the

8 SecurityAsia digital marketplace. However, even This is enough granularity for most be the new battleground for internet here there are different levels of advertisers: ads placed in this way are privacy, as campaigners argue for bans analysis. As John Jordan, a professor at still much more targeted and effective on the collection of any data beyond Penn State University who specialises than an advertiser buying commercial non-specific non-PII. This is when Big in the study of business information airtime on TV, for example. It also Data can become too big to handle, as systems, puts it, “just because enables both the data collection Jordan warns, as companies drown in something can be measured doesn’t company and the advertiser to claim “numerical tsunamis” and lose sight of mean it should be measured”. Thus that they are not invading anybody’s the “basics of sound analytical practice”. corporations, just like governments, privacy. Most monitoring companies Many internet users who do not are discovering that the collection of like eXelate also have opt-out want to be tracked at all subscribe too much information can damage functions, which will block targeted to Virtual Private Network (VPN) their public image. ads on a particular computer. services, which use special internet The most important distinction is Acxiom, another data-technology protocols which make it appear as whether the collected data is personally firm, has taken audience reassurance a if they are accessing the web from a identifiable information (PII). In step further, launching AboutTheData. different city or country. However, one sense, this is the big difference com, a site where concerned this has inevitably put VPNs in the between government monitoring individuals can learn more about data regulatory spotlight. Some VPNs and business monitoring: the data is collection in general, and also discover have hit back against government not much use to governments unless what kind of information Acxiom has attempts to access their users’ data by they can link the activity to specific collected about them specifically, and simply not storing any. However, the EU, for example, introduced a Data Retention Directive several years ago which forces companies such as email While many end users do not bother to opt out of non-PII data-gathering schemes, or visit sites that can provide details of the way they are being tracked, most people are uncomfortable with the idea individuals; but businesses do not of PII being collected and sold onto third parties. necessarily need PII, since they are interested in general usage patterns, or in marketing products to the right type of customer, though not necessarily to how that data is being used. service providers to retain all web particular individuals. While many end users do not and email logs for a certain period of US-based monitoring firm bother to opt out of non-PII data- time, for law-enforcement purposes. eXelate is one of a growing number gathering schemes, or visit sites VPNs continue to argue that they are of specialist online data collectors that can provide details of the way not covered by this type of legislation, which gather non-PII. The company’s they are being tracked, most people but it is clear that governments intend approach is to partner with a range of are uncomfortable with the idea of to challenge the ability of VPNs to popular websites; these websites then PII being collected and sold onto undermine their surveillance efforts. upload a tracking cookie to computers third parties. However, many data- Both governments and from which they were accessed. Via tracking companies are pushing the corporations are therefore still the cookies, eXelate gathers data envelope of what qualifies as non- coming to terms with the information- about internet usage on a particular PII. Though omitting individual users’ gathering age of Big Data. The next computer, but it does not know the names, they may compile profiles of step will to gather more selectively – identity of the person or persons using individuals that include many other to get the Right Data – and then use that computer. Its clients are then able personal details, such as sex, age it more smartly and more equitably to target advertising campaigns at the and marital status, or even record than they are doing today. Otherwise, right end users, even though they don’t user activity, such as keystrokes. This the citizen and customer backlash will know those end users’ identities. sort of monitoring practice is likely to only gather pace.

SecurityAsia 9 Leadership & Management Hong Kong’s Cave of Wonders Malca-Amit began business in 1963 providing export papers for valuables from a small office in Tel Aviv, Israel. Fifty years on, the company is now a global concern headquartered in Hong Kong. It specialises in tailor-made solutions to the secure transportation and storage of gemstones, precious metals and fine arts. Security Asia visited Malca-Amit’s new facility in Hong Kong for a first-hand look at how they keep billions of dollars’ worth of gold and fine arts hidden from prying eyes.

onstruction began on Asia’s Essentially, the vault comprises discrete common vault, a diamond vault, two largest private secure storage units within the original units. This smaller vaults for the use of major C facility in February 2012, state-of–the-art facility is designed, financial institutions and a vault at significant but undisclosed cost. constructed and managed by Malca- specifically designed for storing fine Spanning two ground floor units of a Amit and so discreet that it took arts and collectibles. The fine art Chek Lap Kok commercial building, the Security Asia staff a while to find the vault is a first for Hong Kong we are vault took five months to build using entrance, to the evident amusement told, as it combines full vault security 264 tonnes of reinforced steel and of observers in the control room. with climate control and FM 200 fire some 600 cubic metres of cement. In fact there are five vaults: a suppression. Each vault has a colour-

10 SecurityAsia coded floor for instant recognition by CCTV operatives in the control room. Security levels escalate as we approach the vault area, with dual and triple access control systems in place. Security manager Mr Erez Bergman explains that the facility aims to provide a high level of customer hospitality as well as the utmost security. What is immediately noticeable is the near- soundlessness of the interior compared to the noise and traffic outside. We are shown the viewing room where customers may inspect their valuables; it is comfortably appointed with a couple of white leather chairs and a simple table against the far wall supporting weighing scales and a pair of anglepoise desk lamps. Above the System Inventory. line representatives of the company table is a high-resolution CCTV camera Security Asia can confirm the they are required to be smart and which can be disabled at the request shotguns carried on the armoured courteous at all times. of the customer. trucks are not merely for show; we There is a general movement of Mr Ido Tomasis, General Manager visit the armoury, fitted out with physical gold from west to east and of Malca-Amit Secure Logistics Ltd., strengthened, absorbent walls and the company is utilising its existing adds that the company’s global network blast-proof light fittings. Erez is proud to network and investing heavily in constantly tracks every item in transit note that the company not only meets hardware to capitalise on this trend. and can swiftly make the necessary the Hong Kong Police Force’s stringent China’s gold imports for the first arrangements if, for example, an aircraft security and safety requirements, half of 2013 were over 706 tonnes, is diverted from its flight plan. Moreover, but often exceeds them. The guards up 54% from the same period the customers are given access to a secure undergo three weeks of training and previous year, according to the China web portal which updates them with need to pass the requisite police tests Gold Association. The number of live feeds from Malca-Amit’s global IT before taking on their roles. As first- wealthy individuals in the region has also grown considerably and Malca- Amit recently opened a 200 tonne silver vault in Singapore, adding to the firm’s five existing gold vaults in the Freeport district. A new facility – which will overtake Hong Kong to become the largest in Asia - is soon to open in Shanghai and the company plans further expansion in the region to cope with the rising demand for secure storage. Malca-Amit currently employs over 150 staff in Hong Kong and this number is expected to increase 30-40% by the end of the year. The company’s armoured vehicles will soon become a more familiar sight on the city’s streets and we can only speculate on what treasures they may transport.

SecurityAsia 11 Legal

HONG KONG'S NEW COMPETITION ORDINANCE : ARE YOU PREPARED?

healthy and efficient economy suppliers and distributors who operate concerted practice or decision is the cornerstone of an at different levels in a production or where the combined turnover of A international financial centre distribution chain (so-called "vertical the undertakings involved is less or and it is somewhat curious (albeit agreements"). equal to HK$200 million. The Second some commentators have said that Most jurisdictions with competition Conduct Rule will not apply to any there was already healthy competition laws have similar provisions; what is undertaking with a turnover of less in Hong Kong) that, until recently, Hong slightly unusual about Hong Kong's than or equal to HK$40 million. Kong did not have a competition law. regime is that it divides this into two There are also a number of other That changed in June 2012 when the categories: serious anti-competitive exemptions and exclusions, see the Competition Ordinance was enacted. conduct (which is specified as price summary table on facing page. If you are an entity, and this includes fixing, bid rigging, output restriction an individual, engaging in economic and market sharing) and non-serious Competition Commission activity, you will be considered an anti-competitive conduct. For non- and Competition Tribunal "undertaking" and potentially subject serious anti-competitive conduct, Two bodies have been established: to the new competition regime, so there is a lighter touch to the regulatory the Competition Commission and the you need to understand what this new regime, which we mention below. Competition Tribunal. The Chairperson regime may mean for you. The Second Conduct Rule prohibits of the Commission is Ms Anna Wu the abuse of substantial market (who is currently a non-official First Conduct Rule and power that has the object or effect member of the Executive Council of Second Conduct Rule of preventing, restricting or distorting Hong Kong and Chairperson of the The Ordinance prohibits anti- competition. Equal Opportunities Commission competitive conduct pursuant to two There is a third rule which is and who previously held the position main rules : the First Conduct Rule and of limited application; this is the of Chairperson of the Hong Kong the Second Conduct Rule. The First merger control rule which prohibits Consumer Council) and there are 13 Conduct Rule is likely to be of most mergers and acquisitions, in the other members of the Commission interest to Hong Kong businesses telecommunication industry, that who are comprised of representatives as it prohibits any agreement, substantially lessens competition in from various industries. Every Judge of concerted practice or decision of Hong Kong. the Court of First Instance is a member an association of undertakings, the of the Competition Tribunal and the object or effect of which, is to prevent, Exemptions and current President of the Competition restrict or distort competition. The exclusions Tribunal is the Honourable Mr Justice main thrust of this rule is to prohibit To address the concerns of small and Godfrey Lam Wan-ho. competitors colluding with each other medium-sized enterprises, there are The Competition Commission has in an anti-competitive manner (such some entities wide powers of investigation and it agreements, etc. are sometimes who will be exempt from the will be able to settle cases without known as "horizontal agreements"). In First Conduct Rule and the Second bringing proceedings before the addition, it will also catch agreements, Conduct rule. The First Conduct Rule Competition Tribunal. However, it is etc. with counterparties such as will not apply to any agreement, the Competition Tribunal who has

12 SecurityAsia the power to impose the more severe Hong Kong, it is inevitable that there compliance programmes. The good penalties, including a fine of up to will be inquiries and investigations news is that you have time: although 10% of a business's annual turnover where professionals, such as forensic the law has been passed, it is not yet for 3 years (much debated during experts and seasoned investigators can in effect and not likely to be in effect the legislative process), restraining or assist companies who are concerned until early 2015. In 2014, we expect prohibition orders, orders requiring about anti-competitive conduct within the Competition Commission to be agreements to be modified or their organisations, with competitors busy recruiting key personnel, drafting terminated disqualification orders of or counterparties. guidelines and consulting with various up to 5 years against directors and so Security professionals should also industries and the public. Many of the on. look at their own internal practices: competition issues that will be faced As part of its broad investigation are any of them potentially anti- are not straightforward and will require and enforcement powers, the competitive? Are there, for example, careful analysis; whilst we expect the Competition Commission will be regular exchanges about prices or joint Competition Commission to issue able to search premises and seize bids for particular projects? Is your guidelines to assist businesses in Hong documents, require the production organisation likely to have "substantial Kong, nevertheless businesses should or documents and require persons market power"? A first step is to raise be pro-active and start appropriate to attend interviews. It can issue awareness within your company and preparations. infringement notices for alleged assess whether the law applies to serious anti-competitive conduct and you. If it does, or potentially it does, abuse of substantial market power, then you may want to review your JILL WONG, Partner, Howse Williams Bowers accept commitments (where a person current agreements and practices This article is only a general outline. It is not agrees to take action or refrain from for potential anti-competitive issues legal advice. You should seek professional taking action which is potentially anti- and assess if one of the exemptions advice before taking any action based on competitive) and enter into leniency or exclusions apply. Many companies its contents. agreements (where a person receives are also beginning to establish no or reduced penalties in exchange for co-operation). The Commission can accept complaints from anyone; it may however refuse to investigate if Type Applicable to First Applicable to Second it considers it reasonable not to do so, Conduct Rule Conduct Rule and in particular, where the complaint is trivial, vexatious or lacking in Block Exemption Yes No substance. Efficiency exclusion - Yes No For a case involving non-serious an agreement that improves anti-competitive conduct, the production, distribution, Commission is able to issue an entity technical or economic progress, with a warning notice, instead of and benefits consumers an infringement notice. If the entity ceases the alleged anti-competitive Public policy grounds Yes Yes conduct within the period specified in the notice, then no further action To avoid conflict with Yes Yes is taken. international obligations In addition, anyone who has suffered loss or damage from anti- For compliance with Yes Yes competitive conduct may bring follow- a legal requirement on action for civil damages. Provision of services of Yes Yes general economic interest by So, what does this mean an undertaking entrusted for you? to do so by the Hong Kong So what does this mean for security Government professionals? With a new regulator in

SecurityAsia 13 Surveillance German CCTV company hits the jackpot in Macau’s casinos acau, a one hour ferry architecture and street names. Today, man-made landfill. On a 1.8 mile ride from Hong Kong, the province is a Special Administrative stretch of artificially constructed land Mhas emerged as the most Zone of the People’s Republic of China. a skilfully planned gaming paradise popular gambling destination on Macau is also heavily influenced by its of unimaginable proportions took the planet – and is one of the most Asian identity, even though the city shape – the Cotai Strip. Elaborate, important sales markets for Dallmeier. skyline is dominated by its enormous imaginatively designed resort Not only has the German video casino and hotel resorts. complexes now make gamblers‘ pulses surveillance company designed and Unlike in China, gambling is not race and have helped the Cotai Strip to installed the most extensive IP-based forbidden in Macau, and has thus surpass the magnetic powers of even video systems in the world here, it has become one of the largest sources its model Las Vegas. also operated its own company branch of revenue for the province. The The success story for Dallmeier on the island for several years. foundation was laid for the industry - active in the casino industry since Until 1999, Macau was a by one gargantuan construction 1997 - began in 2003, when with an Portuguese colony, and its European project: the two offshore islands of international tender the first foreign heritage is still clearly on display in its Coloane and Taipa were joined by casino in Macau, the Las Vegas Sands,

Dallmeier’s Craig Graham, General Manager, Asia Region and Konrad Hechtbauer, Director, Project & Applications

14 SecurityAsia was looking for a surveillance system. for the long term. Konrad Hechtbauer, Director Project & Craig Graham, General Applications at Dallmeier, looks back: Manager Asia Region at “Dallmeier established itself in Macau Dallmeier International, about 10 years ago, with the first explains: “In our office digital video solution and about 1200 we have eight staff, seven channels.” of them engineers, and But this first order from the Sands we do repair work within was only the beginning: just a year the office and also at after it opened, the casino doubled clients’ sites. We also have its capacity – and of course this also a warehouse and store meant that the surveillance system room here servicing our had to be expanded correspondingly. present new innovations.” major clients. In total we service over As the boom in Macau continued In order to satisfy the many 20,000 channels across Macau and unabated, so the Sands Group grew specifications by its customers in also in the region.” too, and over time it acquired several Macau, Dallmeier has founded its own In a purpose-built showroom, the more properties on the main island of subsidiary: Dallmeier International, latest developments can be tested Macau as well as on the Cotai Strip. a joint venture between Dallmeier in and demonstrated to customers. One By this time, the Sands, the Venetian Germany and its Australian business of the most radical new innovations and the surrounding hotel complexes partner C.R. Kennedy. is the patented Panomera® camera had combined to form a single Stephen Beard, Managing Director technology, which offers hitherto interconnected network. A staggering Dallmeier International, says: “I inconceivable resolution and image 15,000 cameras here are controlled remember the first discussions quality thanks to a completely new from a main control centre! Many more projects, such as the City of Dreams with approximately 5,000 cameras, have followed over the years. And the end of the By this time, the Sands, the Venetian and the development is nowhere in sight yet: surrounding hotel complexes had combined to form a single not only are new casino and hotel interconnected network. A staggering 15,000 cameras here resorts are being built; the existing casinos are constantly expanding their are controlled from a main control centre! video systems. Konrad Hechtbauer explains: “The systems are becoming bigger and bigger, and more and more complex. about our joint venture which really lens and sensor concept – in real time They now also incorporate a multitude stemmed from the fact that C.R. and at up to 30fps. of interface connections, such as card Kennedy, our company in Australia, From the office in Macau, all casinos readers, slot machines or POS systems. was instrumental in the first digital can be reached in 20 minutes or less, so The data from the peripheral systems is system ever in a casino surveillance professional Dallmeier personnel can linked to the video images. The user is system. The job went so well that be on site almost immediately to assist alerted to sensitive areas automatically Dallmeier and C.R. Kennedy decided to with emergencies, provide support by complex mathematical calculations, join a joint venture in Hong Kong and and for all ongoing expansions. so the system functions proactively. later into Macau to provide Dallmeier Craig Graham recalls the beginning Unusual situations at the gaming systems to the new Western casinos of the office: “I remember when we tables are detected and reported by that were going up rapidly.” first opened the office Stephen said means of intelligent video analysis. Our From consulting and planning for that the opposition claimed we would many years of experience in Macau the system to commissioning and never get any business within Macau. are incorporated systematically in our including after sales service, Dallmeier Here we are ten years later with one of development programme, and as a attaches great importance to the largest presences in Macau’s CCTV result Dallmeier is constantly able to supporting its customers as a partner industry.

SecurityAsia 15 Looking Ahead

ISF’s top security threats for 2014

The Information Security Forum is the world's leading authority on information risk management. Here Steve Durbin, global vice president of the ISF, identifies the top security threats for 2014.

1. BYOD trends in the workplace organisations cannot afford to delay As the trend of employees bringing getting to grips with their information mobile devices into the workplace security implications. In moving grows, businesses of all sizes continue their sensitive data to the cloud, all to see information security risks being organisations must know whether the exploited. These risks stem from both information they are holding about internal and external threats, including an individual is personally identifiable mismanagement of the device itself, information (PII) and therefore needs all too often we’re seeing businesses external manipulation of software adequate protection. being left behind, sometimes in the vulnerabilities and the deployment Most governments have already wake of reputational and financial of poorly tested, unreliable business created, or are in the process of damage. Organisations need to ensure applications. developing, regulations that impose they are fully prepared and engaged If the Bring Your Own Device (BYOD) conditions on the protection and use to deal with these ever-emerging risks are too high for your organisation of PII, with penalties for businesses challenges. today, stay abreast of developments. If that fail to adequately protect it. As 4. Privacy and regulation the risks are acceptable, ensure your a result, organisations need to treat Most governments have already BYOD program is in place and well privacy as both a compliance and created, or are in the process of structured. Keep in mind that a poorly business risk issue, in order to reduce creating, regulations that impose implemented personal device strategy regulatory sanctions and commercial conditions on the safeguard and use in the workplace could face accidental impacts. of Personally Identifiable Information disclosures due to loss of boundary 3. Reputational damage (PII), with penalties for organisations between work and personal data and Attackers have become more that fail to sufficiently protect it. As more business information being held organised, attacks have become more a result, organisations need to treat in unprotected manner on consumer sophisticated, and all threats are more privacy as both a compliance and devices. dangerous, and pose more risks, to business risk issue to reduce regulatory 2. Data privacy in the cloud an organisations reputation. With the sanctions and commercial impacts, While the cost and efficiency benefits speed and complexity of the threat such as reputational damage and loss of cloud computing services are clear, landscape changing on a daily basis, of customers due to privacy breaches.

16 SecurityAsia (hacktivism), the increase in cost of compliance to deal with the uptick in regulatory requirements, coupled with the relentless advances in technology against a backdrop of under-investment in security departments, can all combine to cause the perfect threat. Organisations that identify what the business relies on most will be well placed to quantify the business case to invest in resilience, therefore minimising the impact of the unforeseen. 6. The internet of things Organisations’ dependence on the internet and technology has continued to grow over the years. The rise of objects that connect themselves to the internet is releasing a surge of new opportunities for data gathering, predictive analytics and IT automation. As increased interest in setting security standards for the internet of things (IoT) escalates, it should be up to the companies themselves to continue to build security through communication and interoperability. The security threats of the IoT are broad and potentially devastating and organisations must ensure that Most governments have already created, or are in the technology for both consumers and companies adheres to high standards process of developing, regulations that impose conditions of safety and security. on the protection and use of PII. You cannot avoid every serious incident, and while many businesses are good at incident management, few have a mature, structured approach for analysing what went wrong. As a Different countries’ regulations 5. Cybercrime result, they are incurring unnecessary impose different requirements on Cyberspace is an increasingly attractive costs and accepting inappropriate whether PII can be transferred across hunting ground for criminals, activists risks. borders. Some have no additional and terrorists motivated to make By adopting a realistic, broad- requirements; others have detailed money, get noticed, cause disruption based, collaborative approach to cyber requirements. In order to determine or even bring down corporations and security and resilience, government what cross-border transfers that will governments through online attacks. departments, regulators, senior occur with a particular cloud-based Organisations must be prepared business managers and information system, an organisation needs to work for the unpredictable, so they have the security professionals will be better with their cloud provider to determine resilience to withstand unforeseen, able to understand the true nature of where the information will be stored high impact events. Cybercrime, along cyber threats and respond quickly, and and processed. with the increase in online causes appropriately.

SecurityAsia 17 Cyber Security

The ISS Group was first established in 1901 as a Danish Security Company. Over the last centruy, ISS has developed into a leading provider of Facility Services employing over 500,000 people across more than 50 countries.

Locally, ISS Security has enjoyed a predominant position in the Basic PC protection market for over 25 years. Today, our 3,500 employees are specialized in providing total security solutions for our clients.

ISS Security is dedicated to understanding clientsí needs and for technophobes exceeding their expectations. Our Services: z Securtiy Guarding (Premium, Ex-Gurkha, Local and Armed) The Information Services and Technology Department (IST) of MIT offers these 10 safe computing tips: z Design, Installation and Maintenance of Security Systems z Central Station Alarm Monitoring z Close Escort Service, X-ray Screening C protection for technophobes is just as important as its technical Securely remove sensitive data files z Security Consultancy, Event Planning and Operation - the Information Services and security. from your hard drive, which is also z Mobile Patrol PTechnology Department (IST) 6. Use email and the internet safely. recommended when recycling or z Guard Dogs of the Massachusetts Institute of Ignore unsolicited emails, and be repurposing your computer. Use Technology (MIT) offers these 10 safe wary of attachments, links and forms the encryption tools built into your Tel: (852) 2729 2266 computing tips: in emails that come from people operating system to protect sensitive Fax: (852) 3188 0879 Website: www.asf.com.hk 1. Patch, Patch, PATCH! you don't know, or which seem files you need to retain. E-mail: [email protected] Set up your computer for automatic ‘phishy.’ Avoid untrustworthy (often 9. Use desktop firewalls. Address: 3/F United Overseas Plaza, 11 Lai Yip Road, software and operating system free) downloads from freeware or Macintosh and Windows computers Kwun Tong Kowloon, Hong Kong updates. An unpatched machine shareware sites. have basic desktop firewalls as part of is more likely to have software 7. Use secure connections. their operating systems. When set up vulnerabilities that can be exploited. When connected to the Internet, your properly, these firewalls protect your 2. Install protective software. data can be vulnerable while in transit. computer files from being scanned. Free downloads such as Avast, AVG, Use remote connectivity and secure 10. Most importantly, stay informed. MBAM are available for PCs. When file transfer options. Stay current with the latest installed, the software should be set to 8. Protect sensitive data. developments for Windows, scan your files and update your virus Reduce the risk of identity theft. Macintosh Linux, and Unix systems. definitions on a regular basis. 3. Choose strong passwords. Choose strong passwords with letters, numbers, and special characters to create a mental image or an acronym that is easy for you to remember. Create a different password for each important account, and change passwords regularly. 4. Backup, Backup, BACKUP! Backing up your machine regularly can protect you from the unexpected. Keep a few months' worth of backups and make sure the files can be retrieved if needed. 5. Control access to your machine. Don't leave your computer in an unsecured area, or unattended and logged on, especially in public places. The physical security of your machine

18 SecurityAsia The ISS Group was first established in 1901 as a Danish Security Company. Over the last centruy, ISS has developed into a leading provider of Facility Services employing over 500,000 people across more than 50 countries.

ISS Security is dedicated to understanding clientsí needs and for technophobes exceeding their expectations. Our Services: z Securtiy Guarding (Premium, Ex-Gurkha, Local and Armed) z Design, Installation and Maintenance of Security Systems z Central Station Alarm Monitoring z Close Escort Service, X-ray Screening z Security Consultancy, Event Planning and Operation z Mobile Patrol z Guard Dogs Tel: (852) 2729 2266 Fax: (852) 3188 0879 Website: www.asf.com.hk E-mail: [email protected] Address: 3/F United Overseas Plaza, 11 Lai Yip Road, Kwun Tong Kowloon, Hong Kong

PUBLISHING

R&R Publishing is a media and communications company based in Hong Kong specialising in custom publishing, design and production of a wide range of marketing materials, including: • Custom Magazines • Newsletters & Brochures • On-line Publications • Annual Reports • Branding • Marketing Materials • Directories • Websites

We focus on crafting individual solutions for companies and corporations in Hong Kong, around the region and internationally. Our high-quality services enable you to grow your business and reach out to your customers.

We link the creativity of our highly experienced editors, writers, designers and production staff with the latest technology to provide you with the tools you need to promote your brand, products and services to your customers and target audience.

R&R Publishing Ltd 705, 7/F Cheong K. Building, 84-86 Des Voeux Road Central, Hong Kong PUBLISHING Tel: (852) 2126 7815 Email: [email protected] www.RRPublishing.com.hk

SecurityAsia 19 In the News

New analogue cameras The TeleEye Group have introduced a new set of analogue surveillance cameras. Their range of 700 TV Lines (TVL) analogue cameras capture video in high resolution and are aimed at businesses that want to upgrade their existing coax infrastructure yet avoid the costs associated with switching to IP technology. The Group also recently added an IR vari-focal Malware in the Air dome camera: the MX925-HD, to its range of In a recent paper published in Journal of Communications 1080p HD cameras. TeleEye claim the new camera Vol. 8 no. 11 entitled On Covert Acoustical Mesh Networks is hacker-resistant and can save up to 50% network in Air, researchers Michael Hanspach and Michael Goetz bandwidth compared to cameras using H.264 video describe how they constructed a covert channel between codec. different computing systems separated by an air gap that The TeleEye Group recently announced the utilised audio modulation/demodulation to exchange data establishment of its 10th overseas office in Kuala between the computing systems. They go on to state “It is Lumpur, Malaysia on 31st October 2013. shown that the concept of a covert acoustical mesh network On the subject of Asia expansion, New Zealand- renders many conventional security concepts useless, as based integrated access control and perimeter acoustical communications are usually not considered.” protection company Gallagher is extending its In other words, an attacker could take advantage of the reach to Thailand and surrounding countries computer systems’ speakers and microphones normally used following increasing demand from the Asian for such activities as IP telephony and exchange information market. Gallagher's Bangkok office will be open and at inaudible frequencies. Aside from simply switching off operational by the end of the year and the company the audio devices (which may not always be feasible), the is currently recruiting staff. authors suggest countermeasures such as audio filtering to Closer to home, the company was a Silver prevent computers from participating in covert acoustical Sponsor of the recent Asia-Pacific Security Forum networks. & Exhibition in Macau and showcased its v7.10 Command Centre. The system resides on an organisation's IT network and integrates electronic access control, intruder alarms management, Do Not Track app for Android perimeter security and compliance management. Security software company AVG has added a ‘Do Not Track’ (DNT) feature to its free PrivacyFix app for Android mobile phones. Advertisers have moved on from collecting information on our browsing histories to tracking our physical locations. By doing this it is possible to collect more information on our habits and routines and streamline their advertising efforts. PrivacyFix allows mobile users to discover who is tracking website visits and either block or allow it; the update will prevent Android phones from transmitting their MAC address or connecting to unapproved Wi-Fi networks – automatically suspending Wi-Fi connections to all but preselected trusted networks. AVG’s vice president of privacy products believes that tracking should be turned off until retailers adopt ‘meaningful standards’ of transparency and offer users clear choices of opting out of these programmes.

20 SecurityAsia In the News

Balloon power for disaster zones Millimetre waves see bombers at Lasers and balloons may seem an unlikely mix, but Professor a distance Stephen Blank of the New York Institute of Technology is Sophisticated next-generation radar systems are working on an idea to send electrical power over long distances being designed to detect would-be bombers at using powerful lasers and tethered aerostats. Aerostats are long distances, in crowded areas, and even at buoyant gas filled balloons widely used as surveillance platforms non-‘fixed’ locations. by the US military in such places as Afghanistan. Blank’s idea Person-borne improvised explosive devices is to send a laser signal up to a local aerostat through a fibre- (PBIEDS) are often shaped from a variety of metals optic cable, beam it through the air to a distant aerostat where and concealed under clothing or in backpacks so the high-energy light would be converted into electricity and they are extremely difficult to detect. The US- conducted back down to earth via the far aerostat’s tether. In based ALERT (Awareness and Localisation of this way, hundreds of kilowatts of power could be transmitted Explosives Related Threats) Center - a partnership over several hundred kilometres. Getting energy into disaster of academic, industrial and government entities zones could be one of the first uses, says Blank, pointing to the - is developing multiple radar units that can be aftermath of typhoon Haiyan in the Philippines. "You could have pointed in the direction of crowds of people that an aircraft carrier off the coast of the Philippines, with its nuclear are approaching a venue, checkpoint, or other generator, beaming power where it's needed." area of entry. The system would scan each individual at a distance of 50 metres or more to identify suicide bombers who appear to be dressed normally, but are concealing IEDs strapped to their bodies. The ALERT Center’s system uses a millimetre wave based design approach. Millimetre waves are a subset of the microwave band and operate within a frequency range of 30-300 Ghz. Unlike X-rays, millimetre-waves are non-ionising and universally considered non-carcinogenic. The ALERT radar is expected to be mountable to a van or truck for wide-ranging field use. Permanently mounted solutions would also be available for high security buildings, checkpoints or border crossings.

The low-cost solution to high-cost crime

Your house is worth millions. Your family is priceless. Install an unobtrusive AFSCO electric fence – the ultimate in perimeter protection. Defend… Deter… Deny… Detect Phone: 2880 0512 Email: [email protected] www.sprintlocks.com

SecurityAsia 21 World Focus

NSA and GCHQ finger internet company fibres In a joint project codenamed MUSCULAR, the USA’s National Security New security cameras to Agency and the UK’s Government Communications Headquarters have detect violent motions been collecting data from the private fibre networks linking the data A special CCTV camera might know what centres of Google and Yahoo, according to yet another Snowden leak and you are doing, thanks to a monitoring confirmed by unnamed sources. system that can detect aggressive Although data sent from a user to a Google or Yahoo internet account behaviour. is encrypted, the internet companies store copies of that information on servers in data centres around the world. This reduces possible data According to New Scientist, Kintense, loss in the event of failure. However, the private fibre links between data which is based on Microsoft’s, gaming centres are not encrypted and it is here that MUSCULAR taps in to collect sensor Kinect, analyses a person’s body the data. and picks out where the joints are to Both Google and Yahoo already comply with the NSA’s PRISM which create a real-time 3D skeleton figure. An legally compels technology companies to submit data that matches algorithm then recognises movements certain court-approved search criteria and this additional secret access made by this model that indicate appears to have shocked the senior management of these internet giants. aggressive acts such as kicking, pushing, In a company statement, Google's chief legal officer David Drummond hitting and throwing. said "We are outraged at the lengths to which the government seems to Unlike Kinect, Kintense doesn’t have gone to intercept data from our private fibre networks." require people to be facing the camera. In trials, some actions like kicking were recognised with 90 per cent accuracy, but other movements, like punching and throwing, were trickier to spot. The system, designed by researchers at the University of Virginia, was created to warn medical staff if a patient is acting violently – but it could also be used in security cameras. It was presented at the SenSys conference in Rome, Italy. “Using vision and acoustic sensors originally developed for games is now a very powerful paradigm for many different kinds of applications, including health,” says team member Jack Stankovic. They plan to upgrade Not a 'Postlt' but a Slide from a NSA presentation (Washington Post) the system so it can recognise verbal aggression, too. Zombie drones coming to a park near you Inspired by Amazon’s plan to use drones to deliver packages to customers, programmer Samy Kamkar wrote software he called SkyJack that controls a drone that flies around seeking out the Wi-Fi control signals of other drones. It then cuts their wireless connections and establishes itself as the controller – allowing people to make other drones do their bidding. The code is freely available on github.com and turns drones into ‘zombies’, says Kamkar. The software runs on Linux machines (Kamar used a Raspberry Pi) and is effective on AR drones manufactured by French company Parrot. Would-be Skyjackers don’t even need a drone of their own; a ground-based controller with a Linux laptop can create a zombie army from drones that fly into range.

22 SecurityAsia World Focus

Now boarding – wine and beer Los Alamos National Laboratory recently demonstrated a magnetic resonance imaging system called ‘MagRay’ that developers say is better than X-rays at differentiating bomb- making substances from benign substances. "A technique like magnetic resonance is very well suited for looking at liquids and gels,” said MagRay project leader Michelle Espy. According to Espy, the traditional carry-on baggage scanning method using X-rays misses certain threat indicators. What appears to be a bottle of white wine could be nitromethane, an ingredient for explosives. The new approach could rapidly and accurately discriminate between liquids that look identical. Emphasis on stinky terrorists The new system assesses proton content, MRI Terrorists constructing home-made bombs measurements and X-ray density data. in suburban premises may by caught out by With a simple user interface, operators would insert a sensors in the sewer system under a European bottle into the machine and, without any calibrating, see a Union-funded research programme called display consisting of “not much more than red light, green Emphasis. light - either this is bad or you can let this go," MagRay The approach centres on the fact that gases engineer Larry Schultz said. and liquids from bomb production (or for that matter, illicit drug production) enter the air

and sewers through windows, skylights, baths, sinks and toilets. An example of this occurred Google Glass wearers get poke in eye at the house used to prepare explosives for Negative reactions to Google Glass have been making headlines the London bombings of July 2005 in which 54 lately. In particular, restaurants, café and bars have shown an people died – the fumes killed off many of the antipathy to Glass users. Wearers have been bemused to find plants in the garden. themselves referred to rather rudely as ‘Glassholes.’ As bomb-making chemicals break down, "People make a personal decision to check their smartphone specific ions are released which can be detected or log in and check their social media accounts, but Google Glass by a network of sensors. The sensors consist is out of their control," said Larry Rosen, a psychologist who of several 10cm long ion-selective electrodes focuses on technology. "They are not able to make a decision as which are submerged in the wastewater to whether they want to be 'on' or 'connected' through someone flowing through the sewer system. Above else's process, and they are concerned and unhappy that they do ground, static sensors monitor the air over not have a say in the matter." distances up to 400m for explosives present in People feel in control when using their own technology but, the vapour stage. fairly or not, Google Glass seems to them more like invasive Once a command centre processes the surveillance. One of the primary concerns people have about Glass data sent from the sensors and a positive is that it is difficult to tell when the device is recording you. With a detection is made, a covert mobile detection phone, a stranger would have to physically hold up the device and team would move in to pinpoint the bomb point the camera in the subject's direction, a visible cue that they factory location. are recording. Wearable cameras like Glass are always pointed and The system is currently undergoing testing ready to go. under laboratory conditions and will be tried An organisation called ‘Stop the Cyborgs’ has been founded out in actual sewers in the coming year. The in response to the combination of wearable technology with ‘big sensors could also be used for real-time data.’ On their website, they state “Stop the Cyborgs is not anti- monitoring of illicit drug use and detection of Glass; we just want to proactively shape the norms around its use. illegal drug factories. The issue is simple politeness.”

SecurityAsia 23

The Back Page

A Roman Holiday? Bring 24-hour security “…the Camorra makes the Sicilian Mafia look like the Salvation Army.” By Peter Sherwood

he glory that was Rome while pilfering remains (emphasis on was) today lies a traditional art form T mangled under the horrors of (recently police arrested millions of tourists in summer alone. 19 baggage handlers at Seeing stylish Italy has always been the airport as part of a a balance between a rich cultural probe into widespread heritage and being hustled. suitcase looting). Gibbon’s masterpiece ‘The Decline Nail your stuff to and Fall of the Roman Empire’ is your chest or you’ll get centuries old, but to plot more recent something pinched, deterioration in things Italian try as I discovered later the reptilian crook Silvio Berlusconi, in Naples. What I was elected three times to its highest office. doing in that festering, (Since World War Two the country has gangster-run dump defies had more governments than Julius rational explanation: Caesar had dagger wounds). the Camorra makes Lovely people the Italians, but the Sicilian Mafia look decay and security concerns begin like the Salvation Army. at Rome’s airport and continue to Pickpockets swarmed. I Termini train station, a joint venture found myself on a packed between Robert Mugabe’s Zanu PF bus going “Uh, oh!” as, party the Afghan Jockey Club. No almost immediately, map of the Italian rail system exists greedy hands slid into at this shambolic enterprise where every pocket. The bloke information officers greet you like thrust up against me was part of scam. slow motion. Entering the departures the Black Death. And nobody knows Bravely I pushed my free arm against terminal (words suggesting you might less about railway schedules than the his throat and pointed my fingers at simply give up and end it all) I was met bleak lady at the end of a 45-minute his eyes like the Three Stooges. I say by a sweating mass of humanity on its ticket queue whose daily joy is praying ‘bravely’ meaning stupidly; a sharp hour-long crawl to a couple of tired you’ve missed your train. object could have ripped my heart security machines operated by what At airport immigration half a dozen out and nobody would notice until appeared to be the Italian Gestapo. yawning blokes rummage through their the mob dispersed and I fell flat on my Quietly, I joined them, suppressing an trousers for something interesting to face. Happily, all I lost was a camera. urge to strangle someone. scratch, while passengers wait… and I didn’t know what might be more wait. The baggage equipment was high depressing; staying in Rome forever or Peter Sherwood is a long-term Hong Kong resident. For eight years he wrote a regular tech in Mussolini’s day and is operated a reprise of the airport fiasco, which on satirical column for the SCMP. He is the by workers suffering narcolepsy, any given day is like the apocalypse in author of 15 books.

24 SecurityAsia Security Asia magazine can help grow your business!

It’s a bold claim – so how can we help you? Here’s how: We’ll keep you informed of the latest developments and trends in the security industry with feature articles written by experts.

We present new and interesting products with our regular ‘Latest Security Devices’ article.

If your company has a unique product or service, tell us about it and we may showcase it in an editorial.

Security Asia is read by over 10,000 professional people directly related to the security industry. It is is delivered directly to associations mailed to senior executives and decision-makers who choose to purchase products and services. and decision makers who are responsible for purchasing security related services and products including: We can work together to promote your business to exactly the right people. Members of The HKSA Government security bureaus No other local magazine gives you access to the Security consultants region’s security elite. Law and accountancy firms Financial institutions Insurance companies Call Colin on (852) 2126 7812, Transportation companies email [email protected] Facilities management providers or visit our web page Security hardware and software manufacturers www.Security-Asia.net/advertise-with-us to find out how we can help grow your business.

For more information aboutSecurity Asia, please Security Asia is the only magazine published in Hong Kong for the security industry and endorsed by The visit our website, www.Security-Asia.net Hong Kong Security Association. It is distributed throughout the Asia-Pacific region.

R&R Publishing Ltd 705, 7/F, Cheong K. Building, 84-86 Des Voeux Road Central, Hong Kong Tel: (852) 2126 7814 Email: [email protected] PUBLISHING Web: RRPublishing.com.hk SecurityAsia 25