How to Detect the Terrorist We Cannot See

National Interest | Ahmed Charai

The September 30, 2026, attempted hijack of FlyDubai Flight FZ1073 by a radicalised co-pilot exposes critical vulnerabilities in global aviation security and counterterrorism screening. This insider threat bypassed traditional security protocols despite the perpetrator previously losing his job at Oman Air due to extremist views, demonstrating how quickly modern threats can outpace institutional detection.

To counter such decentralized, 'lone wolf' actors who lack established operational footprints, the US Counterterrorism Strategy highlighted at the Grand Strategy Summit prioritizes technological superiority and deeper intelligence integration over mass surveillance. Fragmented data held across separate national and private databases often obscures critical warning signs. Artificial intelligence offers a solution. It processes vast datasets to identify anomalous patterns. Human analysts remain essential for final validation, but advanced algorithms can bridge institutional silos. Deeper operational cooperation among trusted international partners is also required to connect transnational data points before attacks occur.

Comment

The FlyDubai Flight FZ1073 incident exposes a critical vulnerability in how international aviation authorities and intelligence agencies share non-criminal derogatory data. The perpetrator was dismissed from Oman Air for extremist views. Yet, this administrative action remained siloed within corporate boundaries, failing to trigger international aviation watchlists. Traditional Western and Gulf intelligence architectures are designed to track structured networks like Al-Qaeda, leaving them ill-equipped to flag individuals who exhibit radicalised tendencies without joining proscribed groups. Consequently, the lack of a standardised mechanism to ingest private-sector employment terminations from carriers like Oman Air into state databases creates a dangerous blind spot.

Bridging this gap involves integrating natural language processing algorithms into the Terrorist Identities Datamart Environment to ingest unstructured, non-traditional data streams. These systems parse multilingual corporate HR records, local police reports, and civil aviation filings to identify behavioural anomalies before they manifest operationally. Ultimately, the efficacy of such algorithmic screening depends on establishing bilateral data-sharing protocols that allow the National Counterterrorism Center to query civil aviation registries across the Gulf Cooperation Council in real time.

Strategic Question for Discussion

If the Terrorist Identities Datamart Environment is expanded to ingest private-sector corporate data, how can intelligence agencies balance the risk of algorithmic false positives against the necessity of identifying insider threats like the FlyDubai Flight FZ1073 co-pilot?

The pattern suggests that expanding the Terrorist Identities Datamart Environment to include corporate HR data would inevitably increase false-positive rates, potentially disrupting commercial aviation operations. My assessment is that mitigating this risk depends on a multi-tiered validation process where algorithmic flags are subjected to joint review by civil aviation authorities and intelligence analysts before any watchlist action is taken. This approach balances technological speed with the necessary human oversight to preserve operational integrity.

Share your assessment in the comments below.

To read in details click here