Before I delve into my post I want to give some of  my own background. I started my professional career in the US Marine Security Forces providing armed physical security for a critical national asset.  I have provided Force Protection in a combat zone, was a Marine Scout/Sniper, and I have provided unarmed security in a level 3 psychiatric ward. I have conducted anti-piracy operations in and around the Gulf of Aden and finally, I have been an information security professional for nearly 20 years.  I am also working in a Doctorate in CyberSecurity.  I have written scores of articles and spoken at many dozens of security events.  I may not know much in life but I understand security.

I read a letter from a mother of a Sandy Hook victim.  In the letter she said:

“I am sorry that our tragedy here in Sandy Hook wasn’t enough to save your loved ones,”

While I feel for the mother and understand her very normal and appropriate response to losing her child, the argument simplifies the issue.  Unfortunately, what we are dealing with is not a gun issue…it is a people issue.

Security is a science that is ultimately focused upon identifying and modifying human behavior.  Like all sciences there are concepts that are critical to understand.  Rational Actor Model, Deterrence Theory, Escalation of Force Cycle, Proximate Reality, Defense Cycle, Causality, and Risk, are but a few of the concepts that underpin all security (cyber, operational, physical etc.)  One that is critical for those who work in security to understand is that of Threat Adaptation.

According to the Department of Homeland Security’s Security Lexicon, Adaptive Threats are defined as:

“…threats intentionally caused by humans.” It further states that Adaptive Threats are: “…caused by people that can change their behavior or characteristics in reaction to prevention, protection, response, and recovery measures taken.”

The concept of threat adaptation is directly linked to the Defense Cycle.  In short, as defenses improve, threat actors change their tactics, and techniques to adapt to the changing controls.  As the threat actor improves their capabilities the defensive actors necessarily have to change their own protections.  This cycle continues ad infinitum until there is a disruption.

Consider castles.  Originally, they were built of wood.  Those assaulting castles then began burning them down.  Castle makers then built Castles of stone.  Assaulters then created siege engines to knock down the walls.  Castle walls were made larger and stronger and were nearly impenetrable until cannons were introduced.  Even in situations where the attackers could not ‘storm the castle’ they would simply lay siege and starve the inhabitants until they either died or capitulated.  This is a classic example of threat adaptation and the defense cycle.

Today we are dealing with a motivated, determined enemy who is focused on doing the most damage possible. When dealing with adversaries driven by financial motives, the calculus of deterrence is straightforward.  Simply increase the cost of achieving the objective beyond the payoff.  This is classic Rational Actor Model.  When dealing with an adversary driven by ideology are much, much more difficult to deter.  People that are willing to strap bombs to their bodies in an attempt to make a political or social statement are difficult (if not impossible) to deter.

So how does this apply to Gun Control?  Glad you asked.  As an example, let us use the Orlando night club shooting. The killer in Orlando was focused on doing the most damage possible and had already conducted reconnaissance.  He was motivated, intelligent and focused.  He was also looking for the ‘softest target’.  Notice he did not choose to assault a Hells Angel’s clubhouse!  Think about it..why?  Quite simply, he would have had a real fight on his hands and likely would have gone to Allah in short order.   Simply by being who they are..the Hells Angels deter certain behavior. (you can read about deterrence theory here) By choosing a ‘soft’ target he was already adapting his tactics to perceived controls (ie.  Hells Angels are damn tough, willing to fight, and have guns).  Even if the killer had not been able to purchase a firearm legally, he would have simply adapted his tactics to achieve his goals.  He could and likely would have purchased a stolen firearm or would have manufactured a bomb.

In 1964 a man by the name of Walter Siefert killed 2 teachers and 8 students while wounding 22 more with a lance and homemade flame thrower.  In 2014 10 men armed only with knives stormed a train station in China and killed 29 while wounding 130. In 1927 in Michigan Andrew Kehoe killed 38 school children and wounded 58 others with a homemade bomb.  In 1927 there were no ‘assault weapons’ and yet he was still able to kill 38 students.  At the risk of sounding flip the old adage “Where there is a will there is a way” holds just as true with those intent on murder as those intent on going to college.

Guns are an easy target (no pun intended).  They simplify a very complex issue that revolves around human behavior.  While it is easy to point the finger at guns, the issue lies in the individuals who use those guns.  Guns are tools.  In the hands of a hunter, they are a tool to put food on the table.  In the hands of a police officer they are a tool to protect society.  In the hands of a security guard in the Gulf of Aden (see picture) they are tools to protect a ship from violent pirates.  In the hands of a criminal they are a weapon.

While it is difficult to accept, gun control will NOT prevent what we saw in California and Orlando in the past few months.  These are motivated, intelligent adversaries who are focused on doing damage and will find a way.  Only through better intelligence, counter terrorism, and policing will we be able to reduce (not prevent) another instance of Orlando.