Back
About RSIS
Introduction
Building the Foundations
Welcome Message
Board of Governors
Staff Profiles
Executive Deputy Chairman’s Office
Dean’s Office
Management
Distinguished Fellows
Faculty and Research
Associate Research Fellows, Senior Analysts and Research Analysts
Visiting Fellows
Adjunct Fellows
Administrative Staff
Honours and Awards for RSIS Staff and Students
RSIS Endowment Fund
Endowed Professorships
Career Opportunities
Getting to RSIS
Research
Research Centres
Centre for Multilateralism Studies (CMS)
Centre for Non-Traditional Security Studies (NTS Centre)
Centre of Excellence for National Security (CENS)
Institute of Defence and Strategic Studies (IDSS)
International Centre for Political Violence and Terrorism Research (ICPVTR)
Research Programmes
National Security Studies Programme (NSSP)
Studies in Inter-Religious Relations in Plural Societies (SRP) Programme
Future Issues and Technology Cluster
Research@RSIS Newsletter
Other Research
Science and Technology Studies Programme (STSP) (2017-2020)
Graduate Education
Graduate Programmes Office
Exchange Partners and Programmes
How to Apply
Financial Assistance
Meet the Admissions Team: Information Sessions and other events
RSIS Alumni
Alumni & Networks
Alumni
Asia-Pacific Programme for Senior Military Officers (APPSMO)
Asia-Pacific Programme for Senior National Security Officers (APPSNO)
International Strategy Forum-Asia (ISF-Asia)
SRP Executive Programme
Terrorism Analyst Training Course (TATC)
Publications
RSIS Publications
Annual Reviews
Books
Bulletins and Newsletters
Commentaries
Counter Terrorist Trends and Analyses
Commemorative / Event Reports
IDSS Paper
Interreligious Relations
Monographs
NTS Insight
Policy Reports
Working Papers
RSIS Publications for the Year
Glossary of Abbreviations
External Publications
Authored Books
Journal Articles
Edited Books
Chapters in Edited Books
Policy Reports
Working Papers
Op-Eds
External Publications for the Year
Policy-relevant Articles Given RSIS Award
Media
2024 Indonesia Elections
Great Powers
Sustainable Security
Other Resource Pages
Media Mentions
News Releases
Speeches
Video/Audio Channel
External Podcasts
Events
S. Rajaratnam School of International Studies Think Tank and Graduate School Ponder The Improbable Since 1966
Nanyang Technological University Nanyang Technological University
  • About RSIS
      IntroductionBuilding the FoundationsWelcome MessageBoard of GovernorsHonours and Awards for RSIS Staff and StudentsRSIS Endowment FundEndowed ProfessorshipsCareer OpportunitiesGetting to RSIS
      Staff ProfilesExecutive Deputy Chairman’s OfficeDean’s OfficeManagementDistinguished FellowsFaculty and ResearchAssociate Research Fellows, Senior Analysts and Research AnalystsVisiting FellowsAdjunct FellowsAdministrative Staff
  • Research
      Research CentresCentre for Multilateralism Studies (CMS)Centre for Non-Traditional Security Studies (NTS Centre)Centre of Excellence for National Security (CENS)Institute of Defence and Strategic Studies (IDSS)International Centre for Political Violence and Terrorism Research (ICPVTR)
      Research ProgrammesNational Security Studies Programme (NSSP)Studies in Inter-Religious Relations in Plural Societies (SRP) Programme
      Future Issues and Technology ClusterResearch@RSIS Newsletter
      Other ResearchScience and Technology Studies Programme (STSP) (2017-2020)
  • Graduate Education
      Graduate Programmes OfficeExchange Partners and ProgrammesHow to Apply
      Financial AssistanceMeet the Admissions Team: Information Sessions and other eventsRSIS Alumni
  • Alumni & Networks
      AlumniAsia-Pacific Programme for Senior Military Officers (APPSMO)Asia-Pacific Programme for Senior National Security Officers (APPSNO)
      International Strategy Forum-Asia (ISF-Asia)SRP Executive ProgrammeTerrorism Analyst Training Course (TATC)
  • Publications
      RSIS PublicationsAnnual ReviewsBooksBulletins and NewslettersCommentariesCounter Terrorist Trends and AnalysesCommemorative / Event ReportsIDSS PaperInterreligious RelationsMonographsNTS InsightPolicy ReportsWorking PapersRSIS Publications for the Year
      External PublicationsAuthored BooksJournal ArticlesEdited BooksChapters in Edited BooksPolicy ReportsWorking PapersOp-EdsExternal Publications for the Year
      Glossary of AbbreviationsPolicy-relevant Articles Given RSIS Award
  • Media
      2024 Indonesia ElectionsGreat PowersSustainable SecurityOther Resource PagesMedia Mentions
      News ReleasesSpeechesVideo/Audio ChannelExternal Podcasts
  • Events
    • Connect with Us

      rsis.ntu
      rsis_ntu
      rsisntu
      rsisvideocast
      school/rsis-ntu
      rsis.sg
      RSIS
      RSS
      Subscribe to RSIS Publications
      Subscribe to RSIS Events

      Getting to RSIS

      Nanyang Technological University
      Block S4, Level B3,
      50 Nanyang Avenue,
      Singapore 639798

      Click here for direction to RSIS

      Get in Touch

    Connect
    Search
    • RSIS
    • Publication
    • RSIS Publications
    • CO16067 | The Brussels Attacks: Challenges of Unravelling Terrorist Networks
    • Annual Reviews
    • Books
    • Bulletins and Newsletters
    • Commentaries
    • Counter Terrorist Trends and Analyses
    • Commemorative / Event Reports
    • IDSS Paper
    • Interreligious Relations
    • Monographs
    • NTS Insight
    • Policy Reports
    • Working Papers
    • RSIS Publications for the Year

    CO16067 | The Brussels Attacks: Challenges of Unravelling Terrorist Networks
    Romain Quivooij

    29 March 2016

    download pdf
    RSIS Commentary is a platform to provide timely and, where appropriate, policy-relevant commentary and analysis of topical and contemporary issues. The authors’ views are their own and do not represent the official position of the S. Rajaratnam School of International Studies (RSIS), NTU. These commentaries may be reproduced with prior permission from RSIS and due credit to the author(s) and RSIS. Please email to Editor RSIS Commentary at [email protected].

    Synopsis

    The recent Brussels attacks claimed by IS underline the difficulties encountered by intelligence and security services to identify, monitor and neutralise terrorist networks before they move into action.

    Commentary

    TWO TERRORIST attacks struck Brussels’ Zaventem airport and the Maalbek metro station on Tuesday 22 March 2016, killing at least 35 people (including three suicide bombers) and injuring 340. Prime Minister Charles Michel declared, “what we feared has happened”. Five of the ten terrorists and suspected  accomplices involved in the series of attacks that struck Paris in November 2015 were Belgian and French nationals living in the districts of Molenbeek-Saint-Jean and Neder-Over-Heembeek, West and North of Brussels, respectively. This led investigators to focus their attention on the Belgian trail.

    The modus operandi of the Brussels attacks and the webs of individuals that are suspected to be involved suggest significant connections with the Paris attacks. Intelligence and security services are confronted with major challenges in dealing with terrorist networks responsible for such operations, as similar attacks are to be expected in the near future.

    The Paris-Brussels Connections

    Shared features between the Paris and the Brussels attacks highlight a significant degree of coordination, technical sophistication and strategic thinking, pointing again at the involvement of a well-structured terrorist cell. The explosions that targeted the airport and the metro station were carried out within an hour of each other, suggesting that terrorists synchronized their actions in order to maximise impact.

    The first two explosions killed at least 15 people in the airport, destroyed the facade of the entrance and led parts of the ceiling to collapse. The third explosion happened in a subway car, killing 13 people. While the concentration of people in a confined space explains the high number of casualties in the latter attack, the extent of human and material losses indicates the skillful use of powerful explosives, most probably triacetone triperoxide (TATP), a relatively easy-to-prepare explosive that was also used in Paris. The terrorists struck two transport systems in and around Brussels, in the same way that the Paris attackers selected key targets across the capital city of France.

    The three suicide bombers involved in the Brussels attacks were actively sought by French and Belgian police for their involvement in the Paris attacks. Mohamed Abrini, who remains at large, is also considered to be a prime suspect in both series of terrorist attacks. Investigations related to the capture of Salah Abdeslam, who acted as a logistician before and during the Paris attacks, revealed that the number of Belgium-based individuals involved in the Paris attacks were at least three times more than what Belgian authorities initially thought.

    Finally, the close timeline between Salah Abdeslam’s arrest and the Brussel attacks may imply that terrorists would have struck the Belgian capital earlier than planned, presumably out of fear that Salah Abdeslam might disclose information about forthcoming attacks in Brussels.

    The latter denied knowing the Brussels attackers, despite the fact that one of them rented an appartment that Salah Abdeslam used shortly before his arrest. These elements strongly suggest that Paris was one of the targets in a series of connected operations led by common networks implanted in Western Europe.

    Connecting the Dots: Missing the Mark?

    Belgium has been aware of high levels of threats over the last year, as illustrated by the dismantling of a terrorist cell in the city of Verviers in January 2015. The scale of the threat was at its peak last December, when no terrorist attack took place. Yet the Belgian Organ of Coordination for the Analysis of the Threat (OCAM), under the joint authority of the Belgian Home Office and the Ministry of Justice, kept the scale at a lower level between the arrest of Salah Abdeslam and the Brussels attacks, five days later.

    High numbers of individuals suspected to be sympathisers or belonging to IS have been identified since 2014. The multiplication of transnational terrorist plots and the concomitant increase of successful attacks have also become key features associated with IS. This two-pronged proliferation and diversification of terrorist threats compels intelligence and security services to prioritize certain risks over others, for human and material resources devoted to intelligence gathering and analysis as well as “hard” police and military operations do not necessarily keep up with the demand.

    This can lead to controversial decisions. Chérif and Saïd Kouachi, the authors of the Charlie Hebdo attacks who killed 12 people in January 2015 had been closely watched by the major French internal intelligence service, the General Direction of Internal Security (DGSI), until December 2013 and June 2014, respectively.

    However, no suspicious activities were detected, leading to the surveillance on the two brothers being ended. The French Interior Minister Bernard Cazeneuve explained in January 2015 that “no incriminating element that would have been likely to lead to the opening of a judicial investigation had then been raised against them”.

    As it tends to be the case when a terrorist attack is successful, several questions related to the effectiveness of local intelligence and security services have been raised. Ibrahim El Bakraoui, one of the suicide bombers at Brussels airport, had been arrested by Turkish authorities in Gaziantep, a Southern Turkish city close to the Syrian border, in June 2015, before being deported to the Netherlands.

    If it turns out that other attackers have travelled to Syria and Iraq and/or entered Western Europe by mingling with refugees from these countries, as was the case for the Paris attackers, trust of Western European populations in the ability of their governments to protect their safety will be further eroded.

    Need to Rethink Counter-Terrorism

    Mass terrorism involving easy targets is nothing new. However, the greater frequency of these attacks requires counter-terrorist professionals to properly assess multiple threats involved; to devote limited human and material resources to the surveillance of numerous suspects and potential targets, and to ensure a constantly updated flow of intra/international cooperation between intelligence and security services.

    Interestingly, recent episodes related to the identification of terrorists and suspected accomplices involved in the Paris attacks tend to show that granting intelligence and security services with increased surveillance powers and budgets do not naturally lead to the desired results. The hideout of Abdelhamid Abaaoud, the alleged mastermind of the Paris attacks, was reported to the French police by a friend of his cousin who provided him logistical support.

    Similarly Salah Abdeslam was turned in by a friend who was asked to find him a new hideout in Brussels. Basing their work on this testimony, Belgian investigators could easily trace the suspect. Thus basic human intelligence remains a fruitful key to detection and identification. While offering potential solutions to the terrorist risk posed by IS is easier said than done, the Brussels attacks are a grim reminder that the adaptation of counter-terrorism organisations to the fast-evolving threat environment should be considered a top priority.

    About the Author

    Romain Quivooij is an Associate Research Fellow with the Centre of Excellence for National Security (CENS), a constituent unit of the S. Rajaratnam School of International Studies (RSIS), Nanyang Technological University, Singapore.

    Categories: Commentaries / Country and Region Studies / International Politics and Security / Non-Traditional Security / Terrorism Studies / East Asia and Asia Pacific / South Asia / Southeast Asia and ASEAN

    Last updated on 29/03/2016

    RSIS Commentary is a platform to provide timely and, where appropriate, policy-relevant commentary and analysis of topical and contemporary issues. The authors’ views are their own and do not represent the official position of the S. Rajaratnam School of International Studies (RSIS), NTU. These commentaries may be reproduced with prior permission from RSIS and due credit to the author(s) and RSIS. Please email to Editor RSIS Commentary at [email protected].

    Synopsis

    The recent Brussels attacks claimed by IS underline the difficulties encountered by intelligence and security services to identify, monitor and neutralise terrorist networks before they move into action.

    Commentary

    TWO TERRORIST attacks struck Brussels’ Zaventem airport and the Maalbek metro station on Tuesday 22 March 2016, killing at least 35 people (including three suicide bombers) and injuring 340. Prime Minister Charles Michel declared, “what we feared has happened”. Five of the ten terrorists and suspected  accomplices involved in the series of attacks that struck Paris in November 2015 were Belgian and French nationals living in the districts of Molenbeek-Saint-Jean and Neder-Over-Heembeek, West and North of Brussels, respectively. This led investigators to focus their attention on the Belgian trail.

    The modus operandi of the Brussels attacks and the webs of individuals that are suspected to be involved suggest significant connections with the Paris attacks. Intelligence and security services are confronted with major challenges in dealing with terrorist networks responsible for such operations, as similar attacks are to be expected in the near future.

    The Paris-Brussels Connections

    Shared features between the Paris and the Brussels attacks highlight a significant degree of coordination, technical sophistication and strategic thinking, pointing again at the involvement of a well-structured terrorist cell. The explosions that targeted the airport and the metro station were carried out within an hour of each other, suggesting that terrorists synchronized their actions in order to maximise impact.

    The first two explosions killed at least 15 people in the airport, destroyed the facade of the entrance and led parts of the ceiling to collapse. The third explosion happened in a subway car, killing 13 people. While the concentration of people in a confined space explains the high number of casualties in the latter attack, the extent of human and material losses indicates the skillful use of powerful explosives, most probably triacetone triperoxide (TATP), a relatively easy-to-prepare explosive that was also used in Paris. The terrorists struck two transport systems in and around Brussels, in the same way that the Paris attackers selected key targets across the capital city of France.

    The three suicide bombers involved in the Brussels attacks were actively sought by French and Belgian police for their involvement in the Paris attacks. Mohamed Abrini, who remains at large, is also considered to be a prime suspect in both series of terrorist attacks. Investigations related to the capture of Salah Abdeslam, who acted as a logistician before and during the Paris attacks, revealed that the number of Belgium-based individuals involved in the Paris attacks were at least three times more than what Belgian authorities initially thought.

    Finally, the close timeline between Salah Abdeslam’s arrest and the Brussel attacks may imply that terrorists would have struck the Belgian capital earlier than planned, presumably out of fear that Salah Abdeslam might disclose information about forthcoming attacks in Brussels.

    The latter denied knowing the Brussels attackers, despite the fact that one of them rented an appartment that Salah Abdeslam used shortly before his arrest. These elements strongly suggest that Paris was one of the targets in a series of connected operations led by common networks implanted in Western Europe.

    Connecting the Dots: Missing the Mark?

    Belgium has been aware of high levels of threats over the last year, as illustrated by the dismantling of a terrorist cell in the city of Verviers in January 2015. The scale of the threat was at its peak last December, when no terrorist attack took place. Yet the Belgian Organ of Coordination for the Analysis of the Threat (OCAM), under the joint authority of the Belgian Home Office and the Ministry of Justice, kept the scale at a lower level between the arrest of Salah Abdeslam and the Brussels attacks, five days later.

    High numbers of individuals suspected to be sympathisers or belonging to IS have been identified since 2014. The multiplication of transnational terrorist plots and the concomitant increase of successful attacks have also become key features associated with IS. This two-pronged proliferation and diversification of terrorist threats compels intelligence and security services to prioritize certain risks over others, for human and material resources devoted to intelligence gathering and analysis as well as “hard” police and military operations do not necessarily keep up with the demand.

    This can lead to controversial decisions. Chérif and Saïd Kouachi, the authors of the Charlie Hebdo attacks who killed 12 people in January 2015 had been closely watched by the major French internal intelligence service, the General Direction of Internal Security (DGSI), until December 2013 and June 2014, respectively.

    However, no suspicious activities were detected, leading to the surveillance on the two brothers being ended. The French Interior Minister Bernard Cazeneuve explained in January 2015 that “no incriminating element that would have been likely to lead to the opening of a judicial investigation had then been raised against them”.

    As it tends to be the case when a terrorist attack is successful, several questions related to the effectiveness of local intelligence and security services have been raised. Ibrahim El Bakraoui, one of the suicide bombers at Brussels airport, had been arrested by Turkish authorities in Gaziantep, a Southern Turkish city close to the Syrian border, in June 2015, before being deported to the Netherlands.

    If it turns out that other attackers have travelled to Syria and Iraq and/or entered Western Europe by mingling with refugees from these countries, as was the case for the Paris attackers, trust of Western European populations in the ability of their governments to protect their safety will be further eroded.

    Need to Rethink Counter-Terrorism

    Mass terrorism involving easy targets is nothing new. However, the greater frequency of these attacks requires counter-terrorist professionals to properly assess multiple threats involved; to devote limited human and material resources to the surveillance of numerous suspects and potential targets, and to ensure a constantly updated flow of intra/international cooperation between intelligence and security services.

    Interestingly, recent episodes related to the identification of terrorists and suspected accomplices involved in the Paris attacks tend to show that granting intelligence and security services with increased surveillance powers and budgets do not naturally lead to the desired results. The hideout of Abdelhamid Abaaoud, the alleged mastermind of the Paris attacks, was reported to the French police by a friend of his cousin who provided him logistical support.

    Similarly Salah Abdeslam was turned in by a friend who was asked to find him a new hideout in Brussels. Basing their work on this testimony, Belgian investigators could easily trace the suspect. Thus basic human intelligence remains a fruitful key to detection and identification. While offering potential solutions to the terrorist risk posed by IS is easier said than done, the Brussels attacks are a grim reminder that the adaptation of counter-terrorism organisations to the fast-evolving threat environment should be considered a top priority.

    About the Author

    Romain Quivooij is an Associate Research Fellow with the Centre of Excellence for National Security (CENS), a constituent unit of the S. Rajaratnam School of International Studies (RSIS), Nanyang Technological University, Singapore.

    Categories: Commentaries / Country and Region Studies / International Politics and Security / Non-Traditional Security / Terrorism Studies

    Last updated on 29/03/2016

    Popular Links

    About RSISResearch ProgrammesGraduate EducationPublicationsEventsAdmissionsCareersVideo/Audio ChannelRSIS Intranet

    Connect with Us

    rsis.ntu
    rsis_ntu
    rsisntu
    rsisvideocast
    school/rsis-ntu
    rsis.sg
    RSIS
    RSS
    Subscribe to RSIS Publications
    Subscribe to RSIS Events

    Getting to RSIS

    Nanyang Technological University
    Block S4, Level B3,
    50 Nanyang Avenue,
    Singapore 639798

    Click here for direction to RSIS

    Get in Touch

      Copyright © S. Rajaratnam School of International Studies. All rights reserved.
      Privacy Statement / Terms of Use
      Help us improve

        Rate your experience with this website
        123456
        Not satisfiedVery satisfied
        What did you like?
        0/255 characters
        What can be improved?
        0/255 characters
        Your email
        Please enter a valid email.
        Thank you for your feedback.
        This site uses cookies to offer you a better browsing experience. By continuing, you are agreeing to the use of cookies on your device as described in our privacy policy. Learn more
        OK
        Latest Book
        more info