The Jan. 24 bombing at Moscow's Domodedovo International Airport killed 35 people and injured more than 160. The attack occurred at approximately 4:40 p.m. as passengers from several arriving international flights were leaving the airport after clearing immigration and customs. The attacker (or attackers; reports are still conflicting over whether the attack was conducted by a man or a man and a woman together) entered the international arrivals hall of the airport, a part of the facility that is outside the secure area and that is commonly packed with crowds of relatives and taxi and limo drivers waiting to meet travelers. Once the attacker was in the midst of the waiting crowd and exiting passengers, the improvised explosive device that he (or she) carried was detonated. It is not clear at this point whether the device was command-detonated by the attacker as a traditional suicide bomb or if the device was remotely detonated by another person. The attack was most likely staged by Islamist militants from Russia's Northern Caucasus region who have conducted a long series of attacks in Russia, including the Aug. 24, 2004, suicide bombings that destroyed two Russian airliners. The Domodedovo attack serves as a striking illustration of several trends we have been following for years now, including the difficulty of preventing attacks against soft targets, the resourcefulness of militants in identifying such targets and the fixation militants have on aviation-related targets.

Soft Targets

By definition, soft targets are those targets that are vulnerable to attack due to the absence of adequate security. Adequate security may be absent for a number of reasons, including disregard for the threat and lack of competent forces to conduct security, but most often soft targets are "soft" because of the sheer number of potential targets that exist and the impossibility of protecting them all. Even totalitarian police states have not demonstrated the capability to protect everything, so it is quite understandable that more liberal democratic countries do not possess the ability to provide airtight security for every potential target. Moreover, some measures required to provide airtight security for soft targets are often seen as intrusive by citizens of countries where personal freedom is valued and the financial cost associated with providing such security measures is often seen as excessive. There is an old security truism that states: "If you try to protect everything all the time you will protect nothing."

Because of this reality, policymakers must use intelligence gained from militant groups, along with techniques such as risk assessment and risk management, to help them decide how best to allocate their limited security resources. While this will help protect the targets the government deems most sensitive or valuable, it will also ensure that some things remain unprotected or under-protected. Those things become soft targets. While most militants would prefer to attack traditional high-profile targets such as embassies and government buildings, those sites have become far more difficult to attack in the post-9/11 world. At the same time, the relentless pursuit of terrorist operatives by the United States and its allies has resulted in the degradation of the capabilities and reach of groups such as al Qaeda. Today the threat posed to the West stems primarily from grassroots militants and jihadist franchises rather than the al Qaeda core. While this has broadened the threat, it has also made it shallower, since grassroots operatives are far less capable of spectacular and strategic attacks than the professional terrorist cadre of the al Qaeda core. The combination of increased security at hard targets and the reduced capabilities of militant operatives has resulted in militant planners shifting their targeting toward softer targets, which are easier to attack. As a result of this shift, targets such as hotels have replaced embassies and other hardened sites in militant target selection.

Generally, militants prefer to attack soft targets where there are large groups of people, that are symbolic and recognizable around the world and that will generate maximum media attention when attacked. Some past examples include the World Trade Center in New York, the Taj Mahal Hotel in Mumbai and the London Underground. The militants' hope is that if the target meets these criteria, terror magnifiers like the media will help the attackers produce a psychological impact that goes far beyond the immediate attack site — a process we refer to as "creating vicarious victims." The best-case scenario for the attackers is that this psychological impact will also produce an adverse economic impact against the targeted government.

Unlike hard targets, which frequently require attackers to use large teams of operatives with elaborate attack plans or very large explosive devices in order to breach defenses, soft targets offer militant planners an advantage in that they can frequently be attacked by a single operative or small team using a simple attack plan. The failed May 1, 2010, attack against New York's Times Square and the July 7, 2005, London Underground attacks are prime examples of this, as was the Jan. 24 attack at Domodedovo airport. Such attacks are relatively cheap and easy to conduct and can produce a considerable propaganda return for very little investment.