Passive surveillance in support of LI. André Scholtz

Transcription

1 Passive surveillance in support of LI André Scholtz

2 VASTech! Created 1999! Development and system contractor house in Passive Surveillance! Core focus: Zebra Passive Surveillance System! Operational systems in number of countries

3 Legal interception Incident Target identification How to identify targets and prevent incidents?! Warrant (order) Interception for legal purposes Legal processes

4 Understanding passive surveillance demands! channels plus in high density! Petabytes of storage! Covert and passive interception! Multiple agencies! IP, TDM; satellite, international switching centers, mobile, submarine landing stations!conventional systems not suited

5 What if sys'em is available '.a'! Provides LI targets while supporting intelligence community! Provides unique intelligence proposition (go back in history)! Requires low vendor support dependence! Is flexible to adjust to changes in threat, technology and communications, operational conditions! Dense, scalable and distributable! Benefit naturally from technological advantages '.roug. Moore5s la6

6 The ideal solution Changing communications environment (Satellite, landline, mobile; circuit and packet switched; different protocols) Suitable active/passive gateways (E1/T1, E3/DS3, STM-1/-4, IP) Off-the-shelf Processing and Storage (Networked architecture; distributed implementation; content capturing - records and stores everything; content enrichment 7 speech analysis, etc) Integration API Industry leading applications (Intelligence mining, extraction)

7 Zebra 24 U: 4000 channels

8 Zebra Architecture Remote Capture Unit 1 Master Data Centre Switching Centres Zebra Gateway Fax Demod Modem Demod Temp File Channel Storage Processor NAS Head Utility Database Storage Database (CDR) Compression Application +API Firewall Remote Capture Unit 2 File Storage Database Storage (CDR) NAS Head s Archiving Utility Database Zebra Gateway Fax Demod Channel Processor Utility Modem Demod NAS Head Database Temp File Storage Database Storage (CDR) Firewall Application +API Satellite Systems Compression Application +API Firewall Administrator ` ` ` ` User Workstations

9 Key characteristics! Record everything that it is connected to 7 No switches 7 no previous target knowledge required 7 High intelligence value 7 analyze and listen to the past! Software centric, aimed at integration 7 Fax, data and satellite DCME demodulation integrated as software 7 API to integrate to customer applications and analysis tools! 8ommercially available :off-the-s.elf;.ar<6are 7 Low vendor dependence 7 =enefi' from Moore5s la6

10 Key characteristics! Highly scalable and distributable channels+ with unified view 7 Add more servers into Capture Unit 7 Add more Capture units! High density stereo E1s per 42 U rack 7 64 stereo E1s in 1U interception on remote sites 7 small footprint!! Groups and permission based security 7 Tagging and workflow! Advanced CIC mapping

11 Record all and filter Old approach Traffic Switch CRI Capture and store No content, lost intelligence Analysis New targets New approach Traffic Capture all CRI Intermediate Storage Filter Long term Storage Analysis New targets

12 Filtering and permissions Interception and processing IRI Database Storage Hot monitoring Call Content Storage Group filter Operator filter and permissions

13 Storage flexibility - example All intercepts in 64 kbps stereo for 5 days All voice compressed 8 kbps stereo 360 days All fax and data uncompressed for further 30 days Fax and data compressed for remainder of 365 days All IRI for 2 years All known target content for additional year - online archive Exporting and migration

14 Storage flexibility - example

15 Content enrichment and intelligence extraction! OCR and text search! Speaker identification and speech tools! Customer applications

16 Conclusion Passive surveillance is complementary to LI! Provides a much larger pool of information! Helps identify targets and prevent incidents Systems do exist that provide large scale passive surveillance capabilities while:! Providing unique intelligence value! Protect investment against changes in technology! Low vendor hardware dependence