Project Vic

Transcription

1 Project Vic

2

3 Law Enforcement Proof of Concept Project Promoting a Victims First No Child Left Behind approach Improving the quality of law enforcement exchange data Standardizing law enforcement data formats Promoting/facilitating grass roots data exchange efforts There are tens of thousands of images of child exploitation materials seized by police, much of which are destined to be left on hard drives and in evidence lockers all over the United States. Traditional forensic workflows combined with sentencing guidelines and the sheer volume of offenders has created an epidemic and an environment where child victim images are undetected, undiscovered, and never investigated. The failure of this detection enables the continued access and abuse of these children.

4 Image/Video Review Selection for Prosecutorial Review Binary Hashing No Quality Control No Hash Standards Forensics (3 18 mos) Proprietary formats Manual Submission NCMEC (4 8 weeks) Seizure

5 Create robust hash sets (including PDNA) at C3 VIP Uncategorized Non- Pertinent Category 1 CAM Non-Pertinent set: 42M hashes to filter out Cat 1: Illegal material alert Cat 2: Non abuse but depicts victims alert Category 2 CAM Supporting ALERT!

6 Robust Hashing/advanced Technologies Automated NCMEC Submission Categorization Robust Hashing Service Image/Video Review Quality Control Prosecutorial Review Interoperability Automation Integrated Forensics Seizure

7 Submit o NCME C

8 Typical Process Flow Putting it all Together! An ecosystem and structure that creates an environment for efficiencies and work practices to promote rescuing children earlier in the investigation process.

9 Hashing Protocols PV1 Hash Image Hash Records New comprehensive PV1 Hash is based on a Json Odata hash record Includes all Meta data Security Ownership Meaning Flexible

10 A new approach Law enforcement-led data model, industry standard protocol Data Protocol model

11 Non-Proprietary Hashing Formats Protocols and formats of the hashes are managed on a well known developer portal called GitHub Vendors or anyone relevant to the furtherance of Child Exploitation Technology can access and adapt their tools to contribute to the

12 Project Vic Data Model of PV1 Hash Record Allows for additions and subtractions without requiring vendors and services to change input and output routines. Allows for the addition of Alternative Hashes so vendors can add their own proprietary hashes.

13 PV1 Data model 1.0

14 Our Tools Media Tools allow us to closely examine Images and Video and leverage the attached Meta-Data. These tools complement your forensic tools and allow for a closer examination of the media, allowing for categorization work and Victim ID practices.

15 Odata into the Hash Cloud Service

16

17 Blue Bear LES

18 Building an Ecosystem of Law Enforcement Tool Providers

19 Categorization

20

21 Autopsy

22 ZIUZ VizX2

23 Image Matching Capabilities

24

25

26

27

28

29

30 Hashing Protocols Video Hash and Fingerprinting: Goal to establish an open source standard much like PhotoDNA Non Proprietary Lightweight Performance and accuracy Licensed to Law Enforcement and LE Tool Providers to build ecosystem

31 Look at Industry for Answers

32 Video Finger Print Fingerprint size (in bytes) = [duration of video in seconds] x 8 Example sizes: A 5 second video: 40 bytes A 1 minute (60 seconds) video: 480 bytes A 5 minute (300 seconds) video: 2,400 bytes ~ 2.3KB A 15 minute (900 seconds) video: 7,200 bytes ~ 7KB A 30 minute (1,800 seconds) video: 14,400 bytes ~ 14KB A 1 hour (3,600 seconds) video: 28,800 bytes ~ 28.1KB A 3 hour (10,800 seconds) video: 86,400 bytes ~ 84.4KB 100 hours of video: ~2.7MB 1000 hours of video: ~27.4MB 10,000 hours of video: ~275MB 100,000 hours of video: ~2.7GB 1,000,000 hours of video: ~27GB

33 What can we remember Compared to what technology can remember and compare

34

35 Where are we Today: Image Submissions and Analysis: Have categorized and quality controlled 1.5million into three categories. An additional 2.5 Million files have been collected of which 2 Million are unique. Additional images are being worked on so the set can be increased. New Data Model 1.0 of the ODATA Hash records can now be exported and imported into NetClean Analyze, Blue Bear LES, ZiuZ ViZX2, Magnet forensics, Autopsy and imported / exported by the HubStream Cloud. Multiple forensic vendors are cooperating in the ODATA Protocol hash initiative. Video fingerprinting technology is being tested and evaluated in order to establish a video fingerprint standard much like PhotoDNA for images.

36 Conclusions Movement focused on how you want to share your data Movement to identify bottlenecks and un-necessary practices impeding your workflows Movement to find solutions we can live with in the next 5-7 years Movement to make incremental changes and improvements suggested by a collective group

37 The payback A fundamentally more scalable response to victim identification. An ecosystem of compatible products bringing new innovation. And ultimately, faster rescue of victims.

38 For More Information: