June 2006 TOPSECR ETHCOM INTHZ 0291 123 TOPSE Current Challenges Why Innovate? Network is converging and dataflow is increasing Pushing everything back means front-end filtering 9 dr0pped data Substantial lag to process, store, and query data Restricted geo-Spatial capabilities (not just because of the hardware) Manual correlation between SIGINT, HUMINT, SIGACTs Non-integrated toolsets No comprehensive theater knowledge base Non-Optimal collaboration between Manually intensive production processes Cannot scale work targets in volume Reaching limits of legacy systems Analysis takes a lot of time Think: Atlantic vs. CNN scrolling bar Access to more comprehensive data I Immediate access to local data sets. with query.?r back to NSAW I Integrated Analytic Work?ow. with better tools I Real time Alerting: National and Tactical I Automation of tasks 9 Query to Dissemination I Distributed Analytic Collaboration Scalability I Integration across brigade-level SIG-INT capabilities TOPSECR ETHCOM INTHZ 0291 123 TOPSE INTH20291123 Tools and Workflow Better Tools I New relationship visualization w/temporal capabilities I Real-time geo-spatial alerting framework I Web?based applications optimized for speed in a distributed environment I Partnership with Green Dragon to identify and inject new technologies in much less time Integrated Framework I Work in any tool of choice, seamlessly switch to alternative views (think development 9 presentation) I Automated, one?click mentality from query to dissemination I Developers available to react to analyst needs and inject new capabilities TOPSE Substantial Improvements in Data Access Initial Traditional Data Sources (Global Reach touching NSA databases) SCS GSM collection Tactical GSM Accesses I Checkpoint Data HUMINT lAII-Source derived SIGINT Selectors (parsed CIA TDs, DOD IIRs, TAREX, DOCEX) I Local knowledge base Future Fully-integrated Iraqi DNI Data flows (initially accessible through separate web interface) OBELISK LETC GSM Coverage VICTORYUNIFORM and other special source Think: Know everything we collectively know, and faster TOPSE INTH20291123 VoiceRT: Index I Search of Voice Cuts Goal: Better filtering and selection using latest generation of voice- processing technologies I Perform phonetic indexing on 1 million voice cuts per day I Run incoming cuts against 1000 individual voice prints to drive real- time filtering and selection Optimizes linguist scarce time, does not replace linguists Increases efficiency of available linguists Ir Allows to affect collection priorities and react to changing linguistic {word patterns Possible future integration with checkpoint collection (voice biometrics) DM NTHZ 0291 123 TOPSE Real time Alerting: National and Tactical I Real-time alerting on hard selectors Creating a knowledge base within the collection architecture I Drives selection and filtering Provides relevant information to war fighter in seconds Algorithms to Detect and Alert from Patterns of Interest I Constant enrichment of incoming data flows based on NSA and GCHQ-developed algorithms Robust framework to allow to submit/ modify/ reject existing techniques Capability to extend algorithms to correlate and react to friendly actions, geospatial and geotemporal vicinity, etc. Dedicated effort to identify and detect new potential targets based on known behavioral patterns @liit??iniilil?lig] {?l?lglf?l??l 0 containing ta get I Frequent calling list Temporal trends Geospatial trends One-Click Alert-to-Analysis I Alerting framework fully integrated with analytical toolsets I Geospatial lTemporal Network views of data One-Click Analyst Actions I Drive collection through interface to EDB Keycard I Effortlesst affect knowledge base confidence details TOPSE INTH20291123 Checkpoints Provide advanced sensors to generate checkpoint metadata: I Active cell phone interrogation I Active RF Illumination: goal to fingerprint vehicles, identify threats (artillery shells, ammunition, gun barrels, electronic triggers) I 360 degree imagery I Chemical and radiological detectors Fed real time to tip and cue other Proof of concept in vicinity of BIAP, tentatively checkpoint 538 on Route Irish Operational test, tentatively checkpoint 502 nearAbu Ghurayb mm IH rig, am; Lila End June Initial site surveys, theater coordination 15 July Hardware Ships I 1 August Hardware Arrives, People begin arnring 15 August System Online I 31 August Data Flowing 15 September? IOC TOPS ECR ETHCOM INTH2 0291 123 [$11.1 ij '3 Iil- a I Each 90-day spin expands capability I Demonstration of integrated capabilities I Application of new and existing technologies I Make discoveries and apply lessons learned to future spins TOPSECR ETHCOM INTHZ 0291 123 I guilt-g?; l: lizilgaiijnr [mini [Fi?E?Jiri Wmm?m t? I Enhance Checkpoint Capability I Analyst-Identified Areas of Improvement Spin 3: Jan 200? I Analyst-Driven Modifications I Next-Generation Analytical Tools TOPS ECR ETHCOM INTH2 0291 123 II. (.91 II ..I II 341'! Brain SIG NT . 7-. ?r .. - .II: HI I T. I {5:1 322:1 . illPyrogperity Perfume Palace NSANET 100Mbps TACLANE (35% $1113 71- 7mm- V?la A1 Faw Palace FOCUS TOPS ECR ETHCOM INTH2 0291 123 Primary National-level Ta eting Paints Abis Interim? 2% :53TOPS ECR ETHCOM INTH2 0291 123 TU 1" FIX 1