Suspicious Activity Reporting Overview – Public Sector NIEM Team, December 2011 NIEM Test Model Data Deploy Requirements Build Exchange Generate Dictionary

<Insert Picture Here>

Suspicious Activity Reporting

Overview – Public Sector NIEM Team, December 2011

NIEMTest Model Data

Deploy Requirements

Build Exchange

GenerateDictionary

XML Exchange Development

Shaping the Future

of Public Safety and

Collaboration

Copyright ©2011, Oracle. All rights reserved. Oracle Draft Materials – Limited Circulation

The following is intended to outline Oracle general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions.

The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.

Disclaimer Notice

Slide 2


Introduction

• In the ten years since 9/11/2001, we have seen the information sharing challenges in the public safety arena expand beyond terrorist threats to encompass a broad set of criminal justice, emergency management, intelligence, and other homeland security activities.

Has the power and breadth of available information sharing solutions kept up with the scale and scope of the problem? What solutions are needed for 2020 problems? By examining current architecture and data sharing methods, the community can address the needs that must be met to deliver the next generation of pragmatic solutions with standards-based information sharing.


Community, Collaboration and Safety

• Social Challenges and Community Involvement

• Enabling Technologies – SAR v2

• Standards and Adoption Roadmap

• Q & A


SOCIAL CHALLENGES

Society Today


National SAR Initiative Position

Current thinking of the office of the Director of National Intelligence cites suspicious behavior as “observed behavior that may be indicative of intelligence gathering or pre-operational planning related to terrorism, criminal or other illicit intention. Behavior that could be considered suspicious and potentially tied to terrorism, and thus warrant a report, includes surveillance, photography of facilities, site breaches or physical intrusions, cyberattacks and the examination of security.”

http://www.ise.gov/nationwide-sar-initiative

Focus is on law enforcement and financial services sector rather than broad citizen and community involvement

http://nsi.ncirc.gov/implementation_map.aspx Current NSI sites:

ISE coordination:

http://www.ise.gov/nationwide-sar-initiative

http://nsi.ncirc.gov/implementation_map.aspx


Budget Restrictions v Policing Scope

America continues to allocate significant budgets to law enforcement and policing

The key to effective policing has always been enabling citizen participation combined with responsiveness and follow through

Policing has to cover an ever increasing raft of areasHow to leverage information technologies and

communications tools to allow limited police resources to do more?

Better first responder coordination


Public Safety Areas and Scope

Crime Public Order Infrastructure

Gang Activity Public Events Community Threats

Narcotics Community Threats Infrastructure Threats

Prescription Drugs Abduction Threats Military Installation

Weapons Property Threats Travel/Immigration

Chemicals Personal Threats Terrorism

Vehicles Theft Weapons Internet

Transport/Goods Theft Chemicals Farms

Animals / Exploitation Biological Parks

Prostitution Emergency Response

Pornography

Internet

Fraud

Banking

Seemingly unconnected activity and participants provide key markers to intended criminal or terrorist patterns


Citizens and Averting Future Tragedy

• Who knew that Nordine Amrani had acquired three hand grenades a shotgun and an automatic weapon?

• Who knew that Anders Behring Breivik was a disturbed fanatic planning to detonate a car bomb and then attack teenagers on a retreat island?

• Who knew Michael Vick was involved in illegal dog fighting rings from his property?


Vision for Collaborative SAR initiative

Empowering community collaboration across all aspect of public safety not just terrorism and priority government sector targets

Providing a complete suite of solutions, not just islands of coordination

Integrating first responder systems to allow coordination to maximize resources


Information Sharing has Critical Role

Can act to bring together communities and law enforcement to combat challenges posed by world today

Provide people with sense of involvement and securityCombines Mobile, Social and Internet toolsEnable reporting and collaboration between community

and law enforcement


ENABLING TECHNOLOGIES

NIEM – National Information Sharing Model

LEXS – Logical Entity eXchange SystemSuspicious Activity Report (SAR) version 2


Capabilities and Requirements

Ensure privacy / security with built-in oversight and auditing to minimize risks

Reduce costs through use of open standards and common shared infrastructure and deployments (e.g. cloud computing, mobile communications networks)

Rapid response to events - natural disaster and man madePublic events protection and supportSecure first responder integration and coordination toolsSecure communications infrastructure with fault tolerance

and security


NIEM SAR – standards based approach

Components of NIEM

• NIEM is a joint DOJ / DHS / HHS program created to promote standardization of information exchange for cross jurisdictional information sharing.

• NIEM provides the tools for enabling interoperability at the data layer within and across systems supporting information sharing, while preserving investments in current technology and optimizing new technology development.

• Going International – Canada, Mexico, EU

Common Language(Data Model Lifecycle)

Built and governed by the business users at Federal, State, Local, Tribal and Private Sectors

Repeatable, Reusable Process(Exchange Specification Lifecycle)


Existing SAR v1.5 content model

Specific to narrow 911 terrorism incident profile

Workflow support unclear

Control unclear


SAR v2.0 (draft) content model• Cleaner and enhanced data model

• Extended capability and flexibility

• Improved workflow alignment

• Better internationalization support

NEW

NEW

NEW

Enhanced

Workflow

Controls


Example – SAR + Complex Event Processing

AutomatedCorrelation

(Vehicle Description)

CEPEngine

Investigation Team

Submit SAR

Incident Report

Workflow

Citizen

Desk OfficerReviews and Assigns

SAR 2.0

Email AlertSuspicious Activity +Vehicle “XYZ” +

Location

SendSAR

Vehicle “XYZ” State MVA lookup

XML XML

CaseDatabase

11 22 55

66

Photo

Transport/Goods Theft

Activity Location Mapping

SAR Dashboard

44

33

Fusion Center


Some SAR application snap shots


SAR Mobile Device Interface

User can click here to allow sharing of the GPS coordinates from their phone location

User can browse and select phone camera image


SAR Tracker Review Dashboard


SAR Review with Mapping


STANDARDS AND ADOPTION ROADMAP

Toward 2020 Policing and Community Coordination


Toward Suspicious Activity Report V2.0

dictionariesdictionaries

XMLXML

XMLXML

XMLXML

• SAR v1.5 components

• NIEM core dictionary

• LEXS 3.1.4 dictionary

• SAR v1.5 components

• NIEM core dictionary

• LEXS 3.1.4 dictionary LEXS

components

referenced

New structure components

based on NIEM + SAR + new

SAR components

Definitions stored as syntax

neutral canonical XML

NIEM core components

Dictionary Collection

Namespaces of

dictionary components

DRAFT


Summary of Technologies

Short term initiatives• SAR V2.0 standard IEPD

• Proof of Concept verification

Medium term objectives

• Fusion Center integration

• Open platform architecture

• Cloud availability, mobile alerts and reporting

• First responders coordination

Long term vision

• Advanced policing techniques

• Analysis, Events, Reporting, Trends (e.g. FBI UCR)


Q & A

SAR built with CAM editor toolkit from:

http://www.cameditor.org

Resource Center link

http://www.oracle.com/goto/niem

Documents

Suspicious Activity Reporting Overview – Public Sector NIEM Team, December 2011 NIEM Test Model Data Deploy Requirements Build Exchange Generate Dictionary