Suspicious Activity Reporting

1. Shaping the Future of Public Safety and Collaboration XML Exchange Development Deploy Requirements NIEM Model Data Test Suspicious Activity Reporting Build Exchange Generate Dictionary Overview – Public Sector NIEM Team, December 2011

2. The following is intended to outline Oracle general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle. DisclaimerNotice

3. Introduction In the ten years since 9/11/2001, we have seen the information sharing challenges in the public safety arena expand beyond terrorist threats to encompass a broad set of criminal justice, emergency management, intelligence, and other homeland security activities.Has the power and breadth of available information sharing solutions kept up with the scale and scope of the problem? What solutions are needed for 2020 problems? By examining current architecture and data sharing methods, the community can address the needs that must be met to deliver the next generation of pragmatic solutions with standards-based information sharing.

4. Community, Collaboration and Safety Social Challenges and Community Involvement Enabling Technologies – SAR v2 Standards and Adoption Roadmap Q & A

5. Society Today Social Challenges

6. National SAR Initiative Position Focus is on law enforcement and financial services sector rather than broad citizen and community involvement http://www.ise.gov/nationwide-sar-initiative ISE coordination: Current NSI sites: http://nsi.ncirc.gov/implementation_map.aspx • Current thinking of the office of the Director of National Intelligence cites suspicious behavior as “observed behavior that may be indicative of intelligence gathering or pre-operational planning related to terrorism, criminal or other illicit intention. Behavior that could be considered suspicious and potentially tied to terrorism, and thus warrant a report, includes surveillance, photography of facilities, site breaches or physical intrusions, cyberattacks and the examination of security.”

7. Budget Restrictions v Policing Scope • America continues to allocate significant budgets to law enforcement and policing • The key to effective policing has always been enabling citizen participation combined with responsiveness and follow through • Policing has to cover an ever increasing raft of areas • How to leverage information technologies and communications tools to allow limited police resources to do more? • Better first responder coordination

8. Public Safety Areas and Scope Seemingly unconnected activity and participants provide key markers to intended criminal or terrorist patterns

9. Citizens and Averting Future Tragedy • Who knew that Anders Behring Breivikwas a disturbed fanatic planning to detonate a car bomb and then attack teenagers on a retreat island? • Who knew Michael Vick was involved in illegal dog fighting rings from his property? Who knew that NordineAmrani had acquired three hand grenades a shotgun and an automatic weapon?

10. Vision for Collaborative SAR initiative • Empowering community collaboration across all aspect of public safety not just terrorism and priority government sector targets • Providing a complete suite of solutions, not just islands of coordination • Integrating first responder systems to allow coordination to maximize resources

11. Information Sharing has Critical Role • Can act to bring together communities and law enforcement to combat challenges posed by world today • Provide people with sense of involvement and security • Combines Mobile, Social and Internet tools • Enable reporting and collaboration between community and law enforcement

12. NIEM – National Information Sharing Model Enabling Technologies LEXS – Logical Entity eXchange System Suspicious Activity Report (SAR) version 2

13. Capabilities and Requirements • Ensure privacy / security with built-in oversight and auditing to minimize risks • Reduce costs through use of open standards and common shared infrastructure and deployments (e.g. cloud computing, mobile communications networks) • Rapid response to events - natural disaster and man made • Public events protection and support • Secure first responder integration and coordination tools • Secure communications infrastructure with fault tolerance and security

14. NIEM SAR – standards based approach • NIEM is a joint DOJ / DHS / HHS program created to promote standardization of information exchange for cross jurisdictional information sharing. • NIEM provides the tools for enabling interoperability at the data layer within and acrosssystems supporting information sharing, while preserving investments in current technology and optimizing new technology development. • Going International – Canada, Mexico, EU Components of NIEM Common Language(Data Model Lifecycle) Repeatable, Reusable Process (Exchange Specification Lifecycle) Built and governed by the business users at Federal, State, Local, Tribal and Private Sectors

15. Existing SAR v1.5 content model Workflow support unclear Control unclear Specific to narrow 911 terrorism incident profile

16. SAR v2.0 (draft) content model • Cleaner and enhanced data model • Extended capability and flexibility • Improved workflow alignment • Better internationalization support Workflow Enhanced NEW Controls NEW NEW

17. Example – SAR + Complex Event Processing AutomatedCorrelation(Vehicle Description) Fusion Center Transport/Goods Theft 3 2 5 1 CEPEngine SAR Dashboard Submit SAR XML XML Citizen SAR 2.0 Send SAR Case Database Photo 4 Vehicle “XYZ” State MVA lookup Suspicious Activity +Vehicle “XYZ” + Location Desk Officer Reviews and Assigns Email Alert 6 Incident Report Workflow Activity Location Mapping Investigation Team

18. Some SAR application snap shots

19. SAR Mobile Device Interface User can browse and select phone camera image User can click here to allow sharing of the GPS coordinates from their phone location

20. SAR Tracker Review Dashboard

21. SAR Review with Mapping

22. Toward 2020 Policing and Community Coordination Standards and Adoption roadmap

23. SAR components • SAR v1.5 components • NIEM core dictionary • LEXS 3.1.4 dictionary LEXS components referenced dictionaries NIEM core components XML XML XML New structure components based on NIEM + SAR + new Definitions stored as syntax neutral canonical XML Toward Suspicious Activity Report V2.0 Dictionary Collection DRAFT Namespaces of dictionary components

24. Summary of Technologies • Short term initiatives • SAR V2.0 standard IEPD • Proof of Concept verification • Medium term objectives • Fusion Center integration • Open platform architecture • Cloud availability, mobile alerts and reporting • First responders coordination • Long term vision • Advanced policing techniques • Analysis, Events, Reporting, Trends (e.g. FBI UCR)

25. Q & A • Resource Center link • http://www.oracle.com/goto/niem SAR built with CAM editor toolkit from: http://www.cameditor.org