NCJA National Forum 2003 “Partnerships with Purpose – Visions for Public Safety’s Future”

1. NCJA National Forum 2003 “Partnerships with Purpose – Visions for Public Safety’s Future” St. Pete’s Beach, FL July 21, 2003 “Regional Information Sharing – What’s Working? Is It Helping?” Angelo J. Fiumara, Jr., Deputy Director Regional Information Sharing Systems Office of Information Technology

2. Regional Information Sharing Systems (RISS) Mission To enhance the ability of local, state, tribal, and federal law enforcement and criminal justice agencies to identify, target, and remove criminal conspirators, and to support investigation and prosecution efforts which span multi-jurisdictional boundaries involving narcotics trafficking, organized crime, criminal gangs, terrorism, and violent crime.

3. Regional Information Sharing Systems(RISS)1973 – 1981 ROCICRegional Organized Crime Information Center1973 RMINRocky Mountain Information Network1977 NESPINNew England State Police Information Network1979 MOCICMid-States Organized Crime Information Center1980 WSINWestern States Information Network1980 MAGLOCLENMiddle Atlantic-Great Lakes Organized Crime1981 Law Enforcement Network

4. RISS INTELLIGENCE CENTERS NESPIN Franklin, MA MOCIC Springfield, MO MAGLOCLEN Newtown, PA WSIN Sacramento, CA RMIN Phoenix, AZ ROCIC Nashville, TN

5. Regional Information Sharing Systems (RISS)POLICY SOURCES • U.S. DOJ / BJA funding oversight and program management • BJA Funding and Administration Guidelines of the Regional Information Sharing Systems Program • 28 CFR Part 23, Criminal Intelligence Systems Operating Policies • Policy Board, Executive Board, or Executive Committee at each Center

6. Regional Information Sharing Systems (RISS)POLICY SOURCES • RISS Directors Association (RISS National Advisory Board) • RISS Intelligence Center Directors • Deputy Directors • Center Policy Board chairs • RISS IT Policy Group • RISS Intelligence Center Directors • Director, RISS Office of Information Technology

7. AGENCY REPRESENTATIONMarch 31, 2003 As of March 2003, there were 6,431 municipal, county, state, tribal, and federal law enforcement and criminal justice agencies as members. • Federal 843 • State 388 • Municipal 3282 • County 1350 • Prosecutor 310 • Corrections 67 • Other 191 More than 58,000 officers and agency professional users

8. Elements of the Regional Information Sharing Systems (RISS) Program • Supports law enforcement efforts to combatmulti-jurisdictional criminal activity, such as drug trafficking, traditional and non-traditional organized crime, gangs, terrorism, and violent crime • Provides a structured system tofacilitate communication and cooperationamongfederal, state, local, and triballaw enforcement agencies • Regional differences– Each center chooses multi-jurisdictional crimes to target and the range of services to offer in support of member agencies, i.e., analytical services and products • Access to timely information on criminal suspects and activities

9. Elements of the Regional Information Sharing Systems (RISS) Program • Secure intranet(riss.net)for electronic networking of law enforcement and criminal justice agencies throughout the U.S. and U.S. territories, as well as the U.K., Canada, and Australia • Electronic linkingof the six RISS Intelligence Center criminal intelligence databases and the RISS National Gang Database • RISS Investigative Leads Bulletin Board (RISSLeads)for member agencies to post information and collaborate on investigations and crime problems • Electronic linking to other systems, such as the Criminal Information Sharing Alliance network (CISAnet), High Intensity Drug Trafficking Area (HIDTA) Intelligence Centers, El Paso Intelligence Center (EPIC) Clandestine Laboratory Seizure System, and state systems

10. RISS Intelligence Center Services • Required service components • Information sharing • Telecommunications • Analytical • Optional service components • Investigative support • Specialized equipment • Training • Technical assistance

11. Analytical Services Provided • Case / Investigative analysis • Link analysis • Telephone toll analysis • Financial analysis • Association analysis • Event / Activity flow analysis • Commodity flow analysis • Timeline analysis • Pattern / Behaviors analysis • Organizational hierarchy charts • Trial exhibits

12. Information Sharing / Participation Initiatives

13. Information Sharing / Participation Initiatives • Sensitive but unclassified (SBU) information sharing network • RISS / FBI Law Enforcement Online (LEO) • Executive Office For the United StatesAttorneys (EOUSA) • 93 United States Attorneys • 94 United States Attorneys Offices (USAOs) • 250 locations • 1000 initial riss.net access officers • U.S. DOJ; Criminal Division • 50 riss.net access officers • Washington, D.C.; Rapid City, SD; Bogotá, Columbia

14. FBI LEO (leo.gov) RISS (riss.net) & Interconnectivity

15. RISS / LEO Interface Initiative Accomplishments To Date………. • Simultaneous “Single sign-on” to both the riss.net system and leo.gov system • users holding valid accounts for both the riss.net system and leo.gov system simultaneously authenticate to both systems • Users no longer required to “log off” one system in order to “log on” to the other system • Transmission of secure, encrypted e-mail messages • E-mail transmitted between users having a riss.net e-mail address and users having a leo.gov e-mail address is encrypted • Access to the unique variety of resources and services available from RISS and the unique variety of resources and services available from LEO to a larger, more diversified user community, thereby facilitating and enhancing information sharing efforts

16. Authentication and Access to both riss.net and leo.gov Systems Open a browser session and navigate to a RISS resource

19. Authentication and Access to both riss.net and leo.gov Systems Open a browser session and navigate to a LEO resource

20. Authentication and Access to both riss.net and leo.gov Systems

21. Authentication and Access to both riss.net and leo.gov Systems Navigate through RISS resources and LEO resources without having to “log off” one system and “log on” to the other

22. Secure E-Mail EXPLANATION Secure, encrypted e-mail can be transmitted between any of the listed e-mail domains. All the e-mail domains, with the exception of @leo.gov, are resident on riss.net. The frame relay connection between riss.net and leo.gov provides the pathway for e-mail traffic between any of the riss.net e-mail domains and the leo.gov e-mail domain. • @magloclen.riss.net • @mocic.riss.net • @nespin.riss.net • @rocic.riss.net • @rmin.riss.net • @wsin.riss.net • @risstech.riss.net • @atix.riss.net • @adg.riss.net • @epicmail.riss.net • @hidta.net • @cbidoj.org • @leiu.org • @leo.gov

24. Anti-Terrorism Information Exchange (RISS ATIX) • RISS ATIX Community Participants • State Government Executive • County Government Executive • Local Government Executive • Tribal Government Executive • Federal Government Executives and Agency Officials • State Emergency Management • County Emergency Management • Local Emergency Management • Tribal Emergency Management .

25. Anti-Terrorism Information Exchange (RISS ATIX) • RISS ATIX Community Participants… (continued) • State Public Health Executive • County Public Health Executive • Local Public Health Executive • Tribal Public Health Executive • Non-RISS Member Law Enforcement or Criminal Justice • Fire Department • Emergency Medical Provider • Chemical Industry • Disaster Relief • Education (Primary, Secondary, and University) • Postal and Shipping .

26. Anti-Terrorism Information Exchange (RISS ATIX) • RISS ATIX Community Participants… (continued) • Public Utility - Water • Public Utility - Power • Public Utility - Other • Private Utility – Water • Private Utility – Power • Private Utility – Other • Special Skill Rescue Unit • Telecommunication • Transportation • Other .

27. ATIX Resources • Secure e-mail • Alerts and Homeland Security information • Web pages (RISS ATIX Web Page) • Alerts and Homeland Security information • RISS-provided • Node system-provided • General information • Community-specific information • Intelligence and collaboration bulletin board (ATIX Bulletin Board) • User-identified “conferences”; posting and responding • Community-wide • Community-specific • Private, by invitation • On-line keyboard conferencing • Secure e-mail direct from board • Off-system notification and confirmation

28. Multi-States Anti-Terrorism Information Exchange MATRIX

29. Multi-State Anti-Terrorism Information Exchange (MATRIX) • Coalition of states sharing CCH, DMV (vehicle registration and/or drivers license), and other types of criminal justice “public” information, to enable factual analysis research • California • Florida • Georgia • Kentucky • Louisiana • Michigan • New York • Ohio • Oregon • Pennsylvania • South Carolina • Utah

30. Information Sharing / Participation Initiatives….continued • RISS / NLETS Interconnection Pilot Project • Physical interconnection between RISS and the National Law Enforcement Telecommunications System (NLETS) via frame relay link • Authorized RISS users would access the RISS Secure Intranet (riss.net) from their state agency connection to NLETS • Access to the RISS Secure Intranet (riss.net) will still require authentication using RISS authentication and VPN software • All telecommunications traffic would travel within the confines of the frame relay networks of the RISS Secure Intranet (riss.net) and NLETS • Pilot states • Arizona, Iowa, Maine, Vermont

31. Information Sharing / Participation Initiatives….continued • JITF-CT RISS Information Exchange System (JRIES) • US DOD / DIA • OSIS / riss.net interconnection • California Anti-Terrorism Information Center (CATIC) • NYPD Counter-Terrorism Division (NYPD CTD) • Open Source • National Virtual Pointer System (NVPS) pilot project • NDPIX • HIDTA • NLETS • Conceptual discussion stage

32. Information Sharing / Participation Initiatives….continued • Colorado DPS; Office of Preparedness, Security and Fire Safety • RISS ATIX • Association of American Railroads • AAR Watch Center • U.S. DOT and the transportation industry • Transportation Information Operations Center (TIOC) • National Infrastructure Protection Center (NIPC) • Situation awareness information • U.S. and Canadian Railroads • “The Majors” • Regionals • Locals .

33. Information Sharing / Participation Initiatives….continued • U.S. Department of Homeland Security (DHS) • Pilot Project • Information Analysis and Infrastructure Protection Section (DHS IAIP) • Arizona, California, Colorado, Florida, Massachusetts, Nebraska, Pennsylvania • Law enforcement agencies from each RISS Center region

34. Information Sharing / Participation Initiatives….continued • SBU Federated System • DHS • TSA • Secret Service • INS and Border Patrol • DOD • DOJ • State and Local

35. What is the RISS Secure Intranet? A secure law enforcement communication system among the RISS Intelligence Centers, node agency systems, and authorized individual users collectively known as riss.net

36. RISS Intelligence Center Regions NESPIN Franklin, MA MOCIC Springfield, MO MAGLOCLEN Newtown, PA WSIN Sacramento, CA RMIN Phoenix, AZ ROCIC Nashville, TN

37. MOCIC Springfield, MO NESPIN Franklin, MA WSIN Sacramento, CA MAGLOCLEN Newtown, PA RMIN Phoenix, AZ ROCIC Nashville, TN

38. Types of resources available viariss.net • RISS Intelligence Center web pages containing links to general and RISS specific law enforcement and public safety related bulletins and information • Criminal Intelligence Database Pointer System (RISSIntel / RISSNET II) • National Gang Database (RISSGang) • Investigative Leads Bulletin Board (RISSLeads) • Master (federated) index and search capability against RISS resources and selected public and private Internet resources (RISSSearch) • Secure E-mail • RISSTraining • TechPage

39. riss.netNodes • Connected Agencies • CA DOJ (CBI) / LEIU • Colorado DPS • EPIC CLSS • Florida Department of • Law Enforcement • Missouri State HP • Oregon DPS • South Dakota DCI • CISAnet (formerly SWBSADIS) • AZ, CA, NM, TX • Utah ULEIN • Washington State Patrol • Wyoming DCI • Connections in progress… • NW3C • Iowa DPS • NLETS • Connected HIDTA Agencies • Chicago HIDTA • Midwest (Kansas City) HIDTA • Milwaukee HIDTA • Oregon HIDTA • South Texas (SWB) (San Antonio) HIDTA • Washington/Baltimore HIDTA • Gulf Coast (Metairie, LA) HIDTA • Los Angeles HIDTA • South FL (Miami) HIDTA • NY/NJ HIDTA • Applications in process… • FinCEN • ATIX States • MATRIX states .

41. RISS Secure Intranetriss.net • Secure network utilizing WEB technology • Remote user dial-in • Internet access secured via VPN • Encapsulated message payload encrypted using triple DES • User authentication & authorization at firewall • Fine-grained access control; per session access privileges • Dual-tiered firewall design protects all data resources • Client to second-tier firewall VPN • LAN to LAN or server to server VPN • Detailed logging • FIPS 140-1 compliant • Disaster recovery: network and data • Continuous intrusion detection and firewall log inspection • E-mail virus and trojan detection at server level • Recurring security testing by independent authority

42. RISS Secure Intranetriss.net • Fully encrypted virtual private network (VPN) across the Internet to the riss.net gateway firewall • Triple DES • Three separate 56 bit keys each session • AES (2nd Quarter 2003) • Encrypted key storage on multiple media types • riss.net intranet on frame relay circuits • Permanent Virtual Circuits (PVC) on the frame relay • Fully encrypted VPN on the PVCs • ISDN for frame circuit backup • Node LAN connections are on frame relay PVCs with fully encrypted VPNs • V-ONE SmartWall (Sun Solaris, Gauntlet, SmartGate) • RISSCop (RISS ISP)

43. RISS Secure Intranetriss.net • Initial client access • Client software (SmartPass) • Installs on Windows 98, 2000, NT, XP • On-line registration • Web access to Internet firewall via nonstandard port • Account activated by RISS security manager • Account assigned to specific group via manual process • User authenticated and allowed access • All traffic converted to a single nonstandard port • Permissions stored on SmartGate server • Client Key stored on token

45. Thank You! For further information, please contact: Angelo J. Fiumara, Jr., Deputy Director Regional Information Sharing SystemsOffice of Information Technology Telephone: (610) 873-9940 Fax: (610) 873-9950 afiumara@risstech.riss.net Mr. James T. Rogers, Director Regional Organized Crime Information Center (ROCIC) 545 Marriott Drive, Suite 850 Nashville, TN 37214 Telephone: (800) 238-7985 jrogers@rocic.riss.net