Customs & Border Protection (CBP)Department of Homeland Security (DHS)

Improving Border SecurityWith Information Technology

“Building for the Future”

Presented atIsrael Homeland Security International Convention 2010

October 31st – November 3rd, 2010 Tel Aviv, Israel

Mr. Wolf Tombe, Chief Technology Officer

Topics� CBP – On a Typical Day� Daily Enforcement & Operational Actions� IT Challenges & Operational Infrastructure� Technology Usage & Priorities� Building for the Future

2

On a Typical Day� 1.1 million passengers and pedestrians

(including 680,000+ aliens)

� Collect $90.4 million in fees, duties and tariffs (Second largest revenue collector in US – behind IRS )

� Analyze over 400 lab & forensic samples

� 256,897 incoming international air passengers;

� 43,188 passengers/crew arriving by ship;

� 70,900 truck, rail, and sea containers;

� 331,347 incoming privately owned vehicles;

� 85,300 shipments of goods approved for entry;

Daily Enforcement Actionsin 2009� 107 arrests; 7.5 weapons seized

� 1.5 travelers for terrorism/national security concerns;

� 2,139 illegal aliens detained

� 146 smuggled aliens

� $ 300,582 in undeclared/illicit currency;

� 14,270 pounds of narcotics in 179 seizures– A 74% increase over 2008 levels

� $649,900 fraudulent commercial merchandise at ports of entry.

� 4,291 Agricultural Violations including 454 pests

Daily Operational Actionsin 2009� Rescues: 488 events with 1281 people. 3 illegal

crossers in life threatening conditions each day.

� Operational Deployment of:

– 21,863 vehicles

– 1,419 canine enforcement teams .

– 290 aircraft

– 225 watercraft

– 280 horse patrols

IT Challenges� 1,600 Locations/Sites in CBP� 9,000 circuits to support for DHS - OneNet;� Radio Networks VHF(LMR):

� 1200 VHF fixed sites, HF: 20 Fixed sites.� 42,400 Tactical Radio Subscribers

� Over 65,000 Workstations and 9,863 Sensors� 607 Remote Video Surveillance Sites (fixed & mobile )� Overseas 58 Container Security Initiative ports, I mmigration

Advisory Program ports, and attaches� Rugged, harsh and demanding operating environments

OIT Operational Infrastructure� 7x24x365 operations (NOC, SOC, Help Desk, and syste m monitoring) -

Can Not Go Down;� For every minute of down time 764 people back up at the borders,

seaports or airports. In one hour that is 46,000 p eople and 3,000 containers!

� On-site full redundancy, backup power, DROC;� 6.5+ Petabytes of Raw Storage, 650 terabytes of ope rational data;� 10+ billion data requests/transactions daily just o n mainframes;� 2,000 servers (mainframe, Unix, and Windows) at the National Data Center

(NDC) plus 1200 servers in the field.� Over 15 million messages & Billions of records proc essed daily.

8

OIT Technology Usage� 3000 + Technologies are Technology Reference Model (TRM)� Application Stacks

� J2EE� Linux, Unix, WebSphere, WebSphere Portal, Oracle

� Spring, Hibernate, SQL, EJB, JSP, STRUTS, JMS, JDBC , Portlets, Web Services� .Net

� Windows, IIS, SQL Server, SharePoint� .Net, WebParts, Web Services, Silver Light

� Mainframe� CICS, COBOL, JCL, DataCom, WebSphere MQ

� ERP� SAP R3 Supply Chain Management

� SOA� DataPower, Oracle SOA Suite, WebSphere MQ, WebSpher e

Message Broker

How Do We Reduce CostsWhile Preserving Quality Service?� Change the Infrastructure

� Modernize to reduce numbers & improve efficiency� Move to Prebuilt Server & Storage Appliances

� Leverage cost effective Managed Services� Improve Program Management & Requirements� Automate End-to-End monitoring & management � Eliminate redundant tools , Turn Things Off� Partner with other, exchange services� Federalize Workforce� Leverage Enterprise Services & Partners� Build Applications NOT Systems

OIT FY 2011 Priorities1. Reduce Costs by $216M through Operating Efficiencies

2. Maintain Systems Availability & Reliability (within budgets)

3. Systems Modernization, Automation, and End-to-End monitoring & management (to reduce costs) Eliminate duplicate/redundant tools

4. Move to Commodity Appliances & standard Images

5. Move Systems Operations & DR to DHS Data Centers

6. Rebuild AES on new Appliance Infrastructure and tools

7. Move to Managed Services for Email and Sharepoint As A Service

8. Improved Requirements Management & Program Management

9. Consolidate NOC/SOC/Apps Mgt into Enterprise Operations Center

10. Work Force Professionalization, Expertise & Federalization (certification in PMP, ITIL, CISSP, MSE, RH Linux, …)

Future Enterprise Integration- Eliminating Stovepipes

Enterprise Service Bus (ESB)Enterprise Service Bus (ESB)

Common Application Integration Portal

ACE &ACS

TECS &TECS Mod

ENFORCE

ATS& AFI

CATSCOSS

BPETSE3

SAP. . . .

Enterprise ManagementInformation System

SSO & AD

EnterpriseData Warehouse

EnterpriseData Warehouse

OtherSystems

ONENETONENET

Enterprise Server Farm & Virtualization

Load BalancingActive Fail overData ReplicationRedundancy Lower CostStorage Networks ScalabilityHeterogeneous

Servers Clusters

What do we want from Products (HW/SW/Communications)� Lower Cost of Ownership� Faster Delivery / standup of capability� Scalability� Availability / Supportability� Security (High Assurance/High Availability)� Capability tied to objectives/outcomes� Open Interfaces� SOA enabled� Plug and Play� Integration with other products� Elegant Simplicity

What do We Need From an Integrator / Systems Engineering and Technical Assistance Support?

� Reduce costs (especially O&M) � Performance / incentive based Contracts � Provide a compelling Business Case (ROI & TCO)� Service Level Agreements with penalties� Standardized appliances – prebuilt & supportable� Standardized builds � Rapid Spiral/Evolutionary Development� leverage ESBs, workflow, Enterprise data warehousing,

Business Intelligence, e-forms, reuse. � Integrate with monitoring/managing tools� Automated Functional, Performance testing

What do we want from an Integrator / SETA Support? - continued

� SOA service solutions not stand alone systems

� Qualified Personnel (PMP certified, ITIL, MSCE, RH Linux certified, etc.)

� Systems engineering discipline & accurate documentation

� Secure, scalable, supportable – no downtime

� Stand behind your work and fix the problems� Deliver on time, within budget and Add value

Summary� CBP is the oldest and largest of the DHS IT components. We

maintain a huge infrastructure processing millions of transactions and billions of data searches each day.

� CBP operates around the world in a time critical environment. Any disruption or system outages can back up thousands of people dayor night.

� CBP must maintain 24x7x365 capable systems with absolutely no down time that are responsive to surge demands and provide accurate, timely and verifiable data to users in seconds.

� CBP is the second largest collector of revenues in the US Government. We must support and facilitate legal trade.

� We are moving to an enterprise SOA environment leveraging Appliances and managed services.

� We do not endorse the Exadata or Exalogic but we do expect to buy more in the future and are very happy with their initial capabilities, performance and reliability.