nsa rampart-a
TRANSCRIPT
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 1/41
TOP SECRET//COMINT//NOFORN
RAMPART-A
Project Overview
1 October 2010
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 2/41
TOP SECRET//COMINT//NOFORN
This briefing is classified
TOP SECRET//COMINT//NOFORN
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 3/41
TOP SECRET//COMINT//NOFORN
RAMPART-A Overview
Covername for NSA’s unconventional special access programto gain access to high-capacity international fiber-optic cables that transit at majorcongestion points around the world.
Program started in 1992 with the establishment of the National Fiber OpticProgram Fund
Four initial global congestion points identifiedExtended Bi-lat partnerships w/FAD to new compartmented efforts
General agreements negotiated:Foreign Partners provide access to cables and host US equipmentUS provides equipment for transport, processing, & analysisNo US collection by Partner and No Host Country collection by USShared tasking & collection
Today….5 on-going relationships2 cooperative relationship (w/ RAM-T)2 emerging relationships
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 4/41
TOP SECRET//COMINT//NOFORN
Project Description
(TS//SI) RAMPART-A’s accesses target long-haulleased communications through internationalgateways. Circuit-Switched and Packet-Switch signalsare enabled by foreign partners. Collection andProcessing assets reside on foreign soil and traffic isexfilled back to NSAW.
(TS//SI) Access Types: International Gateway
Switches; End-Point GSM Switches; Leased InternetCircuits; Internet Backbone Routers; Call Records.
(S//SI) Every Country Code in the world is seen atone or more RAMPART-A collection accesses
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 5/41
TOP SECRET//COMINT//NOFORN
SSO/RAMPART-A Site Operations
Model
ETSODD
PMD
Site Engineer Collection Manager
Mission Program Manager
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 6/41
TOP SECRET//COMINT//NOFORN
Engineering and Technical Services
(ETS)(U//FOUO) Integrate corporate and commercialsolutions
In compliance with differing Third-partyarchitectures
(C) Test end-to-end integrated solutions to meet SSO& Third-party operational requirements
(C) Deploy and support new systems to Third-partycontrolled facilities
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 7/41
TOP SECRET//COMINT//NOFORN
Operations and Discovery Division
(ODD)(C) Responsible for the tasking of the collectionsystems
(C) Coordinates system resources with the RAMPART- A partners
(C) Analyzes communications links to optimizecollection resources
(C) Monitors the performance of the collectionsystems
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 8/41
TOP SECRET//COMINT//NOFORN
RAM- A ProjectsUS-3237/SMOKYSINK (no 3rd party partner/joint RAM-T)
DNR & DNIUS-3127/AZUREPHOENIX
DNR & DNI
US-3180/SPINNERET
DNR & DNI
US-982/TRANQUIL – Retired June 2010
DNR & DNI
US-3145/MOONLIGHTPATH
DNI & DNR (September 2010)
US-3190/FIREBIRD
DNR & DNIUS-3153/FALCONSTRIKE
DNR & DNI
US-3178/DULCIMER
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 9/41
TOP SECRET//COMINT//NOFORN
RAMPART-A Typical Operation
A
B CD
International Cable
USA Country X
Processing Center
Access Point
Partner Analysts NSA Network
E
SECRET//COMINT NETWORK
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 10/41
TOP SECRET//COMINT//NOFORN
Sensitivity Factors
(TS//SI//NF//ECI) Compartmentalization
REDHARVEST/RDV • Who is the partner
•
Where is the access
• What is the access
(TS//SI//NF) Cover
Most RAMPART-A Third-party partners work the fiber projectsunder the cover of an overt Comsat effort
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 11/41
TOP SECRET//COMINT//NOFORN
Capabilities(TS//SI) Capabilities:
Automated, Continuous, High-Speed Survey of Circuit andPacket Switched Traffic
Packet-Switched selection & session collection
Dial Number Recognition of Circuit-Switched telephony
(S//SI) Deploy, and continually upgrade
Circuit and Packet Switched collectionarchitecture to all RAMPART-A sites
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 12/41
TOP SECRET//COMINT//NOFORN
SIGINT Value Added(TS//SI) Product Lines: All A&P product linesuse collection from RAMPART-A for SIGINTreporting
(TS//SI) Productivity/Intelligence gains: Over9,000 SIGINT Product Reports written lastyear with ~49% being Single Source Reports
(TS//SI) Targets within Accesses: Internationalvoice & fax telephony; Users of “webservices” (e.g. –Port 80 e-mail; Chat; VoIP);GSM; Calling Card users
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 13/41
TOP SECRET//COMINT//NOFORN
SMOKYSINK
(TS//SI) SMOKYSINK is in “steadystate” mode
(TS//SI) Continuous TU upgrades
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 14/41
TOP SECRET//COMINT//NOFORN
AZUREPHOENIX
(S) Site Physical Plant Upgrade2010-2011
(TS//SI) TU deployment earliest Spring2012?
(TS//SI) Partner working on additionalaccesses
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 15/41
TOP SECRET//COMINT//NOFORN
SPINNERET
(TS//SI) Cables upgrading withadditional capacity – RAM-A deploying
additional resources to accommodate
(TS//SI) 60 Gbps LPT – October 2009
(TS//SI) Additional 60 Gbps LPTscheduled for late 2010
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 16/41
TOP SECRET//COMINT//NOFORN
MOONLIGHTPATH
(S) DNI system deployment – April 2009
(TS//SI) New Cable access survey – May2009
(S) Site B rehab – Winter 2009
(TS//SI) New access in Sept. 2010
(TS//SI) New DNR/DNI system deployment –first phase (DNR) in May 2010. DNI to follow
TU deployment schedule
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 17/41
TOP SECRET//COMINT//NOFORN
TRANQUIL
(TS//SI) TRANQUIL shut down inJune, 2010
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 18/41
TOP SECRET//COMINT//NOFORN
FIREBIRD
(TS//SI) Unique 3rd party enabledaccess – no NSA processing systems
(TS//SI) Collection System IOC –February 2010
(TS//SI) Working to establish an NSA to
3rd Party partner collection systemtranslation
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 19/41
TOP SECRET//COMINT//NOFORN
FLASHMARK
(TS//SI) Access same as FIREBIRD, butallowing US Collection Systems
(TS//SI) Survey – March, 2010
(TS//SI) FIREBIRD/FLASHMARK issue tobe resolved this month.
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 20/41
TOP SECRET//COMINT//NOFORN
FALCONSTRIKE
(TS//SI) Survey – September 2009
(TS//SI) Pilot System Deployment – January2010
(TS//SI) Secure Comms Deployment –January 2010
(TS//SI) Two Track FutureSustained system – mid 2012
Pilot System upgrade completed – December 2010
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 21/41
TOP SECRET//COMINT//NOFORN
DULCIMER
(TS//SI) Survey – November 2010
(TS//SI) Expected traffic should be largeinternational internet pipes
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 22/41
TOP SECRET//COMINT//NOFORN
CONDORSPEAK
(TS//SI) Discussions with Partner – October,2010
(TS//SI) Expected initial traffic will bemetadata from target cable
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 23/41
TOP SECRET//COMINT//NOFORN
In Summary
RAMPART-A has access to internationalcommunications from anywhere around
the world
SSO/RAMPART –A stands ready tosupport your intelligence gathering
needs
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 24/41
#$%&'()*+*,-.$/&*0-1#&$*2$
34)#++-,#4.#$2&*5$6+*78+$9-, :%8(8.-)'$
#+#.*55;4-.8)-*4<$='<)#5<$>
TOP SECRET//COMINT//NOFORN
TOP SECRET//COMINT//NOFORN
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 25/41
Today’s Cable Program
Three Access
Portfolios
RAMPART–A (3rd Party)
WINDSTOP (2nd Party)
Foreign
Corporate
BLARNEY - FISA
FAIRVIEW
STORMBREWOAKSTAR
PRISM
FAA
Unilateral
–
RAMPART-I/X
RAMPART–T (ClanSIG)
-
MYSTIC
TOP SECRET//COMINT//NOFORN
TOP SECRET//COMINT//NOFORN
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 26/41
Got Fiber??UNCLASSIFIED//FOR OFFICIAL USE ONLY
UNCLASSIFIED//FOR OFFICIAL USE ONLY
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 27/41
(TS//SI//REL)
(TS//SI//REL)
International Internet Growth
(Billions of bits/second)
0
1000
2000
3000
4000
5000
6000
2003 2004 2005 2006
1 Cable
Incredible Challenges…
How To Find Target Communication on a Typical Fiber Optic Cable?
X X X =Simultaneous
Telephone or Internet Sessions
100 Million12 Fibers 10 B bits/Sec64 wavelengths
TOP SECRET//COMINT//NOFORN
TOP SECRET//COMINT//NOFORN
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 28/41
Partnerships developed jointly with
Foreign Affairs Directorate
Partnering with Foreign SIGINT partners to
enable access to foreign intelligence
TOP SECRET//COMINT//NOFORN
TOP SECRET//COMINT//NOFORN
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 29/41
RAMPART A
(TS//SI//NF) Unconventional special access program
leveraging Third Party partnerships:
•
High-capacity international fiber transiting major
congestion points around the world
• Foreign Partners provide access to cables and
host U.S. equipment
• U.S. provides equipment for transport,
processing and analysis
• No U.S. collection by Partner and No Host
Country collection by U.S. – there ARE exceptions!
• Shared tasking and collection
TOP SECRET//COMINT//NOFORN
TOP SECRET//COMINT//NOFORN
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 31/41
Cable to Database
Front End
Cable
Switch
Controller
PINWALEWC-2 &
DEEP DIVE
FASCIALOPERS
MARINA
TRAFFICTHIEFTURMOILT i p p i n g
ACS
BLACKPEARL
TWISTEDPATH
SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL
SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 32/41
3
RAMPART A Sites
!
US-3127/VH AZUREPHOENIX ** – 4mb BW/10gb/day
! US-3145/KX MOONLIGHTPATH ** - ~2mb BW/5gb/day
!
US-3180/9C SPINNERET ** - ~45mb BW/35gb/day
!
US-3237/KE SMOKYSINK (DNR,DNI) - ~45mb BW/30gb/day
! US-3190/21 FIREBIRD (DNR,DNI)** - ~2mb BW
TOP SECRET//COMINT//NOFORN
TOP SECRET//COMINT//NOFORN
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 33/41
4
The DNI Throttle
Implemented on the SMK Xkeyscore that doesfiltering/selection on Dec 2007; Oct 09 at SPIN;Feb 2010 SMK LPT
Limits ALL Cadence categories to 1Gb/10ksessions/day at US-3180 and US-3237.
Full take stored ONLY on Xkeyscores for ~3days. Will have to query Xkeys for any DNI notforwarded to Pinwale.
1Gb/day may decrease as other RAM A sitesincrease their DNI take.
TOP SECRET//COMINT//NOFORN
TOP SECRET//COMINT//NOFORN
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 34/41
5
RAM-A Tasking
Ops trained/certified before using the system.
All DNR/DNI tasking completed by Support
Hub; RAM-A CM provides support as needed.
All DNR/DNI tasking is reviewed and Partneroffensive tasking deleted. Deletions based onour taboo/scrubber lists. Deletes not pushedback to TOPIs.
TOPIs cannot review DNI categories for allsites unless cleared REDHARVEST.
Use SMOKYSINK/RAMPART-A to review yourcategories
TOP SECRET//COMINT// NOFORN
TOP SECRET//COMINT//NOFORN
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 39/41
TOP SECRET//SI//REL TO USA, DNK
DIR Opening Remarks Guidance !r DP"
T#e DIR $%pica&&% gi'es Opening Remarks !r $#e !&&!(ing $#ree c!nerences
)NORUSA, DENUSA, and S*EDUSA+ u$ #e ma% e asked $! d! !$#ers in (#ic#
case $#e same guidance s#!u&d e !&&!(ed-
DIR S$a #as gi'en us guide&ines $! !&&!( !r $#e Opening Remarks Ta&king
P!in$s- N!$e $#a$ (e #ad (an$ed $! simp&% inc&ude $#ese Opening Remarks
Ta&king P!in$s in !ur E.ec Sum !r $#e 'isi$, u$ DIR S$a $!&d us $#e% needed a
separa$e d!cumen$ !r $#e Opening Remarks and i$ needed $! e in a speciic
!rma$- T#a$ !rma$ is e&!( )e.amp&e pr!'ided is r!m DENUSA &as$ %ear+-
T#e Remarks s#!u&d !u$&ine $#ings $#a$ #a'e een acc!mp&is#ed since $#e &as$
c!nerence, as (e&& as $#ings (e (an$ $! ge$ acc!mp&is#ed in $#is
c!nerence/$#e upc!ming %ear- *e s#!u&d a&s! add an%$#ing e&se AD (an$s
DIRNSA $! c!n'e%-
Once $#e Opening Remarks Ta&king P!in$s are appr!'ed % appr!pria$e DP"
&eaders#ip )a$ &eas$ DP" Oice C#ie &e'e&+, $#e CDO s#!u&d pr!'ide $#e Opening
Remarks in $#e a$$ac#ed !rma$ $! $#e !&&!(ing a&iases a$ &eas$ 0 usiness da%s
in ad'ance ! $#e e'en$1
TO1 DL DIRSPEAK
CC1 D DIR S$a, DP" Oice C#ie/Depu$%
Per guidance r!m DIR S$a, i$ is $#e resp!nsii&i$% ! $#e !&ks !n $#e
DIRCO22S a&ias $! prin$ !u$ $#e remarks !n 345 cards and pr!'ide $!
$#e DIR s$a-
)Upda$ed !n 0/6/78"0+
TOP SECRET//SI//REL TO USA, DNK
8/12/2019 NSA RAMPART-A
http://slidepdf.com/reader/full/nsa-rampart-a 40/41
SECRET//REL TO USA, AUS, CAN, G9R, N:L
DENUSA
6-8 June
(S//REL TO USA, DNK) Thank the Danes for ther
!on"erfu# hos$ta#t% the% e&ten"e" to %ou an" %our"e#e'aton "urn' %our arh *st to +o$enha'en
(TS//S//REL TO USA, DNK)
(S//REL TO USA, DNK)
(TS//S//REL TO USA, DNK) E.$has<e NSA4s
o..t.ent to the s$ea# aess an" assstn' DDS n.ana'n' the aess
Re.n" the Danes of the #on' NSA-DDS $artnersh$
!orkn' a3#e aess !th
Note that !e #ook for!ar" to ne! areas of
oo$eraton
(TS//REL TO USA, DNK) ='h#'ht that NSA s !##n' to
en'a'e !th DDS on %3er "efense
SECRET//REL TO USA, AUS, CAN, G9R, N:L