special collection service pacific sigdev conference march

TOP SECRET // COMINT // REL TO USA, AUS, CAN, GBR, NZL

Special Collection Service

Pacific SIGDEV Conference March 2011

The Overall Classification of this Briefing:

TOP SECRET//COMINT//REL USA, AUS, CAN, GBR, NZL

Derived From: NSA/CSSM 1-52 Dated: 20070108

Declassify On: 20360301

Spedai Collection Service SCS Organization

Special Collection Service (F6)

Chief of Staff


Special Collection Service Strategic Partnerships

SIGINT Enabling HUMINT

HUMINT Enabling SIGINT

DEA DIA

NRO SSO

FBI State

Secret Service

Law Enforcement

Homeland Security

Tailored Access

COVCOM

Military

CLANSIG Second Party


Spécial Collection Service SCS Modernization

èchnology p | a t f Q r m f Q r

Transformational Activitiès" >llèction/Procèssing Systèms

Facilitiès IT Infrastructurè Communications & f ^ a r d Nètworks \ T a r g è t s

Tools

People and Business Practices Accèss to Data

-Dissémination Mèthods Rèquirèmènts Procèss Projéct Portfolio Mgmt

Rotation Policy DNI Training


Overview Special Collection Service

• Unified IT Core and Virtualization • Cloud Computing • Global Situational Awareness • Beyond Traditional Accesses • Coherent Digital Access • Empowering Automation • The SCS Cyber Advantage

TOP SECRET II CO MI NT II RELTO USA, AUS, CAN, GBR, NZL


Unified IT Core

IT Services, IT Infrastructure • Capability Improvements:

- Modern IT services and infrastructure to support a net-centric operational model and enhance maintenance and security

• Capability Change: - Rapid response SIGINT presence - Next generation virtual infrastructure - Diversified WAN topology, enhanced LAN - Enhanced interoperable desktop - Improved email service - Workforce mobility - Robust collaboration environment - Site destruct enabler



Spécial Collection Servie EINSTEIN/CASTANET




INTERQUAKE

• Terrestrial Environmental Knowledge Base -Available to all NSAanalysts and partners

• PANOPLY populates IQ with Emitter information and reports including: - Signal Externals - Radio and Payload information - LACs and Cell ID's - Protocol Stacks



Special Collection Service 1 JlNlLRlJUfiUL •! - Marille I irefdK

INTERQUAKE ^ i n l « I

Die Ldlt yew 1 ll£t«-y Ho o km arks _öölp Lielp

© a ü , u httpi./.ib-tnr.u^.i:- In 1 £.1 .nîûHIqH - IIS" £ © f "'.. INTERQLtflCL 1 IUI | _

nYNAMi r P A G f - HIGHEST POSSICI T CI ASSIFICATION IS

I N T E R OU A K.E

' ixn-focit t u i r ÎFAI-iOhJ. V

Logoi ft I

¡ S - l i Main l=J- PS" Emitters

— View — By Site — rty Innc.trvK Sila

• h mr\y Sita — G roup s

«

0 ÍT(rialí

— FFAs ^ F-iowa M I S^lùStl

• * Uui il íes ^ SnapefiuLï A Fepu'Lï * Sil E S

Lil-^ MIJU 1=1-* hclp

Probte mx/Q ne xti<yn ï? ^ OiHSC-1

Emitters

iL^ ' ieml l i . J j J l ^ I lAiMItiuliiil OuiCh I ilTvr^l | - • = - s s <:• jntirwed LoaiJmj|ü = hss ¡zinapsl'o1s|nFA Hend nnlOii t;olleoilim li> l m M | H a ì jJcrpl^V

m V V- H R i c a r d 1-BO «I ìW'j

Vlewe: I Oeiauit - I £ fctl H Filters; . fcö ^ ^ Sorting: ö Exixirl: | - S e l e c t - 3

Fteq (MHI| Site Sitjiiul NBHitf BR iMËunill Med Puyluiid SHR BER A í Pul BW 11,1 H cl 1 1 1 i ^^m 1 1 i H C i 1 • " i V A • A • A • A W A W A V A • A •V A A • A W A

i a 17947 Un WT J1 CT T-m.w.i-A I =1 JEC. 6FSK nn 3 3D b V i_i I 2792 us sœu WLM AS CC13336KA is 3se 6FSK 16 33 p H 27 _i s I 3031 us-sœu WU1AA CCI33361*-Ä IS.3S6 8FSK 32 36 2 H 46

12775 5 us-seau WU1AE C013336KA I _-. •=!!-=. 3FSK. 25 319 J V 35 _i lUUIb L't-'Jtt'.' WU1A- 00Œ4 1 '.JJXA •̂1.1 LÍJ 12aUAM y I M I ia a-i I"1 H au

i 3 JóbZ U&-&63U WUltíP L'I.lS? 123ÜAM -

i n 7TW, us-9eeu WU XX 24 4 'J ÎTTHIAM i i 7r,?r, un-Bfisu WU XX rn?fiinniiA 2fi i rn 17nQAM nTMii nn n V n?i i a 7 ¿37 un BCOU WU XX 23 32G I 70QAM in 23 11 V ,n4 i_I 7i 35 75 us seau WU XX 23 32e. I 2aOAM 15 14 11 V 31 LJ 7624 US-963U WU.XX 23.925 126 CLAM 16 53 4 H 36 _i lU'J' 7 US-3E3U wu.xx 24. IK' 1JS CAM i l a j • V 33 _i 1US5T.7b UÏJ-LS3U WU XX îuarjAM 2a ai I-1 V 36

i /SI f.è ui- ' j tyu WU XX lJbUAM a •il -1 H 2U t i 7fl3fi US-968U WIJ1CA CÖ241&2XA. 24 1 3.7 120OAM niTMi '.n n 1 1 nn

. i p n 7 F,fi? un-neeu wu on IT|?4132;<A 74 132 130 QAM nTMii "in 22fl n 1 1 nn i a 7n.nfi Un 3"."U WU XX 23 32G I 76 QAM m :13 4 V .n.n i i ~s~ 7706 us seau WU.CI4 00241 32XA 24 I 32 I 26 QAM STM1 ¿6 22S P H 33 LJ s 1575 us seau WU1 eu ÖÖD5057WA 5 657 6413AM 26 231 13 H 6

462a 7 us-seau WU.XX SU. I 61 IÌ4QAM 0 J V /.aas u w t a u WU XX 12.3/fcj Ü4UAM lid ai M H a

i fltj J-l.' S ui-' j tau WU XX 31 IUI lilUAM ia (b H 44 i 7SOFI n 1 1 Wl 1 W I-7/1 ÖG1 7 ITI I -

il _ -13 ^ - • " J j

UYNAMIC l 'At jb H l t jHtS I l 'O^iSIBLb CLA55IF l l 'A l ICH 15 IUI' S t e n t i / ' S I t e i tStl-VOUtlUN.'NUh UHM




CES/SSC/AAD VPN "Surge"

• Main Goal: - To evaluate SCS VPN access and analysis to determine better methods

of identifying and exploiting networks of interest. • Two Focuses:

- What can we do with VPN data that is already ingested into the system? • Find better methods of reporting VPN stats and exploitation

determinations from CES back to SSC and site. - Are there methods to better identify and survey VPN's to provide CES

the data they need? • Can we leverage MIRROR, DARKQUEST, PANOPLY survey

information to quickly identify and report the presence of VPN's in surveyed signals?

• Can we use BIRDWATCHER or other means to automatically resurvey for key exchanges and obtain paired collect?


• s

Spécial Collection Service The SCS Cyber Advantage SIGINT prowess provides cyber advantage Unified operations provides holistic approach The right intelligence delivered to the right customer

Broad Spectrum of Capability

Integrated Mission

Geographic Advantage

Signal Access

Analysis ^ Q. O *

Dissemination^ o

& • f

Home field advantage in adversary's space Where our customers want us and our adversaries do not Capitalizing on the "element of surprise"

Signal access for collection, exfil,and infil Microwave, WiFi, WiMAX, GSM, CDMA, Satellite, etc.

Living in the environment Insights on infrastructure and configurations Discoveryof targets, signatures, and behavior

Tailored intelligence products Diverse products driven by national objectives and local needs through formal reporting, target packages, analytic insights, situational awareness, threat warning

Unique platform for conducting and enabling IC operations Fully leveraging 30-years of experience within the NSA and CIA enterprises and using existing authorities


SCS Opportunities Special Collection Service

special collection service pacific sigdev conference march

Documents