NIEM and Future SAR

Deploy Requirements
Shaping the Future
Test
NIEM Model
<Insert Picture Here> Data of Public Safety and
Build Generate
Exchange Dictionary Collaboration
XML Exchange Development

Suspicious Activity Reporting
Overview – Public Sector NIEM Team, December 2011

Disclaimer Notice
The following is intended to outline Oracle general
product direction. It is intended for information
purposes only, and may not be incorporated into any
contract. It is not a commitment to deliver any
material, code, or functionality, and should not be
relied upon in making purchasing decisions.

The development, release, and timing of any features
or functionality described for Oracle’s products
remains at the sole discretion of Oracle.

Copyright ©2011, Oracle. All rights reserved. Slide 2
Oracle Draft Materials – Limited Circulation

Introduction

• In the ten years since 9/11/2001, we have seen the
information sharing challenges in the public safety arena
expand beyond terrorist threats to encompass a broad set
of criminal justice, emergency management, intelligence,
and other homeland security activities.

Has the power and breadth of available information
sharing solutions kept up with the scale and scope of the
problem? What solutions are needed for 2020 problems?
By examining current architecture and data sharing
methods, the community can address the needs that must
be met to deliver the next generation of pragmatic
solutions with standards-based information sharing.

Copyright ©2011, Oracle. All rights reserved.

Community, Collaboration and Safety

• Social Challenges and Community Involvement

• Enabling Technologies – SAR v2

• Standards and Adoption Roadmap

•Q&A


Society Today

SOCIAL CHALLENGES


National SAR Initiative Position
Current thinking of the office of the Director of National
Intelligence cites suspicious behavior as “observed behavior
that may be indicative of intelligence gathering or pre-operational
planning related to terrorism, criminal or other illicit intention.
Behavior that could be considered suspicious and potentially tied to
terrorism, and thus warrant a report, includes surveillance,
photography of facilities, site breaches or physical intrusions,
cyberattacks and the examination of security.”
Focus is on law enforcement and financial
services sector reporting rather than broad
citizen and community involvement
ISE coordination: http://www.ise.gov/nationwide-sar-initiative

Current NSI sites: http://nsi.ncirc.gov/implementation_map.aspx


Budget Restrictions v Policing Scope
America continues to allocate significant budgets to law
enforcement and policing
The key to effective policing has always been enabling
citizen participation combined with responsiveness and
follow through
Policing has to cover an ever increasing raft of areas
How to leverage information technologies and
communications tools to allow limited police resources to
do more?
Better first responder coordination


Public Safety Areas and Scope
Crime Public Order Infrastructure
Gang Activity Public Events Community Threats
Narcotics Community Threats Infrastructure Threats
Prescription Drugs Abduction Threats Military Installation
Weapons Property Threats Travel/Immigration
Chemicals Personal Threats Terrorism
Vehicles Theft Weapons Internet
Transport/Goods Theft Chemicals Farms
Animals / Exploitation Biological Parks

Prostitution Emergency Response
Pornography
Internet
Fraud
Banking

Seemingly unconnected activity and participants provide
key markers to intended criminal or terrorist patterns


Citizens and Averting Future Tragedy
• Who knew that Nordine Amrani had
acquired three hand grenades a
shotgun and an automatic weapon?

• Who knew that Anders Behring
Breivik was a disturbed fanatic
planning to detonate a car bomb
and then attack teenagers on a
retreat island?

• Who knew Bernard Madoff was
running the largest Ponzi scheme
in history?


Vision for Collaborative SAR initiative
Empowering community collaboration across all
aspects of public safety not just terrorism and priority
government sector targets
Providing a complete suite of solutions, not just islands
of coordination
Integrating first responder systems to allow
coordination to maximize resources


Information Sharing has Critical Role

Can act to bring together communities and law
enforcement to combat challenges posed by world
today
Provide people with sense of involvement and security
Combines Mobile, Social and Internet tools
Enable reporting and collaboration between community
and law enforcement


ENABLING TECHNOLOGIES
NIEM – National Information Sharing Model
LEXS – Logical Entity eXchange System
Suspicious Activity Report (SAR) version 2


Capabilities and Requirements

Ensure privacy / security with built-in oversight and auditing
to minimize risks
Reduce costs through use of open standards and common
shared infrastructure and deployments (e.g. cloud
computing, mobile communications networks)
Rapid response to events - natural disaster and man made
Public events protection and support
Secure first responder integration and coordination tools
Secure communications infrastructure with fault tolerance
and security


NIEM SAR – standards based approach
• NIEM is a joint DOJ / DHS / HHS program created to promote standardization of
information exchange for cross jurisdictional information sharing.
• NIEM provides the tools for enabling interoperability at the data layer within and
across systems supporting information sharing, while preserving investments in
current technology and optimizing new technology development.
• Going International – Canada, Mexico, EU
Components of NIEM

Common Language
(Data Model Lifecycle)

Built and governed by the business users at Repeatable, Reusable Process
(Exchange Specification Lifecycle)
Federal, State, Local, Tribal and Private Sectors

Existing SAR v1.5 content model
Legend:
? Optional
* Repeatable
@ attribute
# Properties
Workflow support
unclear
Control unclear

Specific to narrow
911 terrorism
incident profile


SAR v2.0 (draft) content model
• Cleaner and enhanced data model
• Extended capability and flexibility
• Improved workflow alignment
• Better internationalization support
Workflow

Enhanced

NEW

Controls
NEW

Legend:
? Optional
* Repeatable
@ attribute NEW
# Properties


SAR v2.0 new capabilities summary
• Extended public safety use model
• Better workflow control and tracking
• Better security and privacy management
• Enhanced internationalization support
• Cleaner extended data model for supporting information
• Better details on threat types including Hazmats
• New section for local police reports and vetting done
• Witness and contact information now supported directly
• Threats & associated criminal activity separate sections
• Support for surveillance equipment reporting and
locations including cyber, borders, restricted areas and
extended exposed facilities such as pipelines
• Allows “test mode” for practice drills

Example – SAR + Complex Event Processing
Automated
Transport/Goods Theft Fusion
Correlation
Center (Vehicle
Description)
1 2 3 5
Submit SAR CEP
XML Dashboard XML
SAR Engine
Citizen SAR 2.0 Send Case
SAR
(LEXS) Database
Photo

Vehicle “XYZ” 4
Suspicious Activity + State MVA
Desk Officer Email Alert
Vehicle “XYZ” + lookup
Location Reviews and Assigns 6
Incident
Report
Workflow
Activity
Location Investigation
Mapping Team


Some SAR application snap shots


SAR Mobile Device Interface

User can
browse and
select phone
camera
image

User can
click here to
allow sharing
of the GPS
coordinates
from their
phone
location


SAR Tracker Review Dashboard


SAR Review with Mapping


SAR Event Detection with CEP Alerts

SAR Incidents Reported

In-Area Watch Match & Alert

Protected Area

23

Global Event Tracking – NCTC WITS system

• 6 month lag time on event updating

• USA events – arson attacks - 2010


Toward 2020 Policing and Community Coordination

STANDARDS AND ADOPTION
ROADMAP


Toward Suspicious Activity Report V2.0

Dictionary Collection
SAR components
• SAR v1.5 components
• NIEM core dictionary
LEXS
components • LEXS 3.1.4 dictionary
referenced

NIEM core components
dictionaries

New structure components XML
XML
based on NIEM + SAR + new XML

Definitions stored as syntax
neutral canonical XML

Namespaces of
dictionary components


Summary of Technologies
Short term initiatives
• SAR V2.0 standard IEPD
• Proof of Concept verification

Medium term objectives
• Fusion Center integration
• Open platform architecture
• Cloud availability, mobile alerts and reporting
• First responders coordination

Long term vision
• Advanced policing techniques
• Analysis, Events, Reporting, Trends (e.g. FBI UCR, NCTC)


Resource Center link
http://www.oracle.com/goto/niem

Q&A

SAR built with CAM editor toolkit from:
http://www.cameditor.org


NIEM and Future SAR

Recommended

Recommended

More Related Content

What's hot

What's hot (8)

Similar to NIEM and Future SAR

Similar to NIEM and Future SAR (20)

More from Bizagi Inc

More from Bizagi Inc (10)

Recently uploaded

Recently uploaded (20)

NIEM and Future SAR