“Partnerships with Purpose – Visions for Public Safety’s Future” NCJA National Forum 2003 “Partnerships with Purpose – Visions for Public Safety’s Future” St. Pete’s Beach, FL July 21, 2003 “Regional Information Sharing – What’s Working? Is It Helping?” Angelo J. Fiumara, Jr., Deputy Director Regional Information Sharing Systems Office of Information Technology

Regional Information Sharing Systems (RISS) Mission To enhance the ability of local, state, tribal, and federal law enforcement and criminal justice agencies to identify, target, and remove criminal conspirators, and to support investigation and prosecution efforts which span multi-jurisdictional boundaries involving narcotics trafficking, organized crime, criminal gangs, terrorism, and violent crime.

Regional Information Sharing Systems (RISS) 1973 – 1981 ROCIC Regional Organized Crime Information Center 1973 RMIN Rocky Mountain Information Network 1977 NESPIN New England State Police Information Network 1979 MOCIC Mid-States Organized Crime Information Center 1980 WSIN Western States Information Network 1980 MAGLOCLEN Middle Atlantic-Great Lakes Organized Crime 1981 Law Enforcement Network

RISS INTELLIGENCE CENTERS NESPIN Franklin, MA MOCIC Springfield, MO MAGLOCLEN Newtown, PA WSIN Sacramento, CA RMIN Phoenix, AZ ROCIC Nashville, TN

Regional Information Sharing Systems (RISS) POLICY SOURCES U.S. DOJ / BJA funding oversight and program management BJA Funding and Administration Guidelines of the Regional Information Sharing Systems Program 28 CFR Part 23, Criminal Intelligence Systems Operating Policies Policy Board, Executive Board, or Executive Committee at each Center

Regional Information Sharing Systems (RISS) POLICY SOURCES RISS Directors Association (RISS National Advisory Board) RISS Intelligence Center Directors Deputy Directors Center Policy Board chairs RISS IT Policy Group Director, RISS Office of Information Technology

AGENCY REPRESENTATION March 31, 2003 As of March 2003, there were 6,431 municipal, county, state, tribal, and federal law enforcement and criminal justice agencies as members. Federal 843 State 388 Municipal 3282 County 1350 Prosecutor 310 Corrections 67 Other 191 More than 58,000 officers and agency professional users

Elements of the Regional Information Sharing Systems (RISS) Program Supports law enforcement efforts to combat multi-jurisdictional criminal activity, such as drug trafficking, traditional and non-traditional organized crime, gangs, terrorism, and violent crime Provides a structured system to facilitate communication and cooperation among federal, state, local, and tribal law enforcement agencies Regional differences – Each center chooses multi-jurisdictional crimes to target and the range of services to offer in support of member agencies, i.e., analytical services and products Access to timely information on criminal suspects and activities

Elements of the Regional Information Sharing Systems (RISS) Program Secure intranet (riss.net) for electronic networking of law enforcement and criminal justice agencies throughout the U.S. and U.S. territories, as well as the U.K., Canada, and Australia Electronic linking of the six RISS Intelligence Center criminal intelligence databases and the RISS National Gang Database RISS Investigative Leads Bulletin Board (RISSLeads) for member agencies to post information and collaborate on investigations and crime problems Electronic linking to other systems, such as the Criminal Information Sharing Alliance network (CISAnet), High Intensity Drug Trafficking Area (HIDTA) Intelligence Centers, El Paso Intelligence Center (EPIC) Clandestine Laboratory Seizure System, and state systems

RISS Intelligence Center Services Required service components Information sharing Telecommunications Analytical Optional service components Investigative support Specialized equipment Training Technical assistance

Analytical Services Provided Case / Investigative analysis Link analysis Telephone toll analysis Financial analysis Association analysis Event / Activity flow analysis Commodity flow analysis Timeline analysis Pattern / Behaviors analysis Organizational hierarchy charts Trial exhibits

Information Sharing / Participation Initiatives

Information Sharing / Participation Initiatives Sensitive but unclassified (SBU) information sharing network RISS / FBI Law Enforcement Online (LEO) Executive Office For the United States Attorneys (EOUSA) 93 United States Attorneys 94 United States Attorneys Offices (USAOs) 250 locations 1000 initial riss.net access officers U.S. DOJ; Criminal Division 50 riss.net access officers Washington, D.C.; Rapid City, SD; Bogotá, Columbia

RISS (riss.net) FBI LEO (leo.gov) & Interconnectivity

RISS / LEO Interface Initiative Accomplishments To Date………. Simultaneous “Single sign-on” to both the riss.net system and leo.gov system users holding valid accounts for both the riss.net system and leo.gov system simultaneously authenticate to both systems Users no longer required to “log off” one system in order to “log on” to the other system Transmission of secure, encrypted e-mail messages E-mail transmitted between users having a riss.net e-mail address and users having a leo.gov e-mail address is encrypted Access to the unique variety of resources and services available from RISS and the unique variety of resources and services available from LEO to a larger, more diversified user community, thereby facilitating and enhancing information sharing efforts

Authentication and Access to both riss.net and leo.gov Systems Open a browser session and navigate to a RISS resource

Authentication and Access to both riss.net and leo.gov Systems Open a browser session and navigate to a LEO resource

Authentication and Access to both riss.net and leo.gov Systems

Authentication and Access to both riss.net and leo.gov Systems Navigate through RISS resources and LEO resources without having to “log off” one system and “log on” to the other

Secure E-Mail @magloclen.riss.net @mocic.riss.net @nespin.riss.net @rocic.riss.net @rmin.riss.net @wsin.riss.net @risstech.riss.net @atix.riss.net @adg.riss.net @epicmail.riss.net @hidta.net @cbidoj.org @leiu.org @leo.gov EXPLANATION Secure, encrypted e-mail can be transmitted between any of the listed e-mail domains. All the e-mail domains, with the exception of @leo.gov, are resident on riss.net. The frame relay connection between riss.net and leo.gov provides the pathway for e-mail traffic between any of the riss.net e-mail domains and the leo.gov e-mail domain.

Anti-Terrorism Information Exchange (RISS ATIX) RISS ATIX Community Participants State Government Executive County Government Executive Local Government Executive Tribal Government Executive Federal Government Executives and Agency Officials State Emergency Management County Emergency Management Local Emergency Management Tribal Emergency Management .

Anti-Terrorism Information Exchange (RISS ATIX) RISS ATIX Community Participants… (continued) State Public Health Executive County Public Health Executive Local Public Health Executive Tribal Public Health Executive Non-RISS Member Law Enforcement or Criminal Justice Fire Department Emergency Medical Provider Chemical Industry Disaster Relief Education (Primary, Secondary, and University) Postal and Shipping .

Anti-Terrorism Information Exchange (RISS ATIX) RISS ATIX Community Participants… (continued) Public Utility - Water Public Utility - Power Public Utility - Other Private Utility – Water Private Utility – Power Private Utility – Other Special Skill Rescue Unit Telecommunication Transportation Other .

ATIX Resources Secure e-mail Web pages (RISS ATIX Web Page) Alerts and Homeland Security information Web pages (RISS ATIX Web Page) RISS-provided Node system-provided General information Community-specific information Intelligence and collaboration bulletin board (ATIX Bulletin Board) User-identified “conferences”; posting and responding Community-wide Community-specific Private, by invitation On-line keyboard conferencing Secure e-mail direct from board Off-system notification and confirmation

Multi-States Anti-Terrorism Information Exchange MATRIX

Multi-State Anti-Terrorism Information Exchange (MATRIX) Coalition of states sharing CCH, DMV (vehicle registration and/or drivers license), and other types of criminal justice “public” information, to enable factual analysis research California Florida Georgia Kentucky Louisiana Michigan New York Ohio Oregon Pennsylvania South Carolina Utah

Information Sharing / Participation Initiatives….continued RISS / NLETS Interconnection Pilot Project Physical interconnection between RISS and the National Law Enforcement Telecommunications System (NLETS) via frame relay link Authorized RISS users would access the RISS Secure Intranet (riss.net) from their state agency connection to NLETS Access to the RISS Secure Intranet (riss.net) will still require authentication using RISS authentication and VPN software All telecommunications traffic would travel within the confines of the frame relay networks of the RISS Secure Intranet (riss.net) and NLETS Pilot states Arizona, Iowa, Maine, Vermont

Information Sharing / Participation Initiatives….continued JITF-CT RISS Information Exchange System (JRIES) US DOD / DIA OSIS / riss.net interconnection California Anti-Terrorism Information Center (CATIC) NYPD Counter-Terrorism Division (NYPD CTD) Open Source National Virtual Pointer System (NVPS) pilot project NDPIX HIDTA NLETS Conceptual discussion stage

Information Sharing / Participation Initiatives….continued Colorado DPS; Office of Preparedness, Security and Fire Safety RISS ATIX Association of American Railroads AAR Watch Center U.S. DOT and the transportation industry Transportation Information Operations Center (TIOC) National Infrastructure Protection Center (NIPC) Situation awareness information U.S. and Canadian Railroads “The Majors” Regionals Locals .

Information Sharing / Participation Initiatives….continued U.S. Department of Homeland Security (DHS) Pilot Project Information Analysis and Infrastructure Protection Section (DHS IAIP) Arizona, California, Colorado, Florida, Massachusetts, Nebraska, Pennsylvania Law enforcement agencies from each RISS Center region

Information Sharing / Participation Initiatives….continued SBU Federated System DHS TSA Secret Service INS and Border Patrol DOD DOJ State and Local

What is the RISS Secure Intranet? A secure law enforcement communication system among the RISS Intelligence Centers, node agency systems, and authorized individual users collectively known as riss.net

RISS Intelligence Center Regions NESPIN Franklin, MA MOCIC Springfield, MO MAGLOCLEN Newtown, PA WSIN Sacramento, CA RMIN Phoenix, AZ ROCIC Nashville, TN

MOCIC NESPIN WSIN MAGLOCLEN RMIN ROCIC Springfield, MO NESPIN Franklin, MA WSIN Sacramento, CA MAGLOCLEN Newtown, PA Slide 2 – RISS Geographical Regions   This slide represents the boundaries of the six RISS regions and the location of the center headquarters. RMIN Phoenix, AZ ROCIC Nashville, TN

Types of resources available via riss.net RISS Intelligence Center web pages containing links to general and RISS specific law enforcement and public safety related bulletins and information Criminal Intelligence Database Pointer System (RISSIntel / RISSNET II) National Gang Database (RISSGang) Investigative Leads Bulletin Board (RISSLeads) Master (federated) index and search capability against RISS resources and selected public and private Internet resources (RISSSearch) Secure E-mail RISSTraining TechPage

riss.net Nodes . Connected Agencies Connections in progress… CA DOJ (CBI) / LEIU Colorado DPS EPIC CLSS Florida Department of Law Enforcement Missouri State HP Oregon DPS South Dakota DCI CISAnet (formerly SWBSADIS) AZ, CA, NM, TX Utah ULEIN Washington State Patrol Wyoming DCI Connections in progress… NW3C Iowa DPS NLETS Connected HIDTA Agencies Chicago HIDTA Midwest (Kansas City) HIDTA Milwaukee HIDTA Oregon HIDTA South Texas (SWB) (San Antonio) HIDTA Washington/Baltimore HIDTA Gulf Coast (Metairie, LA) HIDTA Los Angeles HIDTA South FL (Miami) HIDTA NY/NJ HIDTA Applications in process… FinCEN ATIX States MATRIX states .

RISS Secure Intranet riss.net Secure network utilizing WEB technology Remote user dial-in Internet access secured via VPN Encapsulated message payload encrypted using triple DES User authentication & authorization at firewall Fine-grained access control; per session access privileges Dual-tiered firewall design protects all data resources Client to second-tier firewall VPN LAN to LAN or server to server VPN Detailed logging FIPS 140-1 compliant Disaster recovery: network and data Continuous intrusion detection and firewall log inspection E-mail virus and trojan detection at server level Recurring security testing by independent authority

RISS Secure Intranet riss.net Fully encrypted virtual private network (VPN) across the Internet to the riss.net gateway firewall Triple DES Three separate 56 bit keys each session AES (2nd Quarter 2003) Encrypted key storage on multiple media types riss.net intranet on frame relay circuits Permanent Virtual Circuits (PVC) on the frame relay Fully encrypted VPN on the PVCs ISDN for frame circuit backup Node LAN connections are on frame relay PVCs with fully encrypted VPNs V-ONE SmartWall (Sun Solaris, Gauntlet, SmartGate) RISSCop (RISS ISP)

RISS Secure Intranet riss.net Initial client access Client software (SmartPass) Installs on Windows 98, 2000, NT, XP On-line registration Web access to Internet firewall via nonstandard port Account activated by RISS security manager Account assigned to specific group via manual process User authenticated and allowed access All traffic converted to a single nonstandard port Permissions stored on SmartGate server Client Key stored on token

Thank You! For further information, please contact: Angelo J. Fiumara, Jr., Deputy Director Regional Information Sharing Systems Office of Information Technology Telephone: (610) 873-9940 Fax: (610) 873-9950 afiumara@risstech.riss.net Mr. James T. Rogers, Director Regional Organized Crime Information Center (ROCIC) 545 Marriott Drive, Suite 850 Nashville, TN 37214 Telephone: (800) 238-7985 jrogers@rocic.riss.net