11/05/05SMU Homecoming1 DATA MINING AND TERRORISM Margaret H. Dunham CSE Department Southern Methodist University Dallas, Texas /5/05 This material is based upon work supported by the National Science Foundation under Grant No
11/05/05SMU Homecoming2 Data Mining Introductory and Advanced Topics, by Margaret H. Dunham, Prentice Hall, DILBERT reprinted by permission of United Feature Syndicate, Inc.
11/05/05SMU Homecoming3 OBJECTIVE Explore the use of data mining techniques in identifying terrorists and criminals.
11/05/05SMU Homecoming4 Data Mining nFinding hidden information in a database nFit data to a model nSimilar terms n Exploratory data analysis n Data driven discovery n Deductive learning n Knowledge Discovery in Databases
11/05/05SMU Homecoming5 PROBLEMS nNot well defined nNot enough historical data nAlgorithms not well suited Select name From Where job = Emp “Programmer” ??? “Terrorist”
11/05/05SMU Homecoming6 FBI FBI Strategic Focus 1.html “Substantially enhance analytical capabilities with personnel and technology” “Expand use of data mining, financial record analysis, and communications analysis to combat terrorism”
11/05/05SMU Homecoming7
11/05/05SMU Homecoming8 But it isn’t Magic nYou must know what you are looking for nYou must know how to look for you Suppose you knew that a specific cave had gold: What would you look for? How would you look for it? Might need an expert miner
11/05/05SMU Homecoming9 Dallas Morning News October 7, 2005
11/05/05SMU Homecoming10
11/05/05SMU Homecoming11 BIG BROTHER ? nTotal Information Awareness n n n hp?id=0 hp?id=0 n n nTerror Watch List n r.htm r.htm n 511_8047_tc_210.htm 511_8047_tc_210.htm n n
11/05/05SMU Homecoming12 “If it looks like a duck, walks like a duck, and quacks like a duck, then it’s a duck.” Description BehaviorAssociations Classification Clustering Link Analysis (Profiling) (Similarity) “If it looks like a terrorist, walks like a terrorist, and quacks like a terrorist, then it’s a terrorist.”
11/05/05SMU Homecoming13
11/05/05SMU Homecoming14 For a Terrorist, Similarity with What??? Distance from What??? nTypically distance from a representative of that class. nA known terrorist? nTSA n y_failures/ y_failures/ n G1683.cfm G1683.cfm n ps_scrapped/ ps_scrapped/ n
11/05/05SMU Homecoming15 “Proof” that Bin Laden was involved in 9/11 nhttp:// oof_of_saddam.htmhttp:// oof_of_saddam.htm
11/05/05SMU Homecoming16 Jialun Qin, Jennifer J. Xu, Daning Hu, Marc Sageman and Hsinchun Chen, “Analyzing Terrorist Networks: A Case Study of the Global Salafi Jihad Network” Lecture Notes in Computer Science, Publisher: Springer-Verlag GmbH, Volume 3495 / 2005, p. 287.
11/05/05SMU Homecoming17