TOP SECRETHCOMINT/REL TO USA, FVEY
(U) Converged Analysis of Smartphone Devices Identification/Processing/Tasking — All in a day's work
TOP SECRETIICOMINT/REL TO USA, FVEY
Converged mobile devices offering advanced capabilities, often with PC-like functionality. No set industry standard definition. Boasts powerful processors, memory, larger screens and open operating systems.
TOP SECRETHCOMINT/REL TO USA, FVEY 2 TOP SECRETKOMINTIREL TO USA, FVEY Economics of Transportation
■ The gradual "blurring" of telecommunications, computers, and the Internet ■ Multifaceted layering technologies ■ Examples of convergence in SIGINT: 1221. lea. vs ➢Blackberry, iPhone data, Smartphones
➢ VOIP ➢Wireless Local Loop
➢ GPRS General Packet Radio Service
TOP SECRET/iCOMINT/REL TO USA, FVEY 3 TOP SECRETUCOMINTIREL TO USA, FVEY SmartPhone Applications
■ Visual Communicator — Free application that combines Instant Messaging, Photo-Messaging and Push2Talk capabilities on a mobile platform. VC used on GPRS or 3G networks;
■ Symbian Operating System supporting encryption programs. ■ WinZip, compression and encryption program.
TOP SECRE17/COMINT/REL TO USA, FVEY 4 TOP SECRETHCOMINTREL TO USA, FVEY Usage/Features
■ Social Networking via Flixster Social Networking site allowing users to share movie ratings, discover new movies and meet others with similar movie taste. ■ Google Maps features ■Photo capture and editing capabilities ■Phone settings ■Mobile Facebook Apps (iPhone/Android)
TOP SECRETHCOMINT/REL TO USA, FVEY 6 TOP SECRETIICOMINT/REL TO USA, FVEY Location Based Services
Where is the target?
■ GPRS Dataset — breaking down barriers ■ Providers catering to users based on location ■ Android Phones pass GPS data in the clear ■No longer DNI/DNR
TOP SEC RETHCOMINT/REL TO USA, FVEY 7 TOP SECRETHCOMINT/REL TO USA, FVEY Taking a Closer Look Photo Capture Software - • iPhone Geotags for Photos Raw tags coming through from a variety of devices ■ Flixster App uses GPRS ■ Flickr/Photobucket ■ Mobile Facebook Apps Uploads
TOP SECRETHCOMINT/REL TO USA, FVEY 8 TOP SECRETHCOMINT/REL TO USA, FVEY Processing
All in the Metadata, not the pretty pictures ■ Unique applications require unique analysis ■ GPS Indicators (sent to the server and towers for both phone and application) ■ VoIP Indicators (multiple services) ■ Type of Phone and Apps
TOP SECRETHCOMINTREL TO USA, FVEY 9 TOP SECREP/COMINT/REL TO USA, FVEY Identification via Xkeyscore
■ Make use of fingerprints in Xkeyscore via the EXIF metadata plugin ■ Fingerprints for images (jpeg, tiff, gifs etc.) ■ Examine the raw XML ■ Provides device and time/location for the image
TOP SECRETMOMINT/REL TO USA, FVEY 10 TOP SECRETHCOMINT/REL TO USA, FVEY Golden Nugget! Perfect Scenario Target uploading photo to a social media site taken with a mobile device.
What can we get?
TOP SECREMCOMINT/REL TO USA, FVEY 11 TOP SECRETI/COMINT/REL TO USA, FVEY User Activity Leads
■ Examine settings of phone as well as service providers for geo-location; specific to a certain region ■Networks connected ■ Websites visited ■ Buddy Lists ■ Documents Downloaded ■ Encryption used and supported ■ User Agents
TOP SECRETHCOMINT/REL TO USA, FVEY 12 TOP SECRETHCOMINTIREL TO USA, FVEY Targeting
Targeting both Telephony and DNI systems ■ Call Logs ■ SMS ■ SIM Card Leads ■ Email address ■ IMEI/IMSI ■Unique Identifiers ■ Blackberry PINS
TOP SECRETHCOMINT/REL TO USA, FVEY 13
TOP SECRETHCOMINT/REL TO USA, FVEY
•Additional exploitation •Target Knowledge/Leads •Location •Target Technology •Denote Media used
TOP SECRETI/COMINTREL TO USA, FVEY 14 TOP SECRETHCOMINT/REL TO USA, FVEY Conclusion
■ Challenge is how to tag data for analysts ■We can geo phones from virtually anywhere ■Buried GeoStamp from Phone or Apps ■Xkeyscore/Marina ■ Tasking systems
TOP SECRET//COMINT/REL TO USA, FVEY 15