Australian High Tech Crime CentreInternational Cooperation – An Australian Perspective

Wednesday, 7 November 2007

Australian High Tech Crime Centre

Agenda

1. AFP International Network 1. AFP International Network

2. Relationships (Forums & Conferences)2. Relationships (Forums & Conferences)

3. Capacity Building3. Capacity Building

4. Collaboration4. Collaboration

Australian High Tech Crime Centre

AFP INTERNATIONAL NETWORKAFP INTERNATIONAL NETWORK

SOUTH PACIFICSOUTH PACIFIC HoniaraHoniara

Port Moresby Port Moresby Port VilaPort Vila

SuvaSuva Wellington Wellington

Bali Bali

BangkokBangkokBangladeshBangladesh

BeijingBeijing

Chiang MaiChiang Mai

ColomboColombo

DhakaDhaka

DiliDili

GuangzhouGuangzhou

HanoiHanoi

Ho Chi Minh CityHo Chi Minh City

Hong KongHong Kong

Islamabad Islamabad

JakartaJakarta

Kuala LumpurKuala Lumpur

ManilaManila

New DelhiNew Delhi

Phnom PenhPhnom Penh

RangoonRangoon

SingaporeSingapore

VientianeVientiane

ASIAASIA

AMERICASAMERICASBogotá Bogotá BrasiliaBrasilia

New York (UN)New York (UN)Washington DCWashington DCEUROPE & EUROPE &

AFRICAAFRICA

BeirutBeirutBelgradeBelgrade

DubaiDubaiThe HagueThe Hague

LondonLondonLyon (Interpol)Lyon (Interpol)

PretoriaPretoria

Currently – 86 Officers at 37 posts in 29 Countries

Moscow

Abuja

Australian High Tech Crime Centre

Partnerships

• Community crime in an international arena – Inter-Governmental– Police & law enforcement– Industry (Banks, Card Companies, ISP’s, AV Vendors)– Community

‘Think globally, act locally’

(Greenpeace)

Australian High Tech Crime Centre

Relationships

STRATEGIC ALLIANCE CYBER CRIME WORKING GROUP In 2006, the five-eyes Strategic Alliance Group was formed to develop the most effective ways to collectively fight against the most pervasive and damaging global crime problems. Within this structure are five active sub-groups which include the Cyber Crime Working Group (CCWG).

The CCWG discusses and analyses current and future global cyber crime threats and develops collaborative initiatives to best address these threats.

The Serious Organised Crime Agency (SOCA) in the UK hosted the first Strategic Alliance Group meeting in June 2006. Since this time meetings have been held in Wellington, New Zealand and San Diego, USA. A range of new outcomes emerge from each of these meetings which include areas such as information and intelligence sharing, training initiatives and public awareness strategies.

Australian High Tech Crime Centre

Relationships

(CTINS) - Cybercrime Technology Information Network System – Annual Conference & IT Crime Investigation and Training Seminar

The CTINS Conference & IT Crime Investigation and Training Seminar is an annual event hosted in Japan by the National Police Agency (NPA) of Japan for law enforcement agencies in the Asia region. This conference provides an opportunity to network with other LEAs in the Asia region who are responsible for the conduct and management of technology enabled crime investigations in their respective jurisdictions.

Australian High Tech Crime Centre

CTINS Cont…….

An excellent forum to discuss intelligence sharing arrangements and develop strategies to work closer together in areas such as:

new and emerging technologies facing LEAs in the Asia region; legislation; development and delivery of training; and ‘real-time’ exchange of operational and intelligence information on a

police-to-police basis; and strengthening cooperative relationships.

The CTINS network is a secure 24 hours a day information technology network developed by the NPA of Japan to exchange high tech crime information with LEAs from China, Hong Kong, China, India, Indonesia, Japan, Korea, Malaysia, Philippines, Singapore and Thailand. The AHTCC now has a single connection to CTINS which provides both the AFP and AHTCC with the ability to securely exchange and request information on high tech crime issues with operational practitioners and managers on a 24 hours a day basis.

Australian High Tech Crime Centre

Relationships

INTERNATIONAL BOTNET TASKFORCE CONFERENCES

Usually held biannually.

Microsoft have the lead on this conference (in July 2007 the AHTCC and Microsoft co-hosted the conference in Sydney)

Predominantly a discussion about the global and regional technical aspects and investigations into Botnets.

Next conference to be held in Lyon, France in early 2008.

Australian High Tech Crime Centre

Relationships

VIRTUAL GLOBAL TASKFORCE (VGT)

VGT is a collaborative alliance involving law enforcement agencies from around the world working together to combat online child sex exploitation and to make the Internet a safer place.

AHTCC is proud to be a founding member of the VGT which was established in 2003. Other members include the UK Child Exploitation and Online Protection team, the Royal Canadian Mounted Police, Interpol and the United States Department of Homeland Security.

Australian High Tech Crime Centre

Relationships

OTHER IMPORTANT RELATIONSHIPS Member of the International Watch and Warning Network (IWWN) –

sharing of information of incidents, vulnerabilities, malicious code and threats through building a worldwide network of computer security incident response teams.

Anti-Phishing Working Group - global pan-industrial and law enforcement association focused on eliminating the fraud and identity theft that result from phishing, pharming and email spoofing of all types.

2,600+ members (banks, ISP’s, technology vendors, national/provincial LEA worldwide, private companies & agencies)

Australian High Tech Crime Centre

Building Capacity

Rationale:

Law enforcement ill-equipped to fight online crime Lacking technical skills and equipment, international cooperation,

recognition of extent of crime or criminal methods

Leading Examples:

Vietnam High Tech Crime Centre & Conference Beirut Cybercrime Unit Bangladesh workshops

Australian High Tech Crime Centre

Collaboration

Broker collaboration with international agencies to drive investigations

FBI – Coolminer + vpn tunnel

Microsoft – botnet taskforce

Interpol – Project Goldphish

working with agencies to set up arrangements with overseas communication providers, i.e.. Hotmail, Yahoo, Google

Australian High Tech Crime Centre

Collaboration Cont….

Provide advice & coordination on training & technical measures to combat trans-national crime

assist in development of HTC in Vietnam

advice to Dutch HTC

host numerous overseas visitors

annual AHTCC workshop or colloquium’s – 3 days

Australian High Tech Crime Centre

Collaboration Cont….

Cyber Storm IIa five day exercise conducted in March 2008.

the requirement for close national and international working relationships to tackle common problems including vulnerability analysis and the release of consistent advisories.

Seven (7) sectors are represented from Australia including State/Territory/Commonwealth agencies; the banking & finance sector; telecommunications; water; energy; and information technology. This translates to 50-60 different organisations and the number swells when taking into consideration other players from around the world

Australian High Tech Crime Centre

Questionsor

Comments