Cyber Division Strategic Outreach & Initiatives Section Innocent Images National Initiative Unit and...

Cyber DivisionCyber DivisionStrategic Outreach & Initiatives Strategic Outreach & Initiatives

SectionSection

Innocent Images National Initiative UnitInnocent Images National Initiative Unitandand

Innocent Images Operations UnitInnocent Images Operations Unit

The Innocent Images National The Innocent Images National Initiative (IINI), a component of Initiative (IINI), a component of FBI’s Cyber Division, is a cyber-FBI’s Cyber Division, is a cyber-

focused, intelligence-driven, focused, intelligence-driven, proactive, multi-agency proactive, multi-agency

investigative program to combat investigative program to combat the proliferation of child the proliferation of child

pornography and other types of pornography and other types of child sexual exploitation crimes child sexual exploitation crimes facilitated by child predators.facilitated by child predators.

How did Innocent Images How did Innocent Images begin?begin?

Launched with a missing child Launched with a missing child investigation in Marylandinvestigation in Maryland

Subjects identified using chat Subjects identified using chat rooms to exchange child rooms to exchange child exploitation materialexploitation material

19951995: FBI Baltimore initiated : FBI Baltimore initiated the first UCOthe first UCO

19971997: Congress began funding : Congress began funding Innocent ImagesInnocent Images

Innocent Images Priority Innocent Images Priority ClassificationsClassifications

305A305A: :

Electronic Electronic Groups/Organizations/Enterprises for ProfitGroups/Organizations/Enterprises for Profit

305C305C: :

Producers/Manufacturers/Traders of Child Producers/Manufacturers/Traders of Child PornographyPornography

Innocent Images StatisticsInnocent Images Statistics

237 Agents dedicated in the field237 Agents dedicated in the field 5,952 Open Investigations5,952 Open Investigations 38 Group II Undercover Operations (UCO)38 Group II Undercover Operations (UCO) 1 Group I UCO at FBIHQ 1 Group I UCO at FBIHQ 473 Arrests FY09473 Arrests FY09 45 Information & Indictments FY0945 Information & Indictments FY09 552 Convictions FY09552 Convictions FY09

Innocent Images National Initiative Innocent Images National Initiative UnitUnit

Program management for National InitiativeProgram management for National Initiative Oversees all Undercover Group II OperationsOversees all Undercover Group II Operations Develops policyDevelops policy Conducts liaison with federal partnersConducts liaison with federal partners Training for all Innocent Images online covert Training for all Innocent Images online covert

employeesemployees Domestic and International training for our law Domestic and International training for our law

enforcement partnersenforcement partners Research and DevelopmentResearch and Development

New Orleans

Innocent Images National Initiative Undercover Operations (UCO)

Salt Lake CitySan Francisco

Portland

Dallas

Houston

Oklahoma City

Phoenix

Kansas City

Chicago

Atlanta

Tampa

Detroit

ClevelandBaltimore

New Haven

Philadelphia

Los Angeles

Buffalo

Memphis

New York

Boston

Miami

38 Innocent Images Group II UCOs

1 Innocent Images Group I UCOs

Sacramento

Minneapolis

Pittsburgh

Newark

Albany

Columbia

Washington, DC

Innocent Images Unit, Calverton MD

Birmingham

St. Louis

San Diego

El Paso

Seattle

Anchorage

Honolulu

Denver

Albuquerque

Omaha

San Antonio

Little Rock

JacksonMobile

Jacksonville

Knoxville

Charlotte

NorfolkRichmond

Indianapolis Cincinnati

LouisvilleLas Vegas

Milwaukee

Springfield

San Juan

18 Divisions without a UCO

IINI Forensic LaboratoryIINI Forensic Laboratory

Established in Linthicum, MDEstablished in Linthicum, MD

Comprised of ten Cyber Forensic Comprised of ten Cyber Forensic Examiners (CART Certified)Examiners (CART Certified)

The Lab assists with:The Lab assists with: Complex forensic IINI examinations;Complex forensic IINI examinations; The IINI forensic backlog; The IINI forensic backlog; Research and development of high-Research and development of high-

tech tools for IINI investigationstech tools for IINI investigations

Emerging TechnologiesEmerging Technologies

Conducts complex Conducts complex national and national and international international investigationsinvestigations

Innocent Images Innocent Images International Task ForceInternational Task Force

Group I Undercover Group I Undercover OperationOperation

Innocent Images Operations Innocent Images Operations UnitUnit

Innocent Images International Innocent Images International Task ForceTask Force

Created in 2004Created in 2004 Comprised of child sexual exploitation Comprised of child sexual exploitation

officers from across the worldofficers from across the world Fosters real-time exchange of child Fosters real-time exchange of child

pornography and intelligence globallypornography and intelligence globally Virtual Special Interest Group on Virtual Special Interest Group on

www.LEO.gov for current and former for current and former International Task Force OfficersInternational Task Force Officers

CanadaCanada

Dominican RepublicDominican Republic

GreeceGreece

ItalyItaly

JapanJapan

MexicoMexico

SpainSpain

Innocent Images Innocent Images International International

Task ForceTask Force

Spring 2009 Task Force

To Date:To Date: 3,000 leads forwarded domestically 3,000 leads forwarded domestically 1,000 leads disseminated internationally1,000 leads disseminated internationally 67 countries have received IIITF leads67 countries have received IIITF leads

Innocent Images International Innocent Images International Task Force StatisticsTask Force Statistics

Innocent Images Case Study #1Innocent Images Case Study #1:: Subject Ivory DickersonSubject Ivory Dickerson

Consensual monitoring by Cyber Agents showed Consensual monitoring by Cyber Agents showed intrusion utilizing the intrusion utilizing the Bifrost TrojanBifrost Trojan

IINI Agents identified 20+ hacker tool applicationsIINI Agents identified 20+ hacker tool applications

Subject utilized IP Addresses in North Carolina, Saudi Subject utilized IP Addresses in North Carolina, Saudi Arabia and Thailand to conduct intrusions into “child-Arabia and Thailand to conduct intrusions into “child-victims” computersvictims” computers

Evidence found indicates as many as 3,000 victimsEvidence found indicates as many as 3,000 victims

12/10/200712/10/2007: Subject sentenced to 110 years in federal : Subject sentenced to 110 years in federal prisonprison

20062006: Australian police contacted IINI about : Australian police contacted IINI about international ring of CP collectors with U.S. tiesinternational ring of CP collectors with U.S. ties

Clues included: shots of a Pontiac Aztec registered in Clues included: shots of a Pontiac Aztec registered in GA; Mary Kay cosmetics; mother’s MySpace page with GA; Mary Kay cosmetics; mother’s MySpace page with family photos; a unique bedspread; a hotel room in GAfamily photos; a unique bedspread; a hotel room in GA

FBI RH set leads to FBI ATFBI RH set leads to FBI AT

06/200806/2008: Huskey arrested – married father of two, : Huskey arrested – married father of two, preacher’s son and youth tennis instructorpreacher’s son and youth tennis instructor

03/200903/2009: Huskey sentenced to 70 years for production, : Huskey sentenced to 70 years for production, receipt and distribution of CPreceipt and distribution of CP

Innocent Images Case Study Innocent Images Case Study #2#2::

Subject James HuskeySubject James Huskey



FBI Richmond

worked with local law

enforcement to locate the victim and subject.


Subject James Huskey’s ConfessionSubject James Huskey’s Confession


“Tori” Series“Tori” Series Plate indicates a Plate indicates a date date

of birthof birth of July 21, of July 21, 19951995

Child’s name is Child’s name is VictoriaVictoria

FBI subpoena of FBI subpoena of Social Security Social Security Administration yields Administration yields 49 potential leads49 potential leads

NH Division worked with RH Division to NH Division worked with RH Division to perform surveillance on subject’s homeperform surveillance on subject’s home

03/30/200903/30/2009: Child interviewed in : Child interviewed in Greenwich, CT, and disclosed abuseGreenwich, CT, and disclosed abuse

04/200904/2009: Subject Bill Ohene, former : Subject Bill Ohene, former boyfriend of Tori’s mother, arrested for boyfriend of Tori’s mother, arrested for child pornography productionchild pornography production

Innocent Images Case StudyInnocent Images Case Study:: “Tori” Series “Tori” Series

IINI Image CatalogIINI Image Catalog

Created in collaboration with NCMECCreated in collaboration with NCMEC

Serves as a single repository for images/videos Serves as a single repository for images/videos of child sexual abuseof child sexual abuse

Central location of comparison for law Central location of comparison for law enforcementenforcement

Vehicle to determine distribution of imagesVehicle to determine distribution of images

Cyber TipLine and Innocent Cyber TipLine and Innocent ImagesImages

Review all CyberTips where subject jurisdiction cannot be determinedReview all CyberTips where subject jurisdiction cannot be determined

Triage 125+ per dayTriage 125+ per day

2500+ per month2500+ per month

Issue administrative subpoenas to ISPsIssue administrative subpoenas to ISPs

Set leads and provide case packets to the Field and LegatsSet leads and provide case packets to the Field and Legats

Yahoo! Reported CP was Yahoo! Reported CP was uploaded to Flickr accountuploaded to Flickr account

02/200702/2007: IINI sent : IINI sent investigative packet to FBI investigative packet to FBI MPMP

03/200703/2007: Indicted and : Indicted and became a fugitivebecame a fugitive

04/200804/2008: Photo featured on : Photo featured on AMW and arrested one day AMW and arrested one day laterlater

Pled guilty to possession Pled guilty to possession and sentenced to 5 yearsand sentenced to 5 years

CyberTip Case Study: #437956CyberTip Case Study: #437956Subject Eric LaceySubject Eric Lacey

Cyber TipLine and Innocent Cyber TipLine and Innocent Images StatisticsImages Statistics

Number of Subpoenas Issued, Packages Referred, Leads Covered

540

60

550

452

1171

539

170

0

200

400

600

800

1000

1200

# of Subpoenas Issued onCyberTip Reports

# of Packages Referred toFBI Field Offices and

Legats

# of Leads Covered # of Websites TakenDown

January 1, 2008 - May 31, 2008 June 1, 2008 - February 21, 2009

Cyber TipLine and Innocent Cyber TipLine and Innocent Images StatisticsImages Statistics

10

12

1

14

6

2

4

2

64 3 3 3 3 2 2 2 1 1 1 1 1 1 1 1

0

5

10

15

20

25

Net

her

lan

ds

Mex

ico

Ven

ezu

ela

Au

stra

lia

Can

ada

Ger

man

y

Bel

giu

m

Per

u

En

gla

nd

Fra

nce

Sw

itze

rlan

d

Au

stri

a

Jap

an

Cyp

rus

Gre

ece

Icel

and

No

rway

Ho

nd

ura

s

Arg

enti

na

Ital

y

Fin

lan

d

Total Packages sent to Legat Offices

2009

2008

QUESTIONS?QUESTIONS?SSA Jacqueline DougherSSA Jacqueline Dougher

Innocent Images National InitiativeInnocent Images National Initiative

[email protected]@ic.fbi.gov

Cyber Division Strategic Outreach & Initiatives Section Innocent Images National Initiative Unit and...

Documents

Transcript of Cyber Division Strategic Outreach & Initiatives Section Innocent Images National Initiative Unit and...