NSA RAMPART-A

8/12/2019 NSA RAMPART-A

http://slidepdf.com/reader/full/nsa-rampart-a 1/41

TOP SECRET//COMINT//NOFORN

RAMPART-A

Project Overview

1 October 2010




This briefing is classified





RAMPART-A Overview

Covername for NSA’s unconventional special access programto gain access to high-capacity international fiber-optic cables that transit at majorcongestion points around the world.

Program started in 1992 with the establishment of the National Fiber OpticProgram Fund

Four initial global congestion points identifiedExtended Bi-lat partnerships w/FAD to new compartmented efforts

General agreements negotiated:Foreign Partners provide access to cables and host US equipmentUS provides equipment for transport, processing, & analysisNo US collection by Partner and No Host Country collection by USShared tasking & collection

Today….5 on-going relationships2 cooperative relationship (w/ RAM-T)2 emerging relationships




Project Description

(TS//SI) RAMPART-A’s accesses target long-haulleased communications through internationalgateways. Circuit-Switched and Packet-Switch signalsare enabled by foreign partners. Collection andProcessing assets reside on foreign soil and traffic isexfilled back to NSAW.

(TS//SI) Access Types: International Gateway

Switches; End-Point GSM Switches; Leased InternetCircuits; Internet Backbone Routers; Call Records.

(S//SI) Every Country Code in the world is seen atone or more RAMPART-A collection accesses




SSO/RAMPART-A Site Operations

Model

ETSODD

PMD

Site Engineer Collection Manager

Mission Program Manager




Engineering and Technical Services

(ETS)(U//FOUO) Integrate corporate and commercialsolutions

In compliance with differing Third-partyarchitectures

(C) Test end-to-end integrated solutions to meet SSO& Third-party operational requirements

(C) Deploy and support new systems to Third-partycontrolled facilities




Operations and Discovery Division

(ODD)(C) Responsible for the tasking of the collectionsystems

(C) Coordinates system resources with the RAMPART- A partners

(C) Analyzes communications links to optimizecollection resources

(C) Monitors the performance of the collectionsystems




RAM- A ProjectsUS-3237/SMOKYSINK (no 3rd party partner/joint RAM-T)

DNR & DNIUS-3127/AZUREPHOENIX

DNR & DNI

US-3180/SPINNERET

DNR & DNI

US-982/TRANQUIL – Retired June 2010

DNR & DNI

US-3145/MOONLIGHTPATH

DNI & DNR (September 2010)

US-3190/FIREBIRD

DNR & DNIUS-3153/FALCONSTRIKE

DNR & DNI

US-3178/DULCIMER




RAMPART-A Typical Operation

A

B CD

International Cable

USA Country X

Processing Center

Access Point

Partner Analysts NSA Network

E

SECRET//COMINT NETWORK




Sensitivity Factors

(TS//SI//NF//ECI) Compartmentalization

REDHARVEST/RDV • Who is the partner

•

Where is the access

• What is the access

(TS//SI//NF) Cover

Most RAMPART-A Third-party partners work the fiber projectsunder the cover of an overt Comsat effort




Capabilities(TS//SI) Capabilities:

Automated, Continuous, High-Speed Survey of Circuit andPacket Switched Traffic

Packet-Switched selection & session collection

Dial Number Recognition of Circuit-Switched telephony

(S//SI) Deploy, and continually upgrade

Circuit and Packet Switched collectionarchitecture to all RAMPART-A sites




SIGINT Value Added(TS//SI) Product Lines: All A&P product linesuse collection from RAMPART-A for SIGINTreporting

(TS//SI) Productivity/Intelligence gains: Over9,000 SIGINT Product Reports written lastyear with ~49% being Single Source Reports

(TS//SI) Targets within Accesses: Internationalvoice & fax telephony; Users of “webservices” (e.g. –Port 80 e-mail; Chat; VoIP);GSM; Calling Card users




SMOKYSINK

(TS//SI) SMOKYSINK is in “steadystate” mode

(TS//SI) Continuous TU upgrades




AZUREPHOENIX

(S) Site Physical Plant Upgrade2010-2011

(TS//SI) TU deployment earliest Spring2012?

(TS//SI) Partner working on additionalaccesses




SPINNERET

(TS//SI) Cables upgrading withadditional capacity – RAM-A deploying

additional resources to accommodate

(TS//SI) 60 Gbps LPT – October 2009

(TS//SI) Additional 60 Gbps LPTscheduled for late 2010




MOONLIGHTPATH

(S) DNI system deployment – April 2009

(TS//SI) New Cable access survey – May2009

(S) Site B rehab – Winter 2009

(TS//SI) New access in Sept. 2010

(TS//SI) New DNR/DNI system deployment –first phase (DNR) in May 2010. DNI to follow

TU deployment schedule




TRANQUIL

(TS//SI) TRANQUIL shut down inJune, 2010




FIREBIRD

(TS//SI) Unique 3rd party enabledaccess – no NSA processing systems

(TS//SI) Collection System IOC –February 2010

(TS//SI) Working to establish an NSA to

3rd Party partner collection systemtranslation




FLASHMARK

(TS//SI) Access same as FIREBIRD, butallowing US Collection Systems

(TS//SI) Survey – March, 2010

(TS//SI) FIREBIRD/FLASHMARK issue tobe resolved this month.




FALCONSTRIKE

(TS//SI) Survey – September 2009

(TS//SI) Pilot System Deployment – January2010

(TS//SI) Secure Comms Deployment –January 2010

(TS//SI) Two Track FutureSustained system – mid 2012

Pilot System upgrade completed – December 2010




DULCIMER

(TS//SI) Survey – November 2010

(TS//SI) Expected traffic should be largeinternational internet pipes




CONDORSPEAK

(TS//SI) Discussions with Partner – October,2010

(TS//SI) Expected initial traffic will bemetadata from target cable




In Summary

RAMPART-A has access to internationalcommunications from anywhere around

the world

SSO/RAMPART –A stands ready tosupport your intelligence gathering

needs



#$%&'()*+*,-.$/&*0-1#&$*2$

34)#++-,#4.#$2&*5$6+*78+$9-, :%8(8.-)'$

#+#.*55;4-.8)-*4<$='<)#5<$>





Today’s Cable Program

Three Access

Portfolios

RAMPART–A (3rd Party)

WINDSTOP (2nd Party)

Foreign

Corporate

BLARNEY - FISA

FAIRVIEW

STORMBREWOAKSTAR

PRISM

FAA

Unilateral

–

RAMPART-I/X

RAMPART–T (ClanSIG)

-

MYSTIC





Got Fiber??UNCLASSIFIED//FOR OFFICIAL USE ONLY

UNCLASSIFIED//FOR OFFICIAL USE ONLY



(TS//SI//REL)

(TS//SI//REL)

International Internet Growth

(Billions of bits/second)

0

1000

2000

3000

4000

5000

6000

2003 2004 2005 2006

1 Cable

Incredible Challenges…

How To Find Target Communication on a Typical Fiber Optic Cable?

X X X =Simultaneous

Telephone or Internet Sessions

100 Million12 Fibers 10 B bits/Sec64 wavelengths





Partnerships developed jointly with

Foreign Affairs Directorate

Partnering with Foreign SIGINT partners to

enable access to foreign intelligence





RAMPART A

(TS//SI//NF) Unconventional special access program

leveraging Third Party partnerships:

•

High-capacity international fiber transiting major

congestion points around the world

• Foreign Partners provide access to cables and

host U.S. equipment

• U.S. provides equipment for transport,

processing and analysis

• No U.S. collection by Partner and No Host

Country collection by U.S. – there ARE exceptions!

• Shared tasking and collection





Cable to Database

Front End

Cable

Switch

Controller

PINWALEWC-2 &

DEEP DIVE

FASCIALOPERS

MARINA

TRAFFICTHIEFTURMOILT i p p i n g

ACS

BLACKPEARL

TWISTEDPATH

SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL

SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL



3

RAMPART A Sites

!

US-3127/VH AZUREPHOENIX ** – 4mb BW/10gb/day

! US-3145/KX MOONLIGHTPATH ** - ~2mb BW/5gb/day

!

US-3180/9C SPINNERET ** - ~45mb BW/35gb/day

!

US-3237/KE SMOKYSINK (DNR,DNI) - ~45mb BW/30gb/day

! US-3190/21 FIREBIRD (DNR,DNI)** - ~2mb BW





4

The DNI Throttle

Implemented on the SMK Xkeyscore that doesfiltering/selection on Dec 2007; Oct 09 at SPIN;Feb 2010 SMK LPT

Limits ALL Cadence categories to 1Gb/10ksessions/day at US-3180 and US-3237.

Full take stored ONLY on Xkeyscores for ~3days. Will have to query Xkeys for any DNI notforwarded to Pinwale.

1Gb/day may decrease as other RAM A sitesincrease their DNI take.





5

RAM-A Tasking

Ops trained/certified before using the system.

All DNR/DNI tasking completed by Support

Hub; RAM-A CM provides support as needed.

All DNR/DNI tasking is reviewed and Partneroffensive tasking deleted. Deletions based onour taboo/scrubber lists. Deletes not pushedback to TOPIs.

TOPIs cannot review DNI categories for allsites unless cleared REDHARVEST.

Use SMOKYSINK/RAMPART-A to review yourcategories

TOP SECRET//COMINT// NOFORN




TOP SECRET//SI//REL TO USA, DNK

DIR Opening Remarks Guidance !r DP"

T#e DIR $%pica&&% gi'es Opening Remarks !r $#e !&&!(ing $#ree c!nerences

)NORUSA, DENUSA, and S*EDUSA+ u$ #e ma% e asked $! d! !$#ers in (#ic#

case $#e same guidance s#!u&d e !&&!(ed-

DIR S$a #as gi'en us guide&ines $! !&&!( !r $#e Opening Remarks Ta&king

P!in$s- N!$e $#a$ (e #ad (an$ed $! simp&% inc&ude $#ese Opening Remarks

Ta&king P!in$s in !ur E.ec Sum !r $#e 'isi$, u$ DIR S$a $!&d us $#e% needed a

separa$e d!cumen$ !r $#e Opening Remarks and i$ needed $! e in a speciic

!rma$- T#a$ !rma$ is e&!( )e.amp&e pr!'ided is r!m DENUSA &as$ %ear+-

T#e Remarks s#!u&d !u$&ine $#ings $#a$ #a'e een acc!mp&is#ed since $#e &as$

c!nerence, as (e&& as $#ings (e (an$ $! ge$ acc!mp&is#ed in $#is

c!nerence/$#e upc!ming %ear- *e s#!u&d a&s! add an%$#ing e&se AD (an$s

DIRNSA $! c!n'e%-

Once $#e Opening Remarks Ta&king P!in$s are appr!'ed % appr!pria$e DP"

&eaders#ip )a$ &eas$ DP" Oice C#ie &e'e&+, $#e CDO s#!u&d pr!'ide $#e Opening

Remarks in $#e a$$ac#ed !rma$ $! $#e !&&!(ing a&iases a$ &eas$ 0 usiness da%s

in ad'ance ! $#e e'en$1

TO1 DL DIRSPEAK

CC1 D DIR S$a, DP" Oice C#ie/Depu$%

Per guidance r!m DIR S$a, i$ is $#e resp!nsii&i$% ! $#e !&ks !n $#e

DIRCO22S a&ias $! prin$ !u$ $#e remarks !n 345 cards and pr!'ide $!

$#e DIR s$a-

)Upda$ed !n 0/6/78"0+

TOP SECRET//SI//REL TO USA, DNK



SECRET//REL TO USA, AUS, CAN, G9R, N:L

DENUSA

6-8 June

(S//REL TO USA, DNK) Thank the Danes for ther

!on"erfu# hos$ta#t% the% e&ten"e" to %ou an" %our"e#e'aton "urn' %our arh *st to +o$enha'en

(TS//S//REL TO USA, DNK)

(S//REL TO USA, DNK)

(TS//S//REL TO USA, DNK) E.$has<e NSA4s

o..t.ent to the s$ea# aess an" assstn' DDS n.ana'n' the aess

Re.n" the Danes of the #on' NSA-DDS $artnersh$

!orkn' a3#e aess !th

Note that !e #ook for!ar" to ne! areas of

oo$eraton

(TS//REL TO USA, DNK) ='h#'ht that NSA s !##n' to

en'a'e !th DDS on %3er "efense

SECRET//REL TO USA, AUS, CAN, G9R, N:L

NSA RAMPART-A

Documents

Transcript of NSA RAMPART-A