1 john hoyt branch chief, knowledge management command, control and interoperability division...
TRANSCRIPT
1
John Hoyt Branch Chief, Knowledge ManagementCommand, Control and Interoperability DivisionScience and Technology Directorate October 29, 2008
Knowledge Management
2
CNR Annual Program Status Review 8 February 2005
Command, Control and Interoperability
Vision Stakeholders have comprehensive, real-time, and relevant information to create and maintain a secure and safe Nation.
MissionThrough a practitioner-driven approach, the Command, Control and Interoperability Division (CID) creates and deploys information resources to enable seamless and secure interactions among homeland security stakeholders.
3
Command, Control and
Interoperability (CID)
Reconnaissance,Surveillance, and
Investigative Technologies
Cyber SecurityCommunication,
Interoperability and Compatibility
Knowledge Management
Tools
Basic/Futures Research
CID: OrganizationManaged by the Department of Homeland Security’s (DHS) Science and Technology Directorate, CID delivers on its mission through five thrust areas.
4
Knowledge Management Tools
• Develops tools and methods to process and analyze massive amounts of information that are widely dispersed and in multiple forms. • Works collaboratively to complement efforts in the intelligence, law enforcement, and homeland security communities.
• Provides knowledge management capabilities to reduce the risk of terrorist attacks and to prepare for and respond to natural and man-made disasters.
55
Planned Demos/Deliverables/Transitions• Deliverable 1: Conduct interstate photo sharing pilot with
North Carolina, South Carolina, Virginia law enforcement agencies – FY 2008-2009
• Deliverable 2: Evaluate handhelds and wireless federated query applications in integrated local, state, and Federal law enforcement information sharing environments (Automated Regional Justice Information System, AZLink) – FY 2008-2010
• Transition 3: Interconnect fragmented regional systems using existing public safety network infrastructure and non-proprietary software components – FY 2009-2012
Homeland Security Payoff• Improves ability of law enforcement and other emergency
agencies to protect U.S. citizens against terrorism, national disasters, and criminal acts
• Customers: Customs and Border Protection (CBP); Immigration and Customs Enforcement (ICE); 250 other local, state, and Federal law enforcement organizations via Nlets (International Justice and Public Safety Network), Automated Regional Justice Information System, and AZLink
• Stakeholders: Other law enforcement organizations
Product Description• Develop and evaluate information sharing technologies to
support cooperative efforts of local, state, and Federal government entities. Transitioned Regional Information Sharing and Collaboration products include temporal and criminal activity network visualization tools and wireless federated query applications
• Deliverable Type: New Technology
Regional Information Sharing and CollaborationEHC IS-FY09-01: Real-Time Data Processing and Visualization Gap: ISG-07-07v1 – Require on-demand management, analysis, and visualization of information in multiple forms and from diverse, distributed sources
66
Planned Demos/Deliverables/Transitions• Deliverable 1: Draft technical report for current and planned
state with recommended approach to follow-up work – FY 2008• Deliverable 2: Conduct market survey; provide improved tool
recommendations – FY 2008 • Deliverable 3: Develop NIEM tools requirements analysis – FY
2009• Deliverable 4: Design technology specifications for threat
assessment and mitigation exchange standards – FY 2010• Deliverable 5: Pilot information exchange standards and
protocols in development environments – FY 2011• Deliverable 6: Conduct impact study on current NIEM model;
recommend development strategy for element-level tagging – FY 2012
Homeland Security Payoff• Improves NIEM development tools to provide a more
robust information exchange process across the DHS enterprise
• Customers: DHS Chief Information Officer and Enterprise Data Management Office
• Stakeholders: DHS-wide users of NIEM and Information Exchange Package Documentation
Product Description• Support the Department of Homeland Security (DHS)
National Information Exchange Model (NIEM) implementation team with the identification, refinement, and evaluation of development tools and other technologies to support NIEM data model utilization across the homeland security community
• Deliverable Type: Technical Report, Requirements Generation
National Information Exchange ModelEHC IS-FY09-02: Threat Dissemination Standards
Gap: ISG-07-18av1 – Lack of standards and protocols for rapidly sharing information within sectors and across sectors to defeat terrorist threats
77
Planned Demos/Deliverables/Transitions• Deliverable 1: Deploy Critical Infrastructure Inspection
Management System (CIIMS) to the Maryland State Police and Los Angeles Police Department (LAPD) Aviation Support Division – FY 2008
• Deliverable 2: Develop functional requirements report for broader applications of CIIMS– FY 2008-2009
• Deliverable 3: Develop plan and recommendations report to evolve CIIMS for broader applications – FY 2009
• Deliverable 4: Evolve CIIMS to support the broader law enforcement community and function on other platforms (e.g., cars, boats, on foot) – FY 2010-2013
Homeland Security Payoff• Assists aerial law enforcement in protecting Critical
Infrastructure/Key Resources through structured monitoring, data collection, and information sharing within the local, state, and Federal intelligence communities
• Customers: Maryland State Police and LAPD• Stakeholders: Office of Infrastructure Protection and
National Protection and Programs Directorate (NPPD)
Product Description• Prototype information management system for law
enforcement aviation units to effectively manage critical infrastructure inspection prioritization, data collection, data storage, and intelligence interfacing
• Deliverable Type: New Technology, Requirements Generation
Critical Infrastructure Inspection Management SystemEHC IS-FY09-02: Threat Dissemination StandardsGap: ISG-07-18av1 – Lack of standards and protocols for rapidly sharing information within sectors and across sectors to defeat terrorist threats
88
Identity Management Testbed – Knowledge Products
Planned Demos/Deliverables/Transitions• Deliverable 1: Identity Management Test Bed established
at Johns Hopkins University Applied Physics Laboratory to test, pilot, and validate IdM concepts – FY 2008
• Deliverable 2: Test and evaluate emerging IdM technologies; topics include extensible access control markup language, access control, secure token service, fine grained authorization, and malicious internal user simulation – FY 2009-2014
Homeland Security Payoff• Enhances security of DHS information sharing
environments by improving authentication for persons, hardware devices, and software applications
• Customers: ICE, Transportation Security Administration, United States Coast Guard, DHS Office of Intelligence and Analysis (I&A), Federal Emergency Management Agency (FEMA)
• Memorandum of Understanding (MOU) Status: Signed
Product Description• Test, pilot, and validate an ongoing stream of technology,
process and policy concepts, and solutions related to an Identity Management (IdM) infrastructure.
• Based on the operational needs of components, provide guidance on synchronizing IdM approaches across DHS
• Deliverable Type: Knowledge Products
Gap: ISG-07-08v1 – Lack of scalable technologies, standards, and policies to manage identities, rights, and authorities in an organization's networks
EHC IS-FY09-03: Network Identity Management
99
Planned Demos/Deliverables/Transitions• Deliverable 1: Broaden Universal Markup Language
model of software – FY 2008• Deliverable 2: Analyze alternative methods to improve
SLOSH software system – FY 2008• Deliverable 3: Publish specification/design for
enhancements to SLOSH model and display program – FY 2008
• Deliverable 4: Update code – FY 2008• Deliverable 5: Enhance display program – FY 2009• Deliverable 6: Automate verification/validation process –
FY 2010
Homeland Security Payoff• 30% performance improvement of SLOSH model • Enables faster turn-around in surge height prediction
output, covering more specific landfall locations and incorporating forecasting updates more quickly into the emergency management decision process
• Customer: FEMA• Stakeholders: National Oceanic and Atmospheric
Administration
Product Description• Model and analyze the National Hurricane Center’s legacy
software for hurricane surge prediction to enable modernization and to improve the efficiency and capability of the Sea, Lake, Overland Surge Due to Hurricane (SLOSH) system
• Deliverable Type: Modeling and Simulation, Technical Reports, Technical Studies
Sea, Lake, Overland Surge Due to HurricaneEHC IS-FY09-05: Data Fusion TechnologiesGap: ISG-07-02v1 – Lack integrated technologies and standards for fusing data from multiple sensors to support threat identification and decision analysis
10
Emergency Operations Center
10
Planned Demos/Deliverables/Transitions• Deliverable 1: Develop Mid-Atlantic Region Requirements
Communications and Interoperability White Paper – FY 2008
• Deliverable 2: Develop Emergency Operations Center Resource Management Requirements-based White Paper – FY 2008
• Deliverable 3: Develop EOC Command and Control Requirements White Paper – FY 2008
• Deliverable 4: Develop Emergency Operations Analysis Paper – FY 2008
• Deliverable 5: Develop Emerging Requirement Analysis Papers – FY 2009-2010
Homeland Security Payoff• Provides and supports interoperability framework and
integrates multiple information sharing systems• Supports situational awareness and innovative exercise
concepts and exercise platforms• Customers: Local, state, and Federal EOCs
Product Description• Determine core EOC requirements, review solution
options, and produce an Emergency Management Operations Toolkit
• Deliverable Type: Requirements Generation
Gap: ISG-07-02v1 – Lack integrated technologies and standards for fusing data from multiple sensors to support threat identification and decision analysis
EHC IS-FY09-05: Data Fusion Technologies
11
Fusion Center Concept Pilot
11
Planned Demos/Deliverables/Transitions• Deliverable 1: Assess and prioritize IT tool requirements
with fusion centers– FY 2009• Deliverable 2: Evaluate current fusion center technologies
aligned with prioritized operational requirements – FY 2009
• Deliverable 3: Structured evaluation of the ability of existing GOTS/COTS tools to fill fusion center needs, with leave behind – FY 2009
• Deliverable 4: Identify gaps/needs for future R&D – FY 2009
Homeland Security Payoff• Establishes technical need/capability baseline that
improves the future development and integration of technologies within the fusion centers
• Customer: DHS I&A State and Local Fusion Center Program Office
Product Description• Conduct operational evaluation of current fusion center
technologies to baseline existing capabilities and needs• Develop catalogue of common fusion center tools for
information sharing, geospatial analysis, suspicious activity reporting, and case management requirements
• Deliverable Type: Knowledge Product
Gap: ISG-07-02v1 – Lack integrated technologies and standards for fusing data from multiple sensors to support threat identification and decision analysis
EHC IS-FY09-05: Data Fusion Technologies
12
Systems Integration and Engineering for Regional Awareness
12
Gap: ISG-07-02v1 – Lack integrated technologies and standards for fusing data from multiple sensors to support threat identification and decision analysis
EHC IS-FY09-05: Data Fusion Technologies
Planned Demos/Deliverables/Transitions• Deliverable 1: Identify functional requirements to establish
a 24/7 Federal Coordination Center (FCC) for the FEMA Office of NCR Coordination – FY 2008
• Deliverable 2: Develop operational checklist for the FCC’s first hour of operation – FY 2008
• Deliverable 3: Develop a Concept of Operations document that details how to use FCC technologies – FY 2009
• Deliverable 4: Develop Mission Blueprint with core system requirements, future technical requirements, and recommendations of technical needs for Response Coordination Centers – FY 2009-2010
Homeland Security Payoff• Ensures that incident information, including situational
awareness and resource status information, is shared across local, regional, state, and Federal organizations
• FEMA has obligated funding for this project: $150K in FY 2008 and $300K in FY 2009
• Customer: FEMA Office of the NCR
Product Description• Establish capabilities to support end-user situational
awareness and interoperability-related needs through the facilitation of incident management and policy coordination within the National Capital Region (NCR)
• Deliverable Type: Technical Studies, Technical Report, Requirements Generation
13
Multiple Visualization Initiative
13
Planned Demos/Deliverables/Transitions• Deliverable 1: Analyze requirements; review applicable
GIS standards – FY 2009• Demo 1: Conduct proof of principal for Google and MS
Virtual Earth integrated environment – FY 2009• Demo 2: Expand proof of principal to other visualization
environments – FY 2009• Demo 3: Demonstrate data interoperability at all levels of
selected GIS environments – FY 2009• Transition Path: Other
Homeland Security Payoff• Demonstrates the ability to share geographic information
through an open standards-based solution, independent of the type of GIS products used
• Customer: NPPD• TTA Status: Pending
Product Description• Demonstrate an open standards-based information
sharing solution for multiple visualization (Geospatial Information System [GIS]) environments
• Deliverable Type: Requirements Generation, New Technology
EHC IS-FY09-08: Law Enforcement and Intelligence Sensor FusionGap: ISG-07-02cv1 – Comprehensive sensor fusion between law enforcement and intelligence partners in support of the Common Operational Picture (COP) for threat identification and decision analysis
14
Community Safeguard
14
Planned Demos/Deliverables/Transitions• Deliverable 1: Analyze requirements – FY 2009• Deliverable 2: Conduct technology survey; develop
recommended implementation plan for select technologies – FY 2009
• Demo 3: Establish functional, integrated pilot at Beverly Hills Police Department (CCTV, ALPR, Digital Dashboard) – FY 2009
• Demo 4: Demonstrate additional data sources integration (AVL, Radio Over Wireless Broadband) – FY 2010
Homeland Security Payoff• Demonstrates visualization technologies, information
sharing protocols, and communications standards in a GIS context to improve situational awareness and incident response
• Customer: Beverly Hills Police Department• Memorandum of Agreement Status: Draft with Beverly
Hills Police Department
Product Description• Pilot a range of technologies integrated with a GIS.
Technologies include: Smart Closed Circuit television (CCTV), Automatic License Plate Recognition (ALPR), digital dashboard, infrastructure inspection, Automatic Vehicle Locator (AVL), and link analysis software
• Deliverable Type: Requirements Generation, New Technology
EHC IS-FY09-08: Law Enforcement and Intelligence Sensor FusionGap: ISG-07-02cv1 – Comprehensive sensor fusion between law enforcement and intelligence partner in support of COP for threat identification and decision analysis
15
Keeping Schools Safe
15
Planned Demos/Deliverables/Transitions• Deliverable 1: Analyze requirements – FY 2009• Deliverable 2: Conduct technology survey; develop
recommended implementation plan for select technologies – FY 2009
• Demo 1: Conduct proof of principal for selected technologies at Space and Missile Defense Command Integration lab – FY 2009
• Demo 2: Conduct field demonstration of operational school environment – FY 2009
Homeland Security Payoff• Identifies areas where added technology will provide
timely information to decision makers and senior officials in the school system
• Customer: Alabama Department of Education• Stakeholders: Other state and local educational and public
safety organizations
Product Description• Optimize the application of current technologies to existing
school safety procedures. Consists of a requirements capture effort, technology assessment of applicable school safety technologies, proof of principal in an integration lab, and final demonstration
• Deliverable Type: Requirements Generation, New Technology
EHC IS-FY09-08: Law Enforcement and Intelligence Sensor FusionGap: ISG-07-02cv1 – Comprehensive sensor fusion between law enforcement and intelligence partners in support of COP for threat identification and decision analysis
16
Threat Probability Distribution Mapping
16
Homeland Security Payoff• Provides actionable intelligence and the ability to
synthesize data across the agency for improved situational awareness and critical decision making
• Correlates existing law enforcement data with hypothesized threat scenarios
• Anticipates national security threats• Customer: DHS I&A State and Local Fusion Center Office
Product Description• Demonstrate the ability to discern patterns and inter-
relationships between factors or events; counteract threats and identify trends in terrorist or criminal Tactics, Techniques, and Procedures
• Deliverable Type: Decision Support Tool, Situational Awareness, and Response Technology
EHC IS-FY09-09: Cross Target Threat Awareness
Planned Demos/Deliverables/Transition• Deliverable 1: Design analytic techniques and pattern
recognition concept of operations and technical architecture – FY 2009
• Deliverable 2: Synthesize predictive analytics and spatial terrain for pre-determined data sets (consequence modeling) – FY 2009
• Deliverable 3: Deploy trained analysts to fusion centers for operational Predictive Analytics Cell – FY 2009
• Transition 4: Conduct operational tests and evaluations; transition to customers – FY 2010
Gap: IS-07-03v1 – Lack of technologies for correlating information regarding terrorist attack attempts across potential targets to create broad terrorist threat awareness
17
Data Privacy and Policy Technology
17
Planned Demos/Deliverables/Transitions• Deliverable 1: Assess policy tool and scenario – FY 2009• Deliverable 2: Identify/develop process to identify policy
impediments to information sharing in a multi-information flow (local, state, Federal, and private sector) environment – FY 2009
Homeland Security Payoff• Proposes a process for identifying policy impediments to
information sharing • Customers: Program Manager – Information Sharing
Environment, DHS I&A State and Local Fusion Center Program Office
• MOU Status: Draft with S&T
Product Description• The Massachusetts Institute of Technology (MIT) data use
policy evaluation tool analyzes policies associated with data from disparate sources and provides feedback on policy issues
• Use MIT tool and scenarios to evaluate a state/urban area fusion center’s information sharing policy guidelines for products developed using local, state, Federal, and private sector data
• Evaluate whether local, state, Federal, or private sector policies impact information sharing by a fusion center
• Deliverable Type: Knowledge Product
Gap: ISG-07-12v1 – Need to protect U.S. citizens’ data to ensure compliance with intelligence oversight and privacy regulations
EHC IS-FY09-10: Data Privacy Protection Technology
18
Data Privacy Preserving Technology
18
EHC IS-FY09-01: Cross-Agency Information DistributionGap: ISG-07-12v1 – Need to protect U.S. citizens’ data to ensure compliance with intelligence oversight and privacy regulations
Planned Demos/Deliverables/Transitions• Deliverable 1: Generate privacy tool requirements – FY
2009• Deliverable 2: Develop privacy tool system – FY 2009• Deliverable 3: Test and evaluate privacy tool system – FY
2009
Homeland Security Payoff• Provides DHS analysts with the ability to use U.S. citizens’
data to ensure compliance with intelligence oversight and privacy regulations
• Customer: DHS I&A• Stakeholders: DHS Privacy Office
Product Description• Identify, validate, and prioritize engineering and
technology • Develop a tool/coding capability that can be inserted into
existing systems and automate privacy rule sets• Identify and tag Personally Identifiable Information
19
CUI Implementation Framework Test and Evaluation
19
EHC IS-FY09-11: Secure Multilevel Information Dissemination
Gap: IS-07-29v1 – Advanced techniques are required to support distribution of intelligence products to local, tribal, state, and industrial homeland security mission partners
Planned Demos/Deliverables/Transitions• Demo 1: Include CUI element in Golden Phoenix training
event – FY 2008• Demo 2: Include CUI element in Dam Sector exercise –
FY 2008• Deliverable 1: Conduct comparative scenario-based
exercises to evaluate implementation of the CUI framework – FY 2008-2009
• Deliverable 2: Provide CUI implementation support; conduct multilevel security technology pilots – FY 2010 -2013
Homeland Security Payoff• Enables secure, accurate, timely, thorough distribution of
DHS-developed intelligence products to external homeland security partners
• Improves coordinated threat assessment and mitigation activities
• Customers: NPPD, CBP, DHS Office of Security
Product Description• Assess capabilities of Controlled Unclassified Information
(CUI) producers/consumers to meet safeguarding requirements and estimate costs of addressing safeguarding shortfalls
• Evaluate the CUI framework and the applicability/clarity of specified dissemination instructions across multiple types of CUI information, communication channels, and end-user communities
• Deliverable Type: Knowledge Products, New Technology
20
Symbology Standardization Support
Planned Demos/Deliverables/Transitions• Deliverable 1: Survey and formally document DHS
symbology requirements; provide implementation recommendations – FY 2009
• Deliverable 2: Implement recommendations – FY 2010
Homeland Security Payoff• Builds a common symbology base for use across the DHS
enterprise• Customers: DHS Office of the Chief Information Officer,
Office of Applied Technology
• Terms of Agreement Status: Signed
• Stakeholders: All DHS components
Product Description• Survey and document DHS symbology requirements for
the Geospatial Management Office. Currently, only point symbols in an emergency response context exist for DHS
• Deliverable Type: Technical Services
EHC IS-FY09-06: Maritime and Law Enforcement Information Sharing Protocols
Gap: ISG-07-02dv1 – Poor Infrastructure in place to effectively share information that would build the collective situational awareness between maritime, law enforcement, and intel partners
21
Generalized Data Driven Analysis and Integration
Planned Demos/Deliverables/Transitions• Transition 1: Implement Everest visualization tool, LeadTrack
proximity query, and Student and Exchange Visitor Information System data cube – FY 2008-2009
• Transition 2: Integrate handheld access, anomaly detection, and cube-to-link analysis; rollout to field – FY 2009-2010
• Transition 3: Conduct spatial/temporal trend analysis – FY 2010-2011
• Transition 4: Conduct entity extraction from reports, trend visual analytics, semi-automatic view discovery – FY 2011-2012
• Transition 5: Conduct entity disambiguation, deploy analysis to field, integrate multi-directional tool – FY 2012-2013
Homeland Security Payoff• Enables discovery of hard-to-find or previously
undiscovered relationships across ICE enterprise data repositories
• Improves field personnel resource management capabilities
• Customer: ICE• Stakeholders: Office of Operations Coordination, United
States Coast Guard
Product Description Develop link analysis, relational data cube, geo-spatial
visualization, and statistical analysis technology components for the ICE Pattern Analysis and Information Collection System (ICEPIC)
Deliverable Type: New Technology
Graphic
EHC IS-FY09-01: Real Time Data Processing and Visualization Gap: ISG-07-07v1 – Require on-demand management, analysis, and visualization of information in multiple forms and from diverse, distributed sources
22
Mission-Based Analysis of Departmental SAR
Planned Demos/Deliverables/Transitions• Deliverable 1: Develop SAR component and enterprise
technical capability reports – FY 2008-2009• Deliverable 2: Leverage analysts/analytic software for
cross-component SAR analysis – FY 2009 • Transition 1: Develop enterprise SAR technical proof-of-
concept – FY 2009• Deliverable 3: Create SAR “Virtual Fusion” Cell – FY
2010-2011• Transition 2: Extend SAR Pilot to support major cities (LA,
Miami, Chicago, Boston) – FY 2012-2013
Homeland Security Payoff• Sustains a capability that recognizes, tracks, and
accurately assesses the significance of patterns and trends in suspicious activity reports
• Enables DHS law enforcement personnel to rapidly report, review, and analyze SARs
• Customer: DHS I&A, Office of Operations Coordination• Stakeholders: Law enforcement entities
Product Description Evaluate existing Suspicious Activity Reporting (SAR)
methodologies and provide a mission-based assessment for an integrated and more effective approach to sharing and analyzing SAR data
Demonstrate an enterprise SAR analytics Proof-of-Concept
Deliverable Type: Knowledge Products, Technical Evaluation Graphic
EHC IS-FY09-04: Suspicious Activity Reporting Gap: IS-054 – Lack of visibility, in real time, across agencies of specific encounters of individuals on watch lists and other suspicious activities
23
Text/Data Analytics with Geospatial Extension
Planned Demos/Deliverables/Transitions• Deliverable 1: Develop IN-SPIRE™/Assessment Wall –
FY 2008• Deliverable 2: Assess requirements (Geospatial/Location
extraction from text and architectural approaches) – FY 2009
• Demo 3: Pilot system with integrated geospatial/text analytics visualizations – FY 2009
• Deliverable 4: Transition text analysis/geospatial capability to production environment – FY 2010
Homeland Security Payoff• Supports ICE requirements for improved text analysis
capabilities and information sharing in a geospatial context. Supports technology need for integrated text and data analysis techniques
• Customer: ICE
• Stakeholders: CBP, DHS I&A, United States Secret Service
Product Description• Refinement and deployment of unstructured text and data
analytics technologies to support ICE Document Exploitation missions and unstructured text sources. Pilot IN-SPIRE™/Assessment Wall at ICE; demonstrate integration of text analysis within Geospatial contexts
• Deliverable Type: New Technology
EHC IS-FY09: Integrated Data Processing and Analysis
Gap: ISG-07-025 – Require single, scalable framework for analysis of structured, unstructured and streaming data