# Presentation: 466643

## Intelligence Tracking and Relationship Analysis for Counter Terrorism (ITRACT)

- Intelligence Analysis Methodology
- and Process Description

- July 18, 2003

- Systems and Information Engineering

**Steven C. Davis**
**Dr. Barry M. Horowitz**

## Two Major System Components

**Hierarchical Holographic Modeling (HHM):**
- UVA-developed technique to identify sources of risk and to develop scenario templates
**Resource Description Framework (RDF):**
- W3C standard for a conceptual model to specify relationships between data items that is XML-based

## Tracking and Preempting Scenarios of Terrorism

- Scenarios can be characterized as a set of potential attacks that can be commonly treated:
- Food poisoning attacks
- Water poisoning attacks
- Nuclear power plant attacks
- In order to preempt a specific attack we want to use information on:
**Target** to be attacked
- The **people** engaged in preparing for the attack
- The **method** of attack
- We use this information to help us to discover non-obvious relationships that can reveal an attack under preparation

## Example Terrorist Scenario

- Terrorist
- Organization

- Hires person

- Use a known
- terrorist

- Steal a
- poison

- Get a job

- Bribe an
- employee

- Syringe injects
- poison

- Inserts poison
- In meat grinder

-  Each element is an event
-  Each path is an individual attack
-  All combinations of elements comprise
-   a complete scenario

## Food Poisoning Scenarios 

**Slaughterhouse**

- Macro

- Owners/
- Operators

- Location

- Capacity

- Customers

- _Processes_

- Cleaning

- Equipment

- Timelines

- Subsystem
- Configurations

- Security

- Surveillance
- Equipment

- Security
- Personnel

- Facility
- Security

- Property
- Security

- Employment
- Practices

- Retention

- Hiring
- Processes

- Work
- Schedules

- Tenure

- Poisons

- Detectability

- Availability

- Effectiveness

- Ease of
- Use

## Resource Description Framework (RDF) (cont.)

- Resource Description Framework (RDF) *(cont.)*

**http://example.com/index.htm**

**Creator**

**Joe Smith**

- This RDF statement means:  *“**The creator of the webpage *_*http://.../index.htm*_* is Joe Smith**”*

-   Object-oriented Semantic Web metadata language for linking
-       information
-   The foundation of RDF is sets of triplets, each consisting of a
-       subject, predicate, and object.

## Example Non-Obvious Relationship

**Al Qaeda**

**Joe Smith**

**Frank Grimes**

**has member**

**dealt with**

- Intelligence
- Information

- Employee
- Information

## Database Determination

## Example Scenario

- Joe Smith was caught stealing a poison in Boston
- So what?

| Intel | Type | Databases |
| --- | --- | --- |
| Smith is a known terrorist sympathizer | ITRACT/People | CIA Data, Specially Designated Nationals |
| Particular poison is effective for poisoning meat. | HHM/Methods | HHM Data, Poison Data |
| Smith’s roommate’s former cellmate works at a slaughterhouse in Kansas City | ITRACT/Target
ITRACT/People | White Pages, Employee Records, Prison Records |
| Search of Smith’s apartment reveals carton of machine cleaning fluid | HHM/Methods | HHM Data |

- Terrorist + Cleaning fluid + Poison + Roommate’s friend =
- Possible food poisoning terrorist effort at a particular slaughterhouse
- 	 in Kansas City

## Data Subsystem

## Query Control Subsystem

## Demonstration Setup