Comint:Trends in Post Processing

Intelligence & Security Solutions

Presenter: Manie Janse van Rensburg GEW

For discussion
Historical view

Qualifying results of post processing Trends in general of post processing

Current capabilities of practical systems/products in use

Comint Strategic Comint Tactical Sigint requirements

Correlated Post processing

Newer focus found from clients

Potential : Areas for research

Post Processing Trends

Page 2

Post processing :Currently

Pre classify Type?(Data/Voice) New? Detection Tracking Demod Recognition

60-70 % Success Manual Detect then Auto Production

Protocol Recognition Recording

Decoding Classification Person in the Loop!
Post Processing Trends

Decrip

Generate product
Sched NB recording(Sched)
15-30% Success Full Automatic!!
Page 3

Trends in general
3 Separate Sub systems:

Detection/Classification/Collection (Wide Band)

Scheduled collection(Narrow Band) Main stream manual users of system(Slower processing)

Processing libraries becoming more commercially available for ex library for modulation recognition. Buy/Integrate/Support
More small integrated 1 machine solutions vs larger processing platforms. Post processing directly in sensor! Commercial Hardware/Software(Database) : EMC( 3 post processing suppliers)

> 3Ghz is becoming requirement in DF/Interception

More R&D in newer commercial networks: 4G/UMTS/Tetra 2 distinct approaches: Collect everything and process afterwards vs Detection and focused processing
Post Processing Trends Page 4

Current Market trends

Location

Strategic COMINT Systems

Decentralized Unmanned Sensors with WAN access Encrypted E / MPLS networks :WAN must be well managed!

Regional Processing centre's(Command + Quality assurance intercepted

material) Centralized HQ/COF: Intelligence Profile Definition(Case notation) and Specialized functions. Full remote control of all sensors Tactical systems (transportable/mobile) integrated for tasking/list processing and intelligence profile report feedback

Flexible Workflow: Sensors/People follow priority COMINT targets Post Processing 24*7 processing

Wideband detect then Narrowband collect-Scheduled on alarm functions DF sensor: Pre classify with direction :Correlate results between sensors High focus on repetitive collection work for static interception
Page 5

Post Processing Trends

Strategic Systems Examples

VUHF + HF collection systems

Post Processing Trends

+VUHF

Page 6

Strategic Post processing

Supports central intelligence workflow HF

Wideband direction finding, monitoring and recording. Alarm/Scheduled in search, production or monitoring mode Signal alerts( Detection + AMR+APR) Separate Sub system(Growing trend) Reduce data at the Post processing sub system and not in main system Scheduled time/activity based collection on known signals Separate Sub system(Growing trend) Manual operations (experienced man in the loop) Alarm/Scheduled in manual search, production or monitoring mode

VUHF:

Post Processing Trends

Page 7

Current Market trends

Tactical COMINT Systems
Structure

EWOC : Multi Sensor Communications Arena Analysis(CAA) +Threat Analysis TOC :Remote Control/Tasking of multiple sensors + Threat Analysis Sensors- Tight integration from ESM to ECM- Detect location to Jam!

Post Processing

Record Wideband for new deployment location as per CAA/MPT Signal Segmentation analysis for determining all emitters in area

Exclude emitter lists: Commercial, Friendly,Networks,Nodes

Processing on Alarm key; DF,IF,AF, Classify/Decode Cycle time from signal detection to message content in shortest time

Manually performed on new signals

Page 8

Post Processing Trends

Typical Tactical PLatform

VSAT JEWC

EWOC

Mobile Maintenance Workshop

Non-Communications Monitor / DF / EA

TOC

Communications HF EA

Communications V/UHF EA

Post Processing Trends

COMINT Monitor / DF

Page 9

Tactical Systems functions

Most critical:

Time to detect/locate-ESM/RESM -> recognize signal ->EA activities ECM/RECM->Reporting

Alarm Processing

Communications tasking and feedback: Transceivers vs Wilan vs SAT vs Mil WAN

Post Processing Capabilities

TOC and Sensor level wideband capabilities

Reduce WB rec quickly to NB frequencies for local vs hostile forces(DF)

NB alarm focus: (DF-Location/AF rec: Classification + Decoding)

Supervisory

WB analysis

ECM Control GIS:I2MGEO

Post Processing Trends

Page 10

Current Market trends

Location

Sigint Systems

Centralised Sensors/Carriers + Central Processing facilities

Many commercial tools applied in Sigint domain

Databases, Analysis tools, Audio miners and text converters

Post Processing 24*7 processing

Market currently steering towards Sensor data Fusion / Databases Remains highly customized system domain-Client Sensing Priorities Fusion systems align to target(Intelligence Profile) focused collection

Data mined in sensor databases and directly attached to intelligence profiles. Workflow system extensively customized (Controls / Approvals) Trend: UMTS interception under development + Email(growing area) Trend: Carrier providers/ OEM Wilan/4G provide interception
Page 11

Post Processing Trends

Fusion Systems
ISP Email/ Telephone/
Fire wall

IT Management Systems development Systems Security

GSM/UMTS/ Carrier

H/V/UHF

Data Archiving

SAT

Inmar/ Bgan/ Vsat

Screening Room

Intelligence Analysts

Reporting Office/ External Comms

Post Processing Trends

Collection Supervisor

Intelligence Coordindator

Executive System Owner

Page 12

Correlated Post Processing

DF Sensors WB Rx Sensors
IFS Comms Essential Suite

DF Sensors WB Rx Sensors

NB Rx Sensors
3rd party/ Gov Sensors
Target Area Data Collection

NB Rx Sensors
3rd party/ Gov Sensors

Post Processer 2
DF Sensors
IFS Comms Essential Suite

Post Processer 3

IFS Comms Essential Suite

WB Rx Sensors NB Rx Sensors 3rd party/ Gov Sensors

Tasking

CMIS Centre: Mission Planning/CAA

CMIS Center

Post Processor 1

Flash Reports Intercept lists CAA Reports

Dissemination

Qualification
Intel Plan/Mission directives
Post Processing Trends

Decision Making
Page 13

Comint Collection Verification

Correlated Post Processing

Practical Aim: Geographical Area location focused collection

Signal location history compared to new signals and updated

Communications buffering is key(Limited resources)

Limited Monitoring Receivers Limited Analysts processing capability :QA in the loop!!!! Carrier network content : Utilise Carrier provider access to bypass Encryption!

Threat Database per geographical area

Centrally maintained Emitters/Networks/Platforms/Activity

WB Detection cycle 24*7

NB less expensive resources focus on post processing

Only qualified useable material send to CMIS-Central intelligence systems

Post Processing Trends Page 14

Post processing Research

Communications

Utilize Commercial networks securely

Classification Libraries- Detection,AMR,APR

Network Carrier integration : Bulk interfacing Signal Content Extraction and entity Extraction huge benefits

Names/Addresses/Telephone(To vs From)

Threat Database design- Emitters/Networks/Platforms

Bases for success of any strategic system

Multi sensor database fusion : GEW have done this!!!

CMIS-Central Military Intelligence System

Process Design/Functional Requirements/Tools

Language processing- Commercial tools :Train to use and not re invent!

Post Processing Trends Page 15

Contact us at: Email: marketing@ewation.co.za Phone: +27 12 421 6213 Web: www.gew.co.za

Thank you!

Intelligence & Security Solutions