DragonWare Suite

1
DragonWare Suite

• What is it?
• How does it work?
• What is its purpose?

2
What is it

• 3rd generation on-line detection software
• 2nd generation Omnivore
• 1st generation never disclosed Believed to be
  a commercial program Etherpeek
• Allows FBI to reconstruct email messages,
  downloaded files or WebPages

3
DragonWare Suite

• Carnivore Windows NT System, captures
  information
• Packeteer no information available
• Probably reassembles packets into comprehensive
  information
• Coolminer no information available
• Probably Analyzes Data

Basically this system is a packet sniffing program
4
Monitoring Behavior

• Terrorism
• Child pornography/exploitation
• Espionage
• Fraud

5

• What can packet sniffing do ?
• Which Web sites you visit
• What you look at on the site
• Whom you send e-mail to
• What's in the e-mail you send
• What you download from a site
• What streaming events you use, such as audio,
  video
• Who visits your site (if you have a Web site)

6
How can they do that?

• Set up Carnivore at the ISP of the suspected
  criminal
• Windows NT system
• Software program
• Custom C application that works with the program
• Physical lock out code to prevent unauthorized
  access to Carnivore
• Carnivore is set to sniff the packets from the
  suspects computer
• Copies of the packets are made and stored
• Data is analyzed

7
ConcernsSeeing both sides

• Privacy violation
• Potential for Abuse
• Rights protected by Electronics Communication Act
• Fears of Internet Regulation
• Government is trying to control the Internet ??
• Free Speech Issues
• Tracking use of words such as bomb and
  assassination
• Is this really effective??