N'E'M'L'E'C'

1
N.E.M.L.E.C. Computer Crime Unit

• N.E.M.L.E.C.
• Computer Crime Unit Medford/Peabody -
  Introduction

2
(No Transcript)
3
What is NEMLEC ?

• North Eastern Massachusetts Law Enforcement
  Council a regional consortium of over 49
  police/sheriff departments committed to sharing
  resources and strategies in public safetyby
• Fighting crime
• Crime prevention
• Community Involvement

4
NEMLEC Computer Crime Unit (Medford Peabody)
Serves these Cities/Towns/Sheriffs (49)
Red denotes Essex County and Black Denotes
Middlesex County
5
(No Transcript)
6
(No Transcript)
7
NEMLEC OPERATIONAL UNITS NEMLEC

•  NEMLEC Regional Investigations (49
  Departments)  
• Narcotics Unit Detectives Unit Computer Crime
  Unit
• (Ideal complement is 8 Detectives)
• Control Chief Chief Leo A. Sacco, Jr., Medford PD

8
NEMLEC Computer Crime Unit(Investigations,
Forensics, Prevention)

• We will help NEMLEC local departments with
  Cyber-Crime Investigations by
• Computer Search Warrants, Subpoenas, Freeze
  Orders Assistance
• Writing/Drafting/Consulting DA and S/W Executions
• Computer Investigations Assist
• Strategies/Approaches/Tactics
• Digital Forensics Analysis
• Computers, Servers, PDAs Cell Phones and Other
  Devices
• Long-Term Temporary Unit Assignment, (TDY)
• Resource Sharing/Unit Mobilization
• Share Equipment/Mobile Digital Forensic Van
• Detective Cyber-Crime Computer Forensic
  Examiners Training
• Community Based Cyber-Crime Prevention Training

9
NEMLEC/Medford PDComputer Crime
Unit(Investigations, Forensics, Prevention)

• Contingent Upon Funding and/or Grants
• We will be helping Businesses with Cyber-Crime
  Investigations (Cyber-Terrorism) by
• Offering Confidential Vulnerability Assessments
• Computer Intrusions/Penetration Tests
• With Hardening and Management Recommendations
• Offering Employee Cyber-Crime Prevention Training
  
• Offering/Suggesting IT/IS Incident Response Plans
• Offering some other Cyber-Crime Prevention
  products/services
• Sub-contracting with Security Firms (We cant do
  it all)

10
Case Breakdown - Typology

• Over 250 cases since inception
• 70-74 Child Abuse Cases/all forms
• 12 Frauds/Scams/ID Thefts/Trade Secrets
• 10 Other Cases w/Digital Evidence
• Homicides, Rapes, Assaults and more
• 3 School Based Domestic Threats/Harassments/Bul
  lying/Stalking
• 1 VICE Prostitution/Drugs

11
Current Local CC Response Model
Cases fall into the black hole
May/May Not Report it ?
Business Incident Happens
Local Police Departments
May/May Not Know What to do ?
May/May Not be a Priority Crime ?
Defer to Other L.E. Agencies
12
Current Local CC Response Model
Ineffective Because

• Inability to Respond to Cyber-Crime. A lack of
  Computer Forensic Investigation ability
  (Info-Security/Electronic Tracking/Log Analysis,
  Undercover Ops./other Inv. methods)
• Jurisdictional Indifference
• Mostly due to a Lack of Resources/Training and
  Non-Acceptance of New Roles/Services
• Our Priorities are on the Street get out there
  and get me some coffee - Attitude

13
Ideal Police Response Model
Businesses and Cyber-Crime Prevention/Incident
Response Plans are in Place
Will Report it and Expect Police Services
Cooperative Venture Cyber-Crime
Detection Cyber-Crime Prevention Cyber-Crime
Investigation
Prosecutors AUSAs
CCU or Designated Investigator Local Police
Departments
Private/Public Organizations
Will Know What to do be Aligned with other
CCU/TF
HTCIA, ISSA
Regional CCU/TF Federal/State/PD
Specialized Investigative Services
14
New Police Roles Service

• Cyber-Terrorism (Cyber-Crime) Responses from a
  LOCAL, REGIONAL STATE Police Forces
• How can new L.E. Approaches integrate and work
  well in the Business Community?
• What have been the proven and tested strategies
  of the past that can be re-tooled, tweaked and
  uniquely adapted to the high tech arena?

Answer Crime Prevention Model
15
Cyber-Crime Prevention Model

• Cyber-Crime Prevention Model
• Police and the Business Community Share in a Dual
  Role of Cyber-Protection by
• Vulnerability Testing/Scanning
• Conduct Security Reviews/Surveys/Audits
• Pooling Security/Investigation Talents
• Obtaining Joint Funding/Grants
• Security Budget Increases (BAD WORD)
• Secure Communications/Meetings/Task Forces
• Research/Pilot Program, After Action Report

16
Other Aspects of the Cyber-Crime Prevention Model

• Providing an Early Warning System
• Workable Incident Response Plans Development
• National Cyber-Security Standards and Police
  Response Standards
• Cyber-Security as a Primer, a Foundation, an
  Agreement Between Police/Business that is
  supported/funded

17
NEMLEC/Medford PD - CCU
Det. Lt. J.J. McLean Computer Crime
Unit (Investigations Digital Forensics) Work/V.
Mail (781) 396 - 0893 Page through 911 (781)
395 - 1212 E-Mail JMCLEAN_at_medfordpolice.com Plea
se Call Your Police Department First