eBOS RnD

Intelligence Network & Secure Platform for Evidence Correlation and Transfer

Duration: 01/09/2019 – 28/02/2023
Total Funding: € 3,078,698.75

Overview

Within the booming of legitimate commercial and social activity, a growing group of actors are exploiting internet technologies to commit diverse and borderless cybercrimes. These include extortion, exploitation, and attacks on critical infrastructure. Criminals increasingly use secure, anonymous telecommunications across multiple devices, complicating digital investigations. Challenges in digital forensics persist and fall into technical, legal, and resource categories, despite being identified over 15 years ago. Today, the scale and complexity have intensified with more devices, data formats, and privacy concerns. While initiatives like Evidence, e-CODEX, FREETOOL, and ASGARD offer support, the volume of evidential material remains a significant threat.

INSPECTr deployed big data analytics, cognitive machine learning and blockchain technologies to equip Law Enforcement Agencies with advanced technologies for tackling these criminal activities. It developed a shared intelligent platform, using a novel process for gathering, analysing, prioritising and presenting key data, to assist prediction, detection and management of crime by local, national and international agencies. The INSPECTr platform processes both structured and unstructured data, combining outputs from free and commercial forensic tools with online sources. It supports automated data ingestion and homogenisation, enabling interoperability across various formats. Investigators can visualise, bookmark and export evidence into reports, through knowledge discovery techniques.

Objectives

1

Specify the strategic direction of the project and supervise/guide implementation and project sustainability through a network of Law Enforcement Agency (LEA) Living Labs (LLs).

2

Produce INSPECTr Reference Framework (IRF) for standardised handling of data originating from electronic/digital devices and online resources to integrate them as “evidence” and support automated normalisation, combination, correlation, and validation of cyber-investigation information.

3

Produce a Connect Ingest Query toolset implementing SERE for supporting LEA networking and interfacing to key information sources both on a permanent basis and on the fly for acquisition of cyber-investigation information and automated normalisation, combination, correlation, provenance tracking and validation.

4

Produce Backend investigative intelligence capabilities, facilitating efficient analysis of digital evidence and creation of new knowledge, as well as making advanced technologies for Big Data Search, Analytics, Knowledge Graph, and Machine Learning readily available to LEAs.

5

Develop Investigative Intelligence Analyst Interfaces supporting LEA analysts to perform their work in a highly intuitive and workflow-driven manner.

6

Ensure that the platform and analytics tools are developed in compliance with European societal values, fundamental rights and applicable legislation for privacy and protection of personal data, and that societal aspects are addressed in the design, development and testing of the project’s technologies.

7

Support the adoption of INSPECTr by creating a LEA Capacity Building Programme, Adoption Actions and Impact Assessment /Policy recommendations.

eBOS Role in the Project

In INSPECTr, eBOS led the implementation of common processes and baseline resources in the project’s Living Labs, supporting the production of detailed requirements. It oversaw the creation of a knowledge base on EU and national legislation and tools for automated validation of LEA requests. eBOS also led the enrichment of existing software environments with smart widgets and provided privacy-by-design and ethics-by-design support to the INSPECTr infrastructure and analysis tools. Finally, eBOS monitored the development of future standards concerning privacy and personal data protection during the design, development, and provision of security technologies and services.

This project has received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No 833276.