MINORITY REPORT SOCIETY

Dr. Nimrod Kozlovski

www.internetlaw.co.il

How we are becoming the

A Paradigm shift in on-line policing

Prevention

Attempt to commit a

crime

Pre-detection, Prediction, templates and profi les

recognitions

Crime is committed

Prosecution

Deterrence)?(

Detection, Investigation, Evidences collection

Arrest

Punishment

Prevention

Attempt to commit a

crime

Pre-detection, Prediction, templates and profi les

recognitions

Deterring from committing a crime

Reacting to a committed crime

Public police force (investigation, prosecution, punishment) Law Enforcement model

Proactive tendency

Proactivity volume

Phys

ical

D

igita

l

- Credit card fraud

- Hacking control

- Money laundry

- Spam control- Identity theft

- Copyright infringement- Documents crime- Child pornography

?Historical data and

Information archives

Point of intervention

- Passenger recognition- Street crime

Anomaly detection policingPattern based policingProfile-based policingUnder cover stingDesigning crime outOperational surveillanceIdentity control

proactive tactics in cybercrime policing

Proactive policingRecognition of Anomaly activity

L o

w

l e v

e l

D a

t a

Irregular hour/ repetition Parameter A

Location of the purchase Parameter B

Unusual IP range Parameter C

Different between purchaser Parameter Dname and registered Email

High expense at first Parameter E purchase

and

and

and

and

Other Parameters

Proactive policingRecognition of Anomaly activity

L o

w

l e v

e l

D a

t a

Irregular hour/ repetition Parameter A

Location of the purchase Parameter B

Unusual IP range Parameter C

Different between purchaser Parameter Dname and registered Email

High expense at first Parameter E purchase

and

and

and

and

W e

i g

h t e

d

va

lue

90%

Other Parameters

Proactive policingRecognition of Anomaly activity

L o

w

l e v

e l

D a

t a

Irregular hour/ repetition Parameter A

Location of the purchase Parameter B

Unusual IP range Parameter C

Different between purchaser Parameter Dname and registered Email

High expense at first Parameter E purchase

and

and

and

and

!Other Parameters

Proactive policingRecognition of Anomaly activity

L o

w

l e v

e l

D a

t a

Irregular hour/ repetition 15%

Location of the purchaser 25%

Unusual IP range 20%

Different between purchaser name 25% and registered Email

High expense at first purchase 10%

and

and

and

and

Proactive policingPattern recognition

L o

w

l e v

e l

D a

t a

Code arrives frequently every X hours

Similarly delivered to neighbor IPs

Code tries to open ports

Arrives from unknown source

Other predetermined parameters

and

and

and

and

!Pattern

A

PatternB

PatternC

PatternD

If

Match

Proactive policingPattern recognition

L o

w

l e v

e l

D a

t a

Code arrives frequently every X hours

Similarly delivered to neighbor IPs

Code tries to open ports

Arrives from unknown source

Other predetermined parameters

and

and

and

and

PatternA

PatternB

PatternC

PatternD

If

Proactive policingProfile identification

Know

in a

dvan

ce p

rofil

es Age

Place

Education

Language

Nationality

Specific Net activities

Subscriptions

Criminal record

Reactive policing Proactive policing

$

Sting

USES OF NEW FAKE SITES AND EXIST

ILLEGAL SITES AS TRAPS

UNDER COVER ACTIVITY

IN CHAT ROOMS

Proactive policingDesigning crime outDRM

1001

0

1010

1

0100

1

1111

0

1010

0

1010

1

0101

0

1001

0

1001

0

1010

1

0100

1

0101

0

1110

1

0110

1

0100

0

0100

0

1010

1

0010

0

1010

1

1001

010

101

00

100

10

010

10

110

00

101

00

101

00

101

00

101

10

101

11

101

0101

0

0101

0

0101

0

0101

0

0101

0

0101

0

0101

0

0100

1

0010

0

1010

0

Digital Rights Manager

Invalid assumptions (in the online world)

WHY THE LAW ENFORCEMENT MODEL IS NOT BEING FOLLOWED ON-LINE?

Deterrence Ability to investigate and

prosecute

Magnitude of crime

Expected gain cost of crime, expected gain

Gain < Punishment X enforcement probability

Punishment expectancy (playing

the jurisdiction)

Enforcement probability

1

Social preference for a preventive system

Cost Privacy implication

Prevention of lawful activity

Private entities’ choice

2

3

WHY THE LAW ENFORCEMENT MODEL IS NOT BEING FOLLOWED ON-LINE?

POLICING STRATEGY

Law enforcement

Reactive Evidence based investigation Law as primary regulator Discretionary enforcement Deferred judicial sanctionPassive victim Criminal focused

Proactive tacticsIntelligence focused Regulation through CodeAutomated, non discretionaryPresent non-judicial sanctionsActive victim Intermediaries focused

Cyberpolicing

ORGANIZATIONAL STRUCTURE

Law enforcement

Public officials Central command Territorial Limits on delegation of policing power Limitations on individual’s use of force

Multiplex organizational structures Decentralized Non territorial, internationalized Delegation of policing functions Empowerment of the individual (self help)

Cyberpolicing

SHOULD WE CARE?

Designing for accountability

Unaccountable policing

Setting the rulesPublic officials focused

The failure of the current legal system to

control cyberpolicing

Technological, legal, institutional mechanisms

Reactive model focused

Policing policies

Actual enforcement

1 2 3