Sted og dato (Indsæt --> Diasnummer)Dias 1

Digital Footprints from a Police Perspectice:Fighting Child Pornography on the Internet

Sted og dato (Indsæt --> Diasnummer)Dias 2

The networked society

The world now spends over 110 billion minutes on social networks and blog sites

Surveillance society?

“The loss of individual freedom and the loss of privacy seemsthe prize for the growing dependency of the internet. The struggle for privacy is the 21st century civil rights struggle” (Ulrich Beck)

Sted og dato (Indsæt --> Diasnummer)Dias 3

What is the problem?

We are more and more online

…and so are the criminals

Sted og dato (Indsæt --> Diasnummer)Dias 4

Social media – the new playground for pedophiles

Computers and the internet have massively increased the production and distribution of child pornography (children beingraped and sexually abused)

Easy acces to victims (grooming):• Social media (Facebook, Arto)• Online plays with chat function (WOW)

Sted og dato (Indsæt --> Diasnummer)Dias 5

The child as the most fragile user

With the arrival of new methods of communication on the Internet and mobile technologies, children are more exposed tocomplex and multi-faceted emerging threats

How to protect the child against the use of the internet for childsexual abuse?

Alleded conflict between the rights of the child and otherfundamental rights such as freedom of expression and the rightto privacy

Sted og dato (Indsæt --> Diasnummer)Dias 6

”Child pornography”

The term ‘child pornography’ is a record of thesystematic rape, abuse and torture of children onfilm and photograph and other electronic means

Child pornography = child exploitation material(CEM)

However legal instruments continue to refer to‘child pornography’2011/92 Directive on combatting the sexual abuseand sexual exploitation of children and child pornography

Sted og dato (Indsæt --> Diasnummer)Dias 7

Who are the perpetrators?

• Groups in the families who use the webcam to exploit andexchange livestreming with friends

• People who are online all the time trying to groome kids inorder to get acces to an innocent child

• Real organised criminal groups who for money will rapechildren in front of you for USD 40

Sted og dato (Indsæt --> Diasnummer)Dias 8

Excuses

“Was not me, but someone else who used/hacked my computer”

“Just looking for cybersex”

Sted og dato (Indsæt --> Diasnummer)Dias 9

Challenges for the police

• International, borderless crime

• Rapid development

• Anonymisazion services/dark net (TOR) and hidden servers (Silkroad)

• Lack of global validation of IP adresses

• Cloud services

• Slow reaction within public authorities

• Different national agendas/priorities

Sted og dato (Indsæt --> Diasnummer)Dias 10

TOR - the ”Dark Net”

TOR – the Onion Router - is “a network of virtual tunnels thatallows people and groups to improve their privacy and security on the Internet” (TOR website).

The TOR-users request is sent through 3 randomly chosen TOR routers. Every step is encrypted. The visitedwebpage only knows the adress of the closest router =>No digital footprints

Fear of surveillance => more and more people choose TOROut of 186 countries USA is highest ranking user, Denmark =55, Sweden = 31, Norway = 40, France = 18, Germany =16

Sted og dato (Indsæt --> Diasnummer)Dias 11

What to look after?

-> Possession • awareness of presence • power of disposal over the files • intention on possession • files found in My documents • temporary internet files • recovered folders

Sted og dato (Indsæt --> Diasnummer)Dias 12

What to focus on?

Specifying content • IP addresses • Domain names and DNS • URLs • File content and Filename • Keywords • Content Signatures (hash values)

DNS= Domain Name System (or Service or Server), an Internet service that translates domain names into IPaddresses.URL= Uniform Resource Locator (URL) it is the global addressof documents and other resources on the World Wide Web.Hash Values= a number generated from a string of text.

Sted og dato (Indsæt --> Diasnummer)Dias 13

Children at risk - what to do?

Children are often more vulnerable when it comes tointernet safety as they are still developing and learning. This has consequences for their capacity to identify and managepotential risks on the Internet.

Build human and institutional cyber security capabilitiesthrough:

• Awareness-raising campaigns at global, national and regional levels;

• Training programs for parents, guardians, educators, and children;

• Partnerships with different stakeholders.

Sted og dato (Indsæt --> Diasnummer)Dias 14

Blocking

Styles of Blocking • Personal filtering • Network blocking • Hybrids of these two styles

3.232 webpages containing child pornography are currently blocked (National Danish Police, July 2013)

Sted og dato (Indsæt --> Diasnummer)Dias 15

Content targeted - examples

• Child Pornography • Controversial political topics / hate speech / • Libel and publication of false information • Content published by terrorist • Copyright violations • Intellectual Property Rights • Gambling Websites • Terrorist activities

Sted og dato (Indsæt --> Diasnummer)Dias 16

Tendencies in child pornography

more recent material increase of violence victims of younger age

“Its not a question of disgusting pictures on the internet. It isthe victims behind those pictures who are the most important. It’s a question of life and dead. Babies are being raped on request and even killed. How come legislation deals with terror and no this?” (Europol Liason officer)

Sted og dato (Indsæt --> Diasnummer)Dias 17

EU Legal framework

2011/92/EU Directive on combatting the sexual abuse,sexual exploitation of children and child pornography

The Stockholm Programme

The EU Internal Security Strategy of the EuropeanUnion

The Council of Europe Convention on Cybercrime

The Council of Europe Convention on Protection ofChildren against Sexual Exploitation and Sexual Abuse (“the Lanzarote Convention”)

Sted og dato (Indsæt --> Diasnummer)Dias 18

EC3 – European Cyber Crime Centre

The Centre started operations in January 2013 and is to act as the focal point in the fight against cybercrime in the Union.

Sted og dato (Indsæt --> Diasnummer)Dias 19

EC3 - functions

1. Serve as the European cybercrime information focal point;

2. Pool European cybercrime expertise to support Member States;

3. Provide support to Member States' cybercrime investigations;

4. Be the collective voice of European cybercrime investigators across law enforcement and the judiciary.

Sted og dato (Indsæt --> Diasnummer)Dias 2020Thanks

EC3 - Cooperation with Key Actors

International Partners

European Agencies

Private Sector, research

communities and civil society

organisations

Member States

Sted og dato (Indsæt --> Diasnummer)Dias 21

A Global Alliance against Child Sexual Abuse Online

Child pornography – a global problem!

Agreement on a Global Alliance against Child Sexual AbuseOnline with the US authorities at the EU-US Ministerial Meetingon 20-21 June 2012 in Copenhagen

EC3 – Interpol Global Complex partnership

Sted og dato (Indsæt --> Diasnummer)Dias 22

The ”Sweetie” case

“Sweetie”, an avatar created by a Dutch children's charity organization was built to expose the scale of the problem

=> 22.000 hits in a month

Sted og dato (Indsæt --> Diasnummer)Dias 23

”BabyMay”

Danish journalist posing online in August 2008 pretending to bea minor of 13 years

Profile on Arto.dk

Research during 1½ years

Sted og dato (Indsæt --> Diasnummer)Dias 24

Policing Online Sex Offenders

Cyberpatrolling? Proactive investigation

1. Going on-line, posing as a child and placing your ‘child’ profile in areas of the Internet where actual children are most likely to be targeted (e.g. Chat facility / Social NetworkSites, Massively Multiplayer Online Role Playing Games) / Web Cam Sites… 2. Going on-line as Sex Offender to identify offenders and victims

Sted og dato (Indsæt --> Diasnummer)Dias 25

Policing online Sex Offensers

Reactive :In response to a complaint, observation, or real victim;conducting an online undercover investigation of a specific subject or group of subjects online.

Eg Victim / Informant / Virtual Global Taskforce/ other LawEnforcement

“Its better to be there in the beginning than in the end” (Troels Ørting, Head of EC3)

Sted og dato (Indsæt --> Diasnummer)Dias 26

Reactive vs Proactive

Law enforcement investigates two types of cases: reactive andproactive.

Reactive cases involve a response to a complaint and mayinvolve one or more investigating agencies.

Proactive cases often involve a law enforcement officer goingonto the Internet to seek out suspects—sometimes called “undercover chat.” This occurs without a complaint being the trigger for the action.

Sted og dato (Indsæt --> Diasnummer)Dias 27

Logging

On 15 March 2006 the European Union adopted the Data Retention Directive, on "the retention of data generated orprocessed in connection with the provision of publicly availableelectronic communications services or of public communicationsnetworks and amending Directive 2002/58/EC“

The Directive requires Member States to ensure that communications providers retain, for a period of between 6months and 2 years, necessary data as specified in the Directive.

The data is required to be available to "competent" nationalauthorities in specific cases, "for the purpose of theinvestigation, detection and prosecution of serious crime, asdefined by each Member State in its national law".

Sted og dato (Indsæt --> Diasnummer)Dias 28

The German case

The German Bundestag had implemented the directive (6months retention), but on 2 March 2010, the Federal Constitutional Court of Germany ruled the law unconstitutional as a violation of the guarantee of the secrecyof correspondence.

=> The directive is currently not implemented in Germany.

Sted og dato (Indsæt --> Diasnummer)Dias 29

The German Highway Shooter case – hypocrisy?

Germans are apolectic about the internet spy programs Prismand Tempora. But police managed to catch a highway shooter using similar tactics.

Shootings began in 2008 and hit a woman in 2009.Police are forbidden acces to data collected, so they createdtheir own system. In April 2013 the system identified theshooter. However privacy activists are concerned.

Sted og dato (Indsæt --> Diasnummer)Dias 30

THANK YOU!

Trine Thygesen Vendius, Ph.D. Candidate, Faculty of Law, Copenhagen University, Trine.thygesen.vendius@jur.ku.dk