Sted og dato (Indsæt --> Diasnummer) Dias 1 Digital Footprints from a Police Perspectice: Fighting Child Pornography on the Internet

Sted og dato (Indsæt --> Diasnummer) Dias 2 The networked society The world now spends over 110 billion minutes on social networks and blog sites Surveillance society? “The loss of individual freedom and the loss of privacy seems the prize for the growing dependency of the internet. The struggle for privacy is the 21 st century civil rights struggle” (Ulrich Beck)

Sted og dato (Indsæt --> Diasnummer) Dias 3 What is the problem? We are more and more online …and so are the criminals

Sted og dato (Indsæt --> Diasnummer) Dias 4 Social media – the new playground for pedophiles Computers and the internet have massively increased the production and distribution of child pornography (children being raped and sexually abused) Easy acces to victims (grooming): Social media (Facebook, Arto) Online plays with chat function (WOW)

Sted og dato (Indsæt --> Diasnummer) Dias 5 The child as the most fragile user With the arrival of new methods of communication on the Internet and mobile technologies, children are more exposed to complex and multi-faceted emerging threats How to protect the child against the use of the internet for child sexual abuse? Alleded conflict between the rights of the child and other fundamental rights such as freedom of expression and the right to privacy

Sted og dato (Indsæt --> Diasnummer) Dias 6 ”Child pornography” The term ‘child pornography’ is a record of the systematic rape, abuse and torture of children on film and photograph and other electronic means Child pornography = child exploitation material (CEM) However legal instruments continue to refer to ‘child pornography’ 2011/92 Directive on combatting the sexual abuse and sexual exploitation of children and child pornography

Sted og dato (Indsæt --> Diasnummer) Dias 7 Who are the perpetrators? Groups in the families who use the webcam to exploit and exchange livestreming with friends People who are online all the time trying to groome kids in order to get acces to an innocent child Real organised criminal groups who for money will rape children in front of you for USD 40

Sted og dato (Indsæt --> Diasnummer) Dias 8 Excuses “Was not me, but someone else who used/hacked my computer” “Just looking for cybersex”

Sted og dato (Indsæt --> Diasnummer) Dias 9 Challenges for the police International, borderless crime Rapid development Anonymisazion services/dark net (TOR) and hidden servers (Silkroad) Lack of global validation of IP adresses Cloud services Slow reaction within public authorities Different national agendas/priorities

Sted og dato (Indsæt --> Diasnummer) Dias 10 TOR - the ”Dark Net” TOR – the Onion Router - is “a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet” (TOR website). The TOR-users request is sent through 3 randomly chosen TOR routers. Every step is encrypted. The visited webpage only knows the adress of the closest router =>No digital footprints Fear of surveillance => more and more people choose TOR Out of 186 countries USA is highest ranking user, Denmark = 55, Sweden = 31, Norway = 40, France = 18, Germany = 16

Sted og dato (Indsæt --> Diasnummer) Dias 11 What to look after? -> Possession awareness of presence power of disposal over the files intention on possession files found in My documents temporary internet files recovered folders

Sted og dato (Indsæt --> Diasnummer) Dias 12 What to focus on? Specifying content IP addresses Domain names and DNS URLs File content and Filename Keywords Content Signatures (hash values) DNS= Domain Name System (or Service or Server), an Internet service that translates domain names into IP addresses. URL= Uniform Resource Locator (URL) it is the global address of documents and other resources on the World Wide Web. Hash Values= a number generated from a string of text.

Sted og dato (Indsæt --> Diasnummer) Dias 13 Children at risk - what to do? Children are often more vulnerable when it comes to internet safety as they are still developing and learning. This has consequences for their capacity to identify and manage potential risks on the Internet. Build human and institutional cyber security capabilities through: Awareness-raising campaigns at global, national and regional levels; Training programs for parents, guardians, educators, and children; Partnerships with different stakeholders.

Sted og dato (Indsæt --> Diasnummer) Dias 14 Blocking Styles of Blocking Personal filtering Network blocking Hybrids of these two styles webpages containing child pornography are currently blocked (National Danish Police, July 2013)

Sted og dato (Indsæt --> Diasnummer) Dias 15 Content targeted - examples Child Pornography Controversial political topics / hate speech / Libel and publication of false information Content published by terrorist Copyright violations Intellectual Property Rights Gambling Websites Terrorist activities

Sted og dato (Indsæt --> Diasnummer) Dias 16 Tendencies in child pornography  more recent material  increase of violence  victims of younger age “Its not a question of disgusting pictures on the internet. It is the victims behind those pictures who are the most important. It’s a question of life and dead. Babies are being raped on request and even killed. How come legislation deals with terror and no this?” (Europol Liason officer)

Sted og dato (Indsæt --> Diasnummer) Dias 17 EU Legal framework 2011/92/EU Directive on combatting the sexual abuse, sexual exploitation of children and child pornography The Stockholm Programme The EU Internal Security Strategy of the European Union The Council of Europe Convention on Cybercrime The Council of Europe Convention on Protection of Children against Sexual Exploitation and Sexual Abuse (“the Lanzarote Convention”)

Sted og dato (Indsæt --> Diasnummer) Dias 18 EC3 – European Cyber Crime Centre The Centre started operations in January 2013 and is to act as the focal point in the fight against cybercrime in the Union.

Sted og dato (Indsæt --> Diasnummer) Dias 19 EC3 - functions 1. Serve as the European cybercrime information focal point; 2. Pool European cybercrime expertise to support Member States; 3. Provide support to Member States' cybercrime investigations; 4. Be the collective voice of European cybercrime investigators across law enforcement and the judiciary.

Sted og dato (Indsæt --> Diasnummer) Dias 20 20Thanks EC3 - Cooperation with Key Actors International Partners European Agencies Private Sector, research communities and civil society organisations Member States

Sted og dato (Indsæt --> Diasnummer) Dias 21 A Global Alliance against Child Sexual Abuse Online Child pornography – a global problem! Agreement on a Global Alliance against Child Sexual Abuse Online with the US authorities at the EU-US Ministerial Meeting on June 2012 in Copenhagen EC3 – Interpol Global Complex partnership

Sted og dato (Indsæt --> Diasnummer) Dias 22 The ”Sweetie” case “Sweetie”, an avatar created by a Dutch children's charity organization was built to expose the scale of the problem => hits in a month

Sted og dato (Indsæt --> Diasnummer) Dias 23 ”BabyMay” Danish journalist posing online in August 2008 pretending to be a minor of 13 years Profile on Arto.dk Research during 1½ years

Sted og dato (Indsæt --> Diasnummer) Dias 24 Policing Online Sex Offenders Cyberpatrolling? Proactive investigation 1. Going on-line, posing as a child and placing your ‘child’ profile in areas of the Internet where actual children are most likely to be targeted (e.g. Chat facility / Social Network Sites, Massively Multiplayer Online Role Playing Games) / Web Cam Sites… 2. Going on-line as Sex Offender to identify offenders and victims

Sted og dato (Indsæt --> Diasnummer) Dias 25 Policing online Sex Offensers Reactive : In response to a complaint, observation, or real victim; conducting an online undercover investigation of a specific subject or group of subjects online. Eg Victim / Informant / Virtual Global Taskforce/ other Law Enforcement “Its better to be there in the beginning than in the end” (Troels Ørting, Head of EC3)

Sted og dato (Indsæt --> Diasnummer) Dias 26 Reactive vs Proactive Law enforcement investigates two types of cases: reactive and proactive. Reactive cases involve a response to a complaint and may involve one or more investigating agencies. Proactive cases often involve a law enforcement officer going onto the Internet to seek out suspects—sometimes called “undercover chat.” This occurs without a complaint being the trigger for the action.

Sted og dato (Indsæt --> Diasnummer) Dias 27 Logging On 15 March 2006 the European Union adopted the Data Retention Directive, on "the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC“ The Directive requires Member States to ensure that communications providers retain, for a period of between 6 months and 2 years, necessary data as specified in the Directive. The data is required to be available to "competent" national authorities in specific cases, "for the purpose of the investigation, detection and prosecution of serious crime, as defined by each Member State in its national law".

Sted og dato (Indsæt --> Diasnummer) Dias 28 The German case The German Bundestag had implemented the directive (6 months retention), but on 2 March 2010, the Federal Constitutional Court of Germany ruled the law unconstitutional as a violation of the guarantee of the secrecy of correspondence. => The directive is currently not implemented in Germany.

Sted og dato (Indsæt --> Diasnummer) Dias 29 The German Highway Shooter case – hypocrisy? Germans are apolectic about the internet spy programs Prism and Tempora. But police managed to catch a highway shooter using similar tactics. Shootings began in 2008 and hit a woman in Police are forbidden acces to data collected, so they created their own system. In April 2013 the system identified the shooter. However privacy activists are concerned.

Sted og dato (Indsæt --> Diasnummer) Dias 30 THANK YOU! Trine Thygesen Vendius, Ph.D. Candidate, Faculty of Law, Copenhagen University,