Publication: Integración de un sistema de análisis de contenidos para una plataforma de interceptación legal de comunicaciones
Loading...
Identifiers
Publication date
2013
Defense date
2013-06-28
Authors
Advisors
Tutors
Journal Title
Journal ISSN
Volume Title
Publisher
Impact
Export
Abstract
La presente memoria documenta el proceso de integración de varios módulos y herramientas con el objetivo de obtener una herramienta de análisis de contenidos que permita agilizar las labores de los agentes de la ley encargados de analizar la información intercambiada por un sospechoso. Dicha información habrá sido obtenida mediante una interceptación legal, partiendo de la base de que un juez accede a que se intercepten las comunicaciones de un sospechoso, y firma una autorización legal que permita realizarla. Partiendo de una herramienta forense ya existente, Xplico, que permite obtener los mensajes de nivel de aplicación a partir de un fichero de captura de tráfico, se ha incorporado la funcionalidad de preclasificación de los mismos, mediante llamadas a un módulo de distribución de contenidos que, según el tipo del contenido, escoge un subconjunto de los denominados plugins de preclasificación, que obtienen su relevancia en el caso. Para mayor información, también se proporciona un comentario textual que incluye más datos acerca del procesamiento. Estos plugins permiten ser entrenados para mejorar el funcionamiento de la herramienta. Por otro lado, también se ha integrado un módulo de transcripción VoIP que automáticamente transcribe contenidos de audio obtenidos de conversaciones realizadas mediante SIP, de manera que el texto de las transcripciones pueda ser procesado por el analizador de contenidos. También es posible entrenar este módulo y mejorar así la precisión de la transcripción. La mayoría de las herramientas integradas: módulo distribuidor, comunicación con plugins y módulo de transcripción habían sido desarrollados previamente pero han sido necesarias profundas modificaciones para realizar la integración. Por último, se ha mejorado la interfaz web de la herramienta original que permite acceder a los contenidos, de manera que ahora el control de acceso es realizado mediante certificados digitales almacenados en tarjetas inteligentes, y directorios LDAP y permite entrenar tanto el módulo de transcripción como los diferentes plugins y configurar el módulo distribuidor de contenidos mediante la adición, edición y eliminación de plugins. Es también a través de esta interfaz donde se ha realizado la integración con LINK, una herramienta que por ejemplo ofrece al agente una visualización del flujo de correos o llamadas VoIP.
This document summarizes the process of integration of several modules and tools with the aim of obtaining a single content preclassifying tool to assist Law Enforcement Agents in charge of analyzing the exchange of information performed by a suspect. This information can only be obtained when a Lawful Authorization has been granted by a Judge who allows the suspect’s communication to be intercepted and therefore signs the required Lawful Authorization. The process starts from a traffic capture file containing the subject’s communications, which is analyzed by the forensic tool Xplico which obtains the application messages in it, which will be referred to as contents. Xplico has been modified to perform calls to a content distribution module which, depending on the type of content, delivers them to different sets of small applications, called plugins. These sets of plugins provide the relevance for the content in a certain case and offer a training mode to improve their performance. Furthermore, a VoIP transcription module has also been integrated into Xplico. This module automatically transcripts audio contents from SIP conversations so that transcriptions can be processed by the content analyzer. Moreover, these transcripted conversations can also be employed to train and improve the performance of the module. All these modules: content distribution module, communication to plugins and transcription module had been previously developed but some modifications have been done in order to achieve the integration. Last but not least, the web interface which gives access to the contents has been improved so that access control is performed by means of digital certificates stored in smart tokens and LDAP directories. Besides, it now offers the possibility of training both the transcription module and the plugins and of configuring content distribution module through the addition, edition and deletion of plugins. It is also through this interface where integration with a tool called LINK has been performed, which for example allows agents to visualize the flow of emails or VoIP calls in the form of graphs.
This document summarizes the process of integration of several modules and tools with the aim of obtaining a single content preclassifying tool to assist Law Enforcement Agents in charge of analyzing the exchange of information performed by a suspect. This information can only be obtained when a Lawful Authorization has been granted by a Judge who allows the suspect’s communication to be intercepted and therefore signs the required Lawful Authorization. The process starts from a traffic capture file containing the subject’s communications, which is analyzed by the forensic tool Xplico which obtains the application messages in it, which will be referred to as contents. Xplico has been modified to perform calls to a content distribution module which, depending on the type of content, delivers them to different sets of small applications, called plugins. These sets of plugins provide the relevance for the content in a certain case and offer a training mode to improve their performance. Furthermore, a VoIP transcription module has also been integrated into Xplico. This module automatically transcripts audio contents from SIP conversations so that transcriptions can be processed by the content analyzer. Moreover, these transcripted conversations can also be employed to train and improve the performance of the module. All these modules: content distribution module, communication to plugins and transcription module had been previously developed but some modifications have been done in order to achieve the integration. Last but not least, the web interface which gives access to the contents has been improved so that access control is performed by means of digital certificates stored in smart tokens and LDAP directories. Besides, it now offers the possibility of training both the transcription module and the plugins and of configuring content distribution module through the addition, edition and deletion of plugins. It is also through this interface where integration with a tool called LINK has been performed, which for example allows agents to visualize the flow of emails or VoIP calls in the form of graphs.
Description
Keywords
Redes de comunicación, Protocolos de comunicación, Gestión de contenidos