2015 ERII Counterespionage Conference September 25 – 27, 2015 Hyatt-Dulles, Herndon, VA CONFERENCE PROGRAM 2015 ERII Counterespionage Conference Dear Attendees: On behalf of the Espionage Institute International (ERII) and its Board of Directors, it is my great privilege to welcome you to the 2015 ERII Counterespionage Conference! ERII’s 2015 annual conference promises to be our best conference to date. We’re glad you joined us! As in past years, ERII’s membership and guests have come together to discuss counterespionage news and events, listen to presentations by esteemed counterespionage professionals, see demonstrations of new TSCM equipment and network with distinguished colleagues. The conference schedule includes presentations about current events, technologies, software and devices relevant to the TSCM, counterespionage, counterintelligence and security disciplines. We are hopeful you will find the information presented helpful and useful. Our distinguished keynote and guest speakers will also share valuable expertise and insight with attendees. We warmly welcome our keynote speaker Robert Hunter, and our special guest speakers Ira Winkler and Araceli Gomes. We look forward to their presentations! This year, we welcome several sponsors and exhibitors to the conference. Research Electronics International (REI) is our Corporate Sponsor and has sponsored dinner on Friday evening. Thank you REI! We look forward to exhibitor presentations by REI, FLIR Systems, CRFS, Inc., Berkeley Varitronics Systems and Professional Development TSCM Group (PDTG). We urge all attendees to visit exhibitor tables following breakfast, during breaks, after lunch or following the conclusion of presentations by scheduled speakers each day. Exhibitor support makes our conference possible, and their excellence in product, technology and software helps to equip us for success. Once again, welcome. Enjoy ERII’s 2015 conference! Best, J.D. LeaSure Director Espionage Research Institute International 2 2015 ERII Counterespionage Conference ERII Conference Corporate Sponsor 3 2015 ERII Counterespionage Conference Schedule of Events Friday - September 25, 2015 Time Description Location 7:00 - 9:00 am Ala Carte Breakfast 9:00 - 9:30 am Welcome, Opening Address and CCISM Presentation by J.D. LeaSure, Director of ERII Cirrus Foyer B Cirrus AB Meeting Room 9:30 - 10:30 am Presentation by Jason Miles Dibley, TSCM Director of QCC Global "Cellular Based Eavesdropping Attacks and Countermeasures" Cirrus AB Meeting Room 10:30 - 10:45 am Mid-morning Break Cirrus Foyer B 10:45 am - 12:00 pm Presentation by David Major (FBI Ret.), President of CI Centre "Global Terrorist Espionage and Cybersecurity Briefing" Cirrus AB Meeting Room 12:00 - 12:45 pm Buffet Lunch 12:45 - 1:45 pm (Cont'd.) Presentation by David Major (FBI Ret.), President of CI Centre "Global Terrorist Espionage and Cybersecurity Briefing" Presentation by John Little, Shearwater TSCM "Merlin MK3 complete with all Interfaces and Software Options (Includes Kestrel)" Conference Center Restaurant Cirrus AB Ballroom 1:45 - 2:45 pm Cirrus AB Meeting Room 2:45 - 3:00 pm 3:00 - 4:00 pm Afternoon Break Presentation by Lee Jones, Research Electronics International (REI) "New TSCM Product Developments” Cirrus Foyer B Cirrus AB Meeting Room 4:00 - 5:00 pm Member Presentation Cirrus AB Meeting Room 5:00 - 5:30 pm Presentation by Charles Patterson, Exec Security TSCM Services/Patterson Communications, Inc. “DIY Video Inspection Cameras" Cirrus AB Meeting Room 5:30 - 6:30 pm Presentation by Blair Jennings/Chris Bainter of FLIR Systems "FLIR Infrared Camera Solutions for TSCM Applications" Cirrus AB Meeting Room 7:00 - 8:30 pm Dinner Sponsored by Research Electronics International (REI) Private Dining Room in Hotel Restaurant 4 2015 ERII Counterespionage Conference ERII Conference Exhibitors ULTRA-SENSITIVE OPPORTUNITY AT ER11 2015 25, SEPT 2015 EYES ONLY This is your chance to see first hand FLIR’s thermal camera solutions for TSCM applications. Get your hands on the ultra-sensitive FLIR GF335 that allows you to detect hidden listening devices and GF335. Designed for handheld portable use, it’s ideal for covert operations in the field. We’ll also let you in on recent testing we’ve done that can help you detect 1064nm lasers simultaneously with hidden listening devices. An all-in-one IR solution we call the GF335. TO SEE THE FULL REPORT VISIT OUR BOOTH AT ER11-2015. ULTRA-SENSITIVE GET A SNEAK PEEK AT: www.flir.com/gf335 5 2015 ERII Counterespionage Conference Schedule of Events Saturday - September 26, 2015 Time Description 7:00 – 8:30 am Ala Carte Breakfast 8:30 - 8:35 am Daily Conference Briefing by J.D. LeaSure, Director of ERII 8:35 - 9:45 am Keynote Presentation by Mr. Bob Hunter (FBI, Ret.) Mr. Hunter will discuss the John Walker Location Cirrus Foyer B Cirrus AB Meeting Room Cirrus AB Meeting Room espionage case based on his personal experience as the FBI case agent and lead investigator. The John Walker case is still ranked as one of the most damaging espionage crimes in US history. 9:45 -10:45 am Presentation by Roy Keeler, VP Americas of CRFS, Inc. "Proactive Countermeasures: 'Wireless Advanced Persistent Threat' Mitigation with RFeye” Cirrus AB Meeting Room 10:45 - 11:00 am Mid-morning Break 11:00 am - 12:00 pm Presentation by Jarrett Kolthoff, President / CEO of SpearTip, "Chinese & Russian Cyber Fraud – Cyber Hunt Operations" Cirrus Foyer B Cirrus AB Meeting Room 12:00 - 12:45 pm Buffet Lunch Conference Center Restaurant 12:45 - 2:30 pm Presentation by Ira Winkler & Co-presenter Araceli Gomes "Sophisticated Attack Myth: Hiding Unsophisticated Security Programs" Cirrus AB Meeting Room The presentation analyzes cyber attacks (Sony, Target, etc.) and shows how the attacks could have been prevented. The duo also recommend methods for strengthening security programs to stop those attacks in the future. Attendees will learn how IT professionals can take significant steps to stomp out these so called unstoppable gangs. 2:30 - 3:30 pm 3:30 - 3:45 pm 3:45 - 4:45 pm 4:45 - 5:45 pm Presentation by Scott Schober/Craig Schober, Creative & Communications Manager Berkeley Varitronics Systems "Wireless Threat Detection Products & Solutions" Afternoon Break Presentation by John B. Minor, Communications Expert "Detecting & Mitigating Cellular Carrier MITM Intercepts" Presentation by Paul D Turner, TSS TSI, Professional Development TSCM Group Inc. "Signal Recognition and Analysis (SRA)" Cirrus AB Meeting Room Cirrus Foyer B Cirrus AB Meeting Room Cirrus AB Meeting Room 5:45 – 6:15 pm ERII Award Presentations/ J.D. LeaSure, ERII Director Cirrus AB Meeting Room 6:30 - 7:30 pm Lock Picker’s Lounge, James Thomas & J. Ivy Thomas / Cocktail Hour Private Dining Area in Hotel Restaurant 6 2015 ERII Counterespionage Conference ERII Conference Exhibitor Interested In Becoming An ERII Member? The mission of the Espionage Research Institute International is to educate and advance best practices in the counterespionage, counterintelligence and the TSCM community through excellence, applied learning, and research that examines issues of strategic importance to the sector. We invite you to apply for membership, if you are: • A TSCM Specialist • Active or Retired Counterespionage / Counterintelligence Practitioner • A Non-practitioner with a role in TSCM as either a vendor or consumer Visit www.ERII.org to learn more! 7 2015 ERII Counterespionage Conference Schedule of Events Sunday -­‐ September 27, 2015 Time Description 7:00 -­‐ 9:00 am 9:00 -­‐ 9:05 am Ala Carte Breakfast 9:05 -­‐ 9:45 am 9:45 -­‐ 10:00 am 10:00 -­‐ 11:00 am 11:00 am -­‐ 12:00 pm 12:00 -­‐ 12:45 pm 12:45 -­‐ 3:00 pm 3:00 pm Location Cirrus Foyer B Daily Conference Briefing by J.D. LeaSure, Director Cirrus AB Meeting Room of ERII Presentation by John Little, Chairman TSCMi -­‐ Cirrus AB Meeting Room Development of TSCMi University Recognized Qualifications Mid-­‐morning Break Cirrus Foyer B Presentation by John B. Minor, Communications Cirrus AB Meeting Room Expert "Detecting & Mitigating Photonic Network Intercepts" Presentation by Paul Turner, Director of Cirrus AB Meeting Room Professional Development TSCM Group Inc. "Kestrel TSCM Professional Software and Technical Security Specialist (TSS) training." Buffet Lunch Conference Center Restaurant (Cont'd) Presentation by Paul Turner, Director of Cirrus AB Meeting Room Professional Development TSCM Group Inc. "Kestrel TSCM Professional Software and Technical Security Specialist (TSS) training." Conference Conclusion Cirrus AB Meeting Room 8 2015 ERII Counterespionage Conference ERII Conference Exhibitor Kestrel TSCM TM Professional So ware Developed in Canada, Kestrel TSCM is well Posi oned to Hunt in a Complex Signal Environment! RF Sweeps, Capture, Remote Monitoring, Analysis and Spectrum Surveillance have Never been this Easy! Signal Intelligence Support System Now You Can Have Tomorrows TSCM So ware — Today! Kestrel TSCM TM Professional So ware Standard Features Session Report Generator (SRG) RF Spectrum Display (RSD) 2D Waterfall Display (WFD) IQ Display (IQD) Live View Analysis (LVA) TM Chirp Threat Mode (CTM) TM Harmonic Signature Threshold Differen al Signal Analysis (DSA) Spectrum Baseline Logging (SBL) Spectra Data Recorder GPS Loca on Support RSSI Tone Locator (RTL) IF Burst Detect (IBD) Master Automa c Threat List Posi onal Zoom Control (PZC) Advanced Signal Intelligence Database (ASID) Frequency Database (FDB) Channel Profile Masks (CPM) Peak Seeking Markers (PSM) Spectral Range Control (SRC) Spectral Profile Editor (SPE) Mapping and Image Import Demodula on Visualizer IF Spectrum Display Programmable (CSV) Spectra Trace Export Mul ple Receiver Spectrum and Demodula on Hand‐Off Get the latest industry disrup ve SDR technology that is up to 7 mes less expensive than other systems. Kestrel TSCM TM Professional So ware is an operator‐centric, TSCM specific, real‐ me and remote spectrum monitoring applica on that is budget friendly at just $3,495.00 (Canadian Dollars). Now it is possible to equip all team members with a full featured, RF sweep and analysis so ware, Rapid Deployment Kit (RDK) that will significantly improve operator proficiency, and maximize the Probability of Detec on (POD) in the field. Kestrel TSCM TM fully supports mul ple RF spectrum bands, across mul ple search receivers, and supports mul ple display monitor capability for unprecedented situa onal awareness. Single, dual, and mul ple receiver opera on across any number and type of supported search receivers and analyzers. Real‐ me dynamic spectrum and demodula on hand‐off capability, across all supported receiver types, on your PC laptop computer, or across secure Remote Desktop So ware (RDS). Kestrel TSCM TM Professional So ware is easily deployed in any TSCM / SIGINT role, for portable, mobile, fixed‐site, temporary, or permanent, operator assisted, and for remote spectrum surveillance and monitoring applica ons, worldwide. Kestrel TSCM TM is an agile, scalable, single source So ware Defined Radio (SDR) solu on that adapts well to a variety of typical and unique deployment applica ons, and is fully supported by advanced technical operator based cer fica on training. Dynamic Alert Annunciator (DAA) Alert Combining Technology Visual Status Annunciator (VSA) Minimum Detec on Amplitude Operator Signal List (OSL) Harmonic Calculator Tool System Resource Monitor (SRM) Guard Band Overlay Spectral Baseline Clipping (SBC) Real‐Time DSA Echo Mode Image Capture Tool (ICT) Kestrel Project and File Write Management Capability Collec on and Recording Mode Analysis and Review Mode (ARM) Event Recording Mode (ERM) Harmonic / Sub‐Harmonic Calculator Tool Kestrel Profile Templates (KPT) DSA (CSV) Spectra / RSSI Export WFD Compression Management Kestrel Super Trace (KST) Kestrel TSCM TM Applica ons Counter‐Espionage ‐ Due Diligence Sweeps Private Sector, Corporate Security, Law Enforcement, Government, and Military Applica ons VIP Protec ve Opera ons Support Role Remote RF Spectrum Surveillance and Monitoring Kestrel TSCM TM Professional So ware ‐ A Bold New Approach! Professional Technical Operator Training and Cer fica on Available Kestrel Support Profiles (KSP) Rohde & Schwarz EM100, PR100 (3.5 GHz, 7.5 GHz) Technical Security Specialist (TSS) Designate Cer fica on Program Anritsu Spectrum Master “C” and “T” Series (9 GHz, 13 GHz, 20 GHz, 32 GHz, 43 GHz) 14‐Day Full‐Time Resident Training Program (Canada) Includes full standards based cer fica on training, based on the pres gious TSB 2000 (Technical Standard), TSS TM designa on, private accommoda ons and all meals on‐site. Our Resident Training Centre (RTC) facility is world class, and allows for a relaxed, but focused training experience. Signal Hound SA44B (4.4 GHz), SA124B (12.4 GHz), BB60A (6 GHz), BB60C (6 GHz) ThinkRF WSA5000‐408 (8 GHz), WSA5000‐418 (18 GHz), WSA5000‐427 (27 GHz) Shearwater TSCM Merlin MK3 (30 GHz) CRFS (UK) RFeye Node | Nexus (6 GHz, 18 GHz) Kestrel Technical Operator Cer fica on Training Tektronix RSA306‐USB (6.2 GHz) 3‐Day Full‐Time Resident Training Program (Canada) "The experience and real‐world needs of professional technical operators like you, drive the future of the Kestrel TSCM TM Professional So ware innova on and development process…" The Kestrel TSCM TM Professional So ware, advanced operator cer fica on, includes course materials, private accommoda ons, and meals on‐site. To gain the most benefit, we strongly encourage Kestrel TSCM TM operators to a end our operator cer fica on training. Join Us for the 11th Annual Canadian Technical Security Conference (CTSC 2016) www.ctsc‐canada.com Professional Development TSCM Group Inc. www.kestreltscm.com www.pdtg.ca Telephone: 1‐647‐293‐7384 9 Email: pdturner@pdtg.ca Contact: Paul D Turner, TSS TSI 2015 ERII Counterespionage Conference CONFERENCE ADVERTISERS 10 2015 ERII Counterespionage Conference HYATT-DULLES: IMPORTANT AREAS 11 2015 ERII Counterespionage Conference HELPFUL INFO: ERII Conference Badge: Be sure to wear your ERII Conference badge when attending daily conference sessions, when utilizing the daily food and beverage service, during lunch, and if you attend ERII evening dinner or cocktail events. Service may be denied if you are not identified with your ERII Conference badge. Breakfast, Food & Beverage Service: Your conference ticket includes the food & beverage service provided outside Cirrus Meeting Room B from 7:00 am to 5:00 pm. Breakfast is a Euro continental style breakfast, which includes an espresso bar. Breakfast is served from 7:00 – 9:00 am. After breakfast, head over to ERII’s conference room and visit the exhibitor tables. Note that service is limited from 9:00 am to 9:30 am. But, from 9:30 am to 11:30 am pastries, granola bars, cookies, etc. and beverages are served outside Cirrus Meeting Room B. From 11:30 am to 2:00 pm, a buffet lunch including salad bar and desserts is served in the hotel restaurant. Please enjoy your lunch in ERII’s reserved section. After lunch, head over to ERII’s conference room and visit the exhibitor tables. Note that service is limited from 2:00 pm to 2:30 pm. But, from 2:30 pm to 5:00 pm, cookies, cheese & crackers, etc. and beverages are served outside Cirrus Meeting Room B. Suggestion: Grab a snack or refill your beverage prior to the change overs listed above, and before the conclusion of daily food and beverage service at 5:00 pm. WiFi Internet: WiFi Internet service is provided free of charge in guest rooms and in the common areas of the hotel (lobby & restaurant). WiFi is not provided for attendees in the ERII conference room or the adjacent areas in the conference center. Presenters do have access to the Internet during their presentations. Exhibitors also have WiFi Internet service in the conference room. Again, free WiFi Internet service is available in guest rooms, the restaurant, lobby and other areas of the hotel exclusive of the conference center. 12