Child Exploitation Tracking System

Child Exploitation Tracking System (CETS) is a Microsoft software based solution and Microsoft sales/product marketing campaign targeting Law Enforcement worldwide. This is a sales activity that markets the Microsoft platform to law enforcement through a "shared cost" software tool that assists in managing and linking cases (across jurisdictions) related to child protection. CETS was developed in collaboration with law enforcement in Canada. Administered by the loose partnership of Microsoft and law enforcement agencies, CETS offers law enforcement unique tools to gather and share evidence and information so they can identify, prevent and punish those who commit crimes against children.

ALERT: This topic is sensitive and the fact that Microsoft's Worldwide Public Sector Sales organization has actively managed the CETS deployments makes frank and truthful documentation/discussion problematic. Someone from a Microsoft and/or Microsoft Partner IP address has been deleting parts of this page in order to remove verbiage critical of Microsoft and/or Law Enforcement. Please read, edit, and amend any errors in facts. Please do not delete statements to cover up or eliminate controversial perspectives.

Some Facts about Crimes Against Children

Internet crimes involving children are growing at an alarming rate. In 2001, there were an estimated 100,000 Web sites depicting child exploitation. Two years later, the United Kingdom’s Criminal Intelligence Service said that number had doubled. The production and distribution of abuse images of children is big business. According to ANESVAD, a nongovernmental organization based in Spain that focuses on healthcare and child sexual exploitation issues, there are now more than 4 million Internet sites worldwide containing exploitive material about children, with as many as 500 new sites being created daily. ANESVAD estimates that approximately 2.4 million sites are fee-based, generating revenues of up to U.S.$1.3 billion per month. ECPAT International reports that estimates of annual business volume range widely, from U.S.$3 billion to U.S.$20 billion (the latter, according to the U.S. Federal Bureau of Investigation). New figures from the Internet Watch Foundation’s Annual Report show the severity of online child abuse content is increasing, with a fourfold rise in images depicting the most severe abuse. The report goes on to outline the following key figures for 2006.

• 31,776 reports were processed by the IWF Hotline, which represents a 34 percent increase over 2005.
• 91 percent of victims, depicted in URLs confirmed to be abusive, appear to be younger than 12 years old.
• Child abuse images (commercial and non-commercial) of levels 4 and 5 (the most severe) increased from 7 percent in 2003 to 29 percent in 2006.

Traditional policing has geographical and technological limits. Every police agency has jurisdictional borders, whether municipal, regional, or national. Internet child exploitation, however, is borderless, allowing perpetrators to take advantage of the power and anonymity of the Internet. This can create a gap between what criminals can do and how police can respond. With child abuse images, for example, police may be able to look at images of a crime being committed but be unable to respond. Worldwide, police have identified fewer than 500 of the estimated 50,000 children captured in online child abuse— less than 1 percent.

About the CETS Partnership

In 2003 a police officer in the Canadian Royal Mounted Police (RCMP) made a bold request directly to Bill Gates, CEO and Chief Architect at Microsoft at the time, for assistance with these types of crimes (reference: RCMP Background). Due to the nature of these crimes, the response and commitment from Microsoft was a quick, emotional one. Additionally, Microsoft executives envisioned a small investment "citizenship" partnership that would provide disproportionally large marketing potential. However, the requirements and investment for building a system that could address Law Enforcement needs grew beyond expectations. Agencies experienced in tracking and apprehending those who perpetrate such crimes were involved in the design, implementation, and policy. The solution needed to assist law enforcement agencies from the initial point of detection, through the investigative phase, to arrest, prosecution, and conviction of the criminal. In addition, it was imperative that the solution adhered to existing rights and civil liberties of the citizens of the various countries. This included remaining independent of Internet traffic and any individual user’s computer. Finally, such a solution needed to be global in nature and enable collaboration among nations and agencies. In order to increase the effectiveness of investigators worldwide, such a system would allow law enforcement entities to:

• Collect evidence of online child exploitation gathered by multiple law enforcement agencies.
• Organize and store the information safely and securely.
• Search the database of information.
• Securely share the information with other agencies, across jurisdictions.
• Analyze the information and provide pertinent matches.
• Adhere to global software industry standards.

However, as is the complicating factor across many technology based solutions, the issues and limitations of the CETS software solution are not due to constraints of technology but rather to issues in policies and processes [people]. There is generally inadequate cooperation, communication, and coordination across jurisdictional, law enforcement agency, and political/country boundaries. Microsoft has been an important technology leader in this arena; however, no single Law Enforcement body has demonstrated effective leadership, vision, or ability to address the non-technical challenges facing global/international crimes on the Internet. CETS deployments are truly only useful if they aggregate information across organizational and political boundaries. Crimes against children on the Internet span all manner of political and geographical boundaries; to date, all CETS deployments are stand alone systems isolated within their own country (at best) and their own organization (at worst). Law Enforcement investigators generally still communicate among one another through informal channels - many keep in touch through informal Facebook associations, email, and phone (actual voice).

Additionally, the CETS activity has been run as a product marketing campaign by Microsoft, distorting it into one-off deployments based upon many drivers other than proven need or capability of the recipient agencies. Microsoft, for good or for bad, has led the deployment of CETS across the globe without addressing its own inherent conflict of interest. Unwritten, and perhaps taboo, it is said within Microsoft that "Microsoft donates a platform in order to sell more of the platform." This will remain the case as long as there is a leadership & capability vacuum across Law Enforcement internationally. The breadth approach (many deployments) in which Microsoft is engaged rather than targeted approach (fewer/central) may support this fact. The costs of these deployments and tool development are also problematic. Microsoft has invested in excess of USD 12 Million in developing and deploying the tool with extremely short-sighted attempts at a long-term sustainability strategy to support the extant community worldwide. Since CETS is a "shared cost" tool, the recipient Law Enforcement Agency must absorb a share of the costs for deployment and they must sign and pay for a premier service contract with Microsoft. So the overall costs to Law Enforcement worldwide are proportional. The underlying Microsoft business strategy has been to introduce the "premier service offerings" on a smaller scale in order to expand its customer base.

There are no public numbers on the cost/benefit of CETS to Microsoft sales; however, deployments are only increasing, as are costs, and marketing returns are said to be down. CETS has been labeled by "some" senior Microsoft managers and executives as Old News.

Law Enforcement Partnerships Worldwide

A number of law enforcement agencies use or are deploying the CETS tool, these include:

• Australia: High Tech Crime Centre
• Brazil: Federal Police
• Canada: Royal Canadian Mounted Police, Toronto Police Services Sex Crime Unit, & Twenty-six other Canadian police services
• Chile: National Investigative Police
• Indonesia: National Police
• Italy: Ministry of Interior and Postal Police
• Romania: National Police
• Spain: Interior Ministry
• United Kingdom: Serious Organized Crime Agency & Child Exploitation and Online Protection Centre
• United States: Department of Homeland Security and Federal Bureau of Investigation

• In Planning for 2010-2011: Poland, Argentina and United Arab Emirates.

Criticisms, Ulterior Motives, and Pitfalls

see Main article: Criticism of Microsoft

Donations of software and solutions are problematic and public private partnerships to develop such are equally so. "Partnerships take many forms, are inherently complex, and management intensive. Even between similar ICT businesses, they have a high rate of failure. In the early 1990s, studies by consulting firms McKinsey, Booz Allen Hamilton, and Dataquest found that half of all such partnerships failed in that they destroyed, rather than added, shareholder value or ended in dissolution."

Microsoft competitors have stated that such activity unfairly makes inroads into agencies and sectors (i.e. Law enforcement agencies with CETS). Additionally, support business models are difficult to sustain long-term using the donation model - Law Enforcement agencies will be put at risk should they develop dependencies on a software solution unless there is a long-term business model with clear accountabilities put into place. Questions that any agency or government should ask themselves when considering such a partnership with the private sector:

• what is the long-term commitment and lifecylce planning?
• how do I create my own business model?
• how should I leverage the partnership for short term dependencies only?
• what is my exit strategy from this partnership?

These questions and more likely apply to any public-private partnership activity. Private sector business models change rapidly with market conditions. So it is understandable that long-term commitments from Microsoft and any of its competitors will be questionable if the partnerships are not clearly defined and finite.

It is very important to note: Microsoft's Child Exploitation Tracking System (CETS) represents a long term dependency with no clear roadmap for Law Enforcement agencies on which they may stake their business and operational models. Sources at Microsoft have reported that in 2009 Microsoft began backing out of support for CETS by eliminating both the Redmond-based CETS Program Manager and the Technical Project Manager roles. Additionally, in 2010 the Microsoft Worldwide Public Sector sales organization, responsible for CETS for the past seven years, has cut support completely. As stated above, since CETS is a complex and management intensive endeavor, Microsoft's continued scaling back in this way puts all law enforcement using this tool at risk. Law Enforcement should cautiously manage and consider any dependencies in regards to the CETS tool and develop their own contingency plans accordingly to minimize dependencies on Microsoft.

Other links

• The International Centre for Missing & Exploited Children
• Kids' Internet Safety Alliance (KINSA)
• Microsoft litigation