Jump to content

Data Intercept Technology Unit

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by P2Peter (talk | contribs) at 04:34, 16 July 2014 (additional info about Omnivore). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

The Data Intercept Technology Unit (DITU, pronounced DEE-too) is a unit of the Federal Bureau of Investigation (FBI) of the United States, which is responsible for intercepting telephone calls and e-mail messages of terrorists and foreign intelligence targets inside the US. It is not known when DITU was established, but the unit already existed in 1997.[1]

DITU is part of the FBI's Operational Technology Division (OTD), which is responsible for all technical intelligence collection, and is located at Marine Corps Base Quantico in Virginia, which is also the home of the FBI's training academy. In 2010, DITU had organized it's activities into seven regions, each with a Storage Area Network (SAN).[2]

Internet wiretapping

In the late 1990s, DITU managed an FBI program codenamed Omnivore, which was established in 1997. This program was able to capture the e-mail messages of a specific target from the e-mail traffic that travelled through the network of an Internet service provider (ISP). The e-mail that was filtered out could be saved on a tape-backup drive or printed in real-time.[3]

In 1999, Omnivore was replaced by three new tools from the DragonWare Suite: Carnivore, Packeteer and CoolMiner.[3] [4] Carnivore consisted of Microsoft workstations with packet-sniffing software which were physically installed at an Internet service provider (ISP) or other location where it can "sniff" traffic on a LAN segment to look for email messages in transit. Between 1998 and 2000 Carnivore was used about 25 times.[3]

By 2005, Carnivore had been replaced by commercial software such as NarusInsight.[5] A report in 2007 described this successor system as being located "inside an Internet provider's network at the junction point of a router or network switch" and capable of indiscriminately storing data flowing through the provider's network.[6]

Slide about NSA's PRISM program which mentions the role of DITU in collecting the data

The raw data collected by these systems are decoded and put together by a tool called Packeteer and these can be viewed by using a custom made software interface called CoolMiner. FBI field offices have CoolMiner workstations that can access the collected data which were stored at the Storage Area Network (SAN) of their region.[2]

Since the NSA set up the PRISM program in 2007, it's DITU that actually picks up the data at the various internet companies, like Facebook, Microsoft, Google and Yahoo, before passing them on to the NSA for further processing, analysing and storing.

DITU also works closely with the three biggest American telecommunications providers (AT&T, Verizon, and Sprint) to "ensure its ability to intercept the telephone and Internet communications of its domestic targets, as well as the NSA's ability to intercept electronic communications transiting through the United States on fiber-optic cables".[4]

The latter is probably related to the NSA's collection of domestic telephony metadata, for which the FBI petitioned the Foreign Intelligence Surveillance Court to order the biggest American telecommunication carriers, like for example Verizon Business Network Services, to hand over all the call records of their customers to the NSA.[4]

References

  1. ^ Going for the throat: Carnivore in an Echelon World - Part I
  2. ^ a b Cryptome.org: Law Enforcement Technical Forum, March 2-3, 2010
  3. ^ a b c Internet Wiretapping - Government and Law Enforcement Use
  4. ^ a b c ForeignPolicy.com: Meet the Spies Doing the NSA's Dirty Work, November 21, 2013
  5. ^ "FBI Ditches Carnivore Surveillance System". Foxnews.com. Associated Press. 2005-01-18. Retrieved 2008-10-29.
  6. ^ "FBI turns to broad new wiretap method". CNET News. January 30, 2007.