DYNAMIC PAGE -- HIGHEST POSSIBLE CLASSIFICATION IS TOP SECRET // SI / TK // REL TO USA AUS CAN GBR NZL (S//SI) FAIRVIEW and STORMBREW: 'Live' - On the Net FROM: and Special Source Operations (S332) Run Date: 11/19/2003 (TS//SI) Two special source collection programs - S332's FAIRVIEW and STORMBREW - are producing SIGINT successes by "living on the global intelligent network." In September of this year, FAIRVIEW quietly turned on a new DNI (Digital Network Intelligence) collection capability that quickly proved a valuable source of intelligence: A&P;'s Office of Proliferation and Arms Control (S2G21) issued the first SIGINT product report sourced from this new access on September 24. Then, less than a month later, the first E-series product report (extremely sensitive serialized reports sent to a limited audience) was issued by International Security Issues, (S2C21). Many other offices now use this collection, as well - the FAIRVIEW DNI access is extremely high-volume and delivers a very broad target set covering all SIGINT product lines. For example, the initial deployment of the FAIRVIEW DNI access, for e-mail only, is now forwarding more than one million emails a day to the keyword selection system at NSAW. (TS//SI) STORMBREW has a complementary large-scale DNI collection effort (covername PERFECTSTORM) that is just about ready for prime time. As the large-scale effort was being developed, STORMBREW deployed several QRC (Quick Reaction Capability) collection systems that have yielded critical intelligence supporting the Global War on Terrorism. STORMBREW engineers then worked with FAIRVIEW engineers to transfer this collection architecture to FAIRVIEW. Recently, FAIRVIEW identified the "other side" of one of the STORMBREW QRC links, and was able to use the same collection architecture to rapidly put this new link on cover. This type of complementary access provides the A&P; analysts with more complete coverage of their target. In addition, STORMBREW and FAIRVIEW personnel worked side-by-side with CES personnel to add Voice over IP processing capabilities to both of these accesses to further exploit the targets' communications. (TS//SI) In addition to email, FAIRVIEW and STORMBREW are also collecting metadata, or data about the network and the communications it carries. For September 2003 alone, FAIRVIEW captured several trillion metadata records - of which more than 400 billion were selected for downstream processing or storage. This metadata will be used to enable the surgical collection of much smaller amounts of target-rich data - which should extend beyond FAIRVIEW and STORMBREW to many other DNI accesses across NSA. This metadata is flowing to MAINWAY (contact chaining database) today, and a major interface to the Knowledge System Prototype (KSP) is only days away from its operational debut. Both the STORMBREW and FAIRVIEW teams are working closely with the Network Analysis Center, the Collection Strategies and Requirements Center, and analysts throughout A&P; to foster metadata exploitation, focus the access, improve the selectors and filters, and hunt for targets within the access. This collaborative process is the foundation for SIGINT success on the Net. (TS//SI) FAIRVIEW and STORMBREW also provide other major international accesses that support all A&P; SIGINT product lines. In a recent complementary modernization effort, the FAIRVIEW and STORMBREW programs quadrupled SIGINT production from these circuitswitched accesses, only a few months after implementation. As the FAIRVIEW and STORMBREW programs continue to expand their "live" presence on the global net, we are expecting even greater insight into the net itself, and the communications of our targets, resulting in similar SIGINT production gains from these packet-switched accesses. "(U//FOUO) SIDtoday articles may not be republished or reposted outside NSANet without the consent of S0121 (DL sid comms)."

DYNAMIC PAGE -- HIGHEST POSSIBLE CLASSIFICATION IS TOP SECRET // SI / TK // REL TO USA AUS CAN GBR NZL DERIVED FROM: NSA/CSSM 1-52, DATED 08 JAN 2007 DECLASSIFY ON: 20320108