Investigation support system (Supreme Prosecutors’ Office)

Introduction

This project is an analysis system that helps the Supreme Prosecutors’ Office of Korea with investigations.

This system offers a variety of features that help users work in a better environment.

It also takes over tasks that are hard for people to do.

The investigation support system we built has the following features.

1. Illegally filmed content distribution detection system

It automatically tracks, detects, and analyzes illegally filmed content that is being distributed indiscriminately on the internet, enabling fast and accurate investigations.

It also uses automated web analysis to enable permanent support for victims of distribution.

1-1. Access Bridge

To continuously monitor illegally operated websites, it builds a database by tracking these sites and collecting their domains.

It then uses information from their web pages to track and monitor changed domains or identical sites through image, domain, and data analysis.

This feature takes advantage of the fact that illegal websites keep changing their domains, making it easy to find out which domain an illegal site has moved to.

1-2. Video download, feature extraction & comparison system

It extracts feature information from video content and, for optimization, extracts key frames from the video. It then extracts and compares keypoints and descriptors from the extracted key frames, and stores metadata and unique feature information in a database to collect the unique features of video content.

• Developed an optimized download feature that adapts to the download status of illegally filmed content
• Developed an automatic notification feature for the results of detecting sites that post illegally filmed content
• Developed extraction of unique feature information and lightweight database storage for searching for illegally filmed content
• Developed a feature for collecting meaningful data, such as hashes, unique feature information, and related collection information

1-3. Web information collection

• This collection system is based on a virtual web browser and can download any content on the internet, such as text and files, to actively collect illegal video content online.
• To search a wide range of unspecified harmful sites, it uses a search-engine-based algorithm and provides a dynamic collection agent framework that can search all videos on sites with diverse characteristics, rather than being tied to the characteristics of a particular site.

1-4. Integrated management system

This system was built to make the features listed above easy to manage at a glance. Its user-friendly UI makes a wide range of data easy to manage and shows the progress of each feature.

• Developed an intuitive, statistical interface for efficient investigation support
• Developed the UI for illegally filmed content detection: displaying and searching analysis information, entering investigation information, and displaying detection information
• Developed the UI for malware distribution detection: entering and looking up analysis information, displaying results, and displaying analysis results
• Developed the UI for cryptocurrency exchange analysis: entering and looking up cryptocurrency addresses, and displaying analysis results

This system is designed to provide overall management of the illegally filmed content distribution detection system.

2. Cryptocurrency transaction lookup system

It lets investigators enter and look up cryptocurrency addresses and displays the analysis results.

3. Cyber threat collection framework

The cyber threat intelligence collection framework is a system for collecting a wide range of cyber threat intelligence to analyze signs of cyberterrorism and attacks in advance.