Sunday, March 11, 2012

DATA ANALYTICS CAN HELP KENYA POLICE COMBAT CRIME

Crime is dynamic. The hooligans of yesteryears used techniques that would be anathema to the hooligan of today. This dynamism is also reflected in the crime detection and investigation methods that are used by the police. This means that police forces are recognizing that use of modern techniques in combating crime is important and technology is at the top of the list.

Analyzing data to enhance security goes a long way in preventing crime. Police forces all over the world are appreciating that analysis of stored data, together with real-time data gathered from the field, can greatly reduce incidences of crime. The Kenya Police should not be an exception.

Data analysis combines various techniques such as data mining, predictive analytics, business intelligence and trend analysis.

One area in which data analytics can be used is in pinpointing crime. By using Geographic Information Systems (GIS) in combination with software that can analyze criminal behavioral patterns, it is possible to determine when and where crime is most likely to take place.

The police are subsequently able to make informed decisions on where to deploy resources such as plainclothes police personnel. This type of smart deployment means that more efficient usage of limited resources is possible.

Another area data analytics can be effectively used is in accident prevention. Web-based CCTV data can help determine accident black spots. For instance when an accident occurs this data is stored in a server. The analytic software will then be able to collate the current accident data with historical data.

If historical data indicates a trend of accidents in the same spot then these areas can be marked as certain black spots. Most black spots are rarely permanent. Identifying these constantly shifting black spots is possible with analytical software.

Improved control is another area the police can apply data analytics. Large gatherings of people in various events such as national days, football matches or musical concerts require smart crowd control management.

By using live CCTV imagery/data and comparing it with past event data, the police are better positioned to deploy appropriate resources to ensure the public is monitored and kept safe. An absence of this analysis results in an unprepared response to crowd unrest as witnessed in the recent football crowd tragedy in Port Said, Egypt.

The use of data-analytics by the Police brings about clear benefits such as preventive crime control and better allocation of resources.

BEWARE OF SOCIAL MEDIA CYBER-STALKERS

Social media sites such as Facebook, Tweeter and Google+ have captivated many Kenyans. If you are not in updating your page or tweeting then you are not in touch with current trends. Social media gives you a ubiquitous presence. This means that your friends can converse with you at anytime and from any anywhere.

The flip side of this is that you cannot totally shut out people you don’t want to interact with. When you ‘unfriend’ someone in acrimonious circumstances, the likelihood of that former friend becoming a cyberstalker is high.

Cyberstalking is the use of electronic means to harass an individual or group of people. A cyberstalker harasses a victim through emails, phone calls, sms messages, Facebook posts and tweets. These messages are sent to the victim whether they are at home, school or work.

Cyberstalkers intrude into a victim’s life in frightening or intimidating ways making the victim feel there is no escape.

The effects of cyberstalking should never be under-rated. The psychological effect can be damaging and can result in psychological trauma regardless of whether the victim ever actually meets the stalker.

It has been observed that the fears that result from cyberstalking depend on the individuals affected. However in male victims the most paramount fear is damage to their reputations. Female victims on the other hand are more likely to fear physical harm from cyberstalkers.

Cyberstalking is not addressed as a specific crime in The Kenya Communications (Amendment) Act. Legislative change should therefore be initiated that allows police to compel Internet Service Providers (ISPs) to implement processes that deter harassers. This legislation should also force ISPs to surrender internet logs to authorities.

Apart from legislation we need to appreciate that the police and ISPs are primary centers of responsibility in any cyberstalking crime. Police are supposed to provide an active response to stop the harassment and conduct investigations in case the crime is reported. ISPs are supposed to implement security technologies that prevent such harassment.

Other stakeholders such as the CCK based Kenya Computer Incident Response Team (KE-CIRT) can contribute positively in cyberstalking investigations.

As more and more Kenyans embrace social media and develop online relationships, cyberstalking becomes another online menace we have to contend with.

Cyber stalking victims in Kenya should not be allowed to suffer in silence. By putting in place effective response and investigative structures, we can safeguard the online experience of many Kenyans.

Wednesday, February 01, 2012

SHADOWY VIRTUAL TERRORISTS INVADE KENYA


Article written By JOHN OYWA in East African Standard (Underworld Magazine) of 1st February, 2012


They pass for harmless, ordinary souls. Some cut the figures of suave business executives while others are shadowy introverts with insatiable love for computers.

But behind the veil of innocence lies the faces of ruthless white collar criminals whose activities across the globe has cost governments and private companies billions of shillings in stolen data and fraudulent deals.

They neither carry firearms nor use force on their victims. Yet this new breed of shadowy criminals have emptied bank tills, accessed secret government data and robbed individuals of hundreds of thousands of shillings — all from the comfort of their homes and cyber cafes.

One of them, an Indonesian, struck Kenya last week, hacking and defacing more than 100 Government websites and posting a warning that he would be back soon, to inflict more damage.

This was just a year after another hacker attacked and disabled the official police website.

The Government played down the shocking attacks, saying they posed no threat to its databases even as experts warn that the incident could just be a tip of the iceberg as cyber terrorists and criminals turn their arsenals on third world countries.

Highly exposed

Criminologists and Information Technology security experts say that Kenya remains highly exposed to cyber warfare. They say the security of public data and security secrets were under threat more than ever before.

The fact that the Indonesian hacker, who was described as an amateur, chose Kenya, spoke volumes.

"The hacker may have found Kenya very vulnerable. It is evident he spent very little time to execute the assignment, an indication of just how much we are exposed as a country," says Mr Sylvanus Sewe, an IT forensic expert. Sewe says although no vital data was lost in the hacking, it greatly embarrassed the Government and dimmed its image in the ability to fight economic crimes. "It means many people may no longer trust Government sites because one cannot be sure if what he or she is reading has been manipulated by hackers," says Sewe.

He adds: "I am imagining what will happen if such criminals could get access to the Kenya National Examination Council database containing national examination results or the Independent Electoral and Boundaries Commission data on election results."

Last year a clique of employees and students of Kenyatta University hacked into the institution’s online database and altered examination results.

Some final-year students bribed university employees to change their poor grades to enable them graduate. They manipulated passwords of former employees of the university, some of who were dead, to access the examination database.

Falling victim

Due to the alterations, the university struck off names of many students from those scheduled to graduate last December, sparking a legal tussle after the affected went to court to challenge the decision.

A private university in Nairobi also suffered a similar incident after some Internet savvy students hacked into its financial database and changed fee balances. The University lost a lot of money because students with balances altered the records to show they had cleared their fees.

Investigation indicates that cybercrimes, which vary from receiving of spam mails, hacking, espionage, viruses and using specific software to get information from individual, organisation or government was on a sharp rise in the country.

With the online and mobile banking taking root in Kenya, cyber criminals have been smiling all the way to the bank.

Industry players estimate that mobile money platform handles up to Sh7 billion per day, a chunk of which ends in the pockets of criminals.

Another ICT security expert, Mr Muthoga Kioni, says cyber crime had become a huge threat because it was easy to execute.

"Many young people are getting into cybercrime because it has minimal risks with maximum returns. They sit in their houses or cyber cafes and make millions within a few hours. They hardly get arrested," says Kioni.

Kioni says a hacker needs only about six hours of research not only to break into the website, but to access the data base.

"There are thousands of hacking tutorials in the Internet that helps hackers to learn new tricks," he says.

The Internet thieves execute their acts by stealing vital information such as Pin Numbers and passwords to gain entry into the websites and even access bank accounts.

But Communications Permanent Secretary, Dr Bitange Ndemo, downplays the issue, saying it was not as bad as was being portrayed.

"The recent hacking of Government websites was unfortunate but little damage was done because the criminals did not access the data bases," he says.

Disastrous prospects

He explains that it was not easy for the hackers to gain access to Government databases containing vital information. "A website is just like a brochure advertising the services offered by the Government ministries. It has no data."

The PS says it would be disastrous if the criminals could gain access to sensitive databases such as that containing M-Pesa details and transactions.

"There is need to improve our cyber security and we are already doing this. It is also important for companies to put tough security framework to safeguard their internet data since most of cyber crime is committed through collusion with insiders," he says.

Internal crime

He says 60 per cent of cyber crime was internal and urged organisations to foster discipline and value system to counter the problem. "If we avoid the 60 per cent then we will be very safe," he adds.

Industry players point fingers at the Government’s ill preparedness in fighting cyber security.

"The truth is that we have big loopholes. In other countries, the police have high technical crime unit that deals with cyber crime and other organised economic crimes. In Kenya, we still concentrate on physical security than technical crimes," says Kioni.

The initial Cyber Crime Unit, which was established at the CID headquarters in early 2000, is no longer operational. Officers who had been attached to the unit either resigned and were hired by financial institutions or were redeployed to other departments.

But Ndemo says adequate measures have been put in place to fight the cyber crime in the country. He cites the establishment of the National Computer Emergency response Team (KE-CERT) and the e-government secretariat as some of the interventions.