Frequently Asked Questions
WILL NETCLEAN PROACTIVE FOR EXAMPLE DETECT FAMILY PICTURES FROM THE BEACH?
No, ProActive only match against material classified as child sexual abuse by law enforcement, this ensures that nothing, but child sexual abuse material is detected and reported. ProActive will not detect family pictures from the beach etc.
WHAT HAPPENS WHEN AN INCIDENT OCCURS?
When an incident occurs, the designated person(s) within the organisation is notified via a text message or an e-mail. This means that those responsible do not need to continually supervise the system; alerts indicate when an incident has occurred. It is important that the NMS runs continuously in order to receive incident reports and send notifications. In the event of an incident, ProActive will only send information about it to the designated contacts within the company, no information leaves the company automatically.
(It is important that the NMS runs continuously in order to receive incident reports and send notifications.)
WHAT INFORMATION DO YOU RECEIVE FROM NETCLEAN PROACTIVE IN CASE OF AN INCIDENT?
In case of an incident (when a suspicious image is detected), the designated person(s) receives an Incident Report.
The report can contain;
- type of agent
- computer name
- DNS name
- MAC addresses, in which domain and in which country the computer is located
WHICH TECHNOLOGIES ARE USED TO STOP CHILD SEXUAL ABUSE MATERIAL?
Law enforcement tools aside, there are a number of technologies available that are used today to address the problem; such as crawlers, blocking technologies, filter technologies, artificial intelligence, robust hashing technologies and binary hashing technologies. These technologies all have strengths and limitations, depending on the context in which they are used.
More information on the different technologies and how they work is gathered here.
HOW CAN HASHING TECHNOLOGY BE USED TO DETECT CHILD SEXUAL ABUSE MATERIAL?
In addition to using filter solutions, businesses can install NetClean ProActive designed to specifically detect child sexual abuse material on work computers. The software works similarly to an antivirus programme, but instead detects when child sexual abuse material is handled on a work computer. To identify the images, hashing technology is used. When law enforcement investigates child sexual abuse cases, they produce a hash, a unique ‘digital fingerprint’, of each image. These hashes are then added to a database, which allows the software to match against images handled on the work computer. This means that NetClean ProActive only detects child sexual abuse material that has been classified by law enforcement. At detection, an alert is sent to designated persons within the organisation (business or public sector organisation) who handle the incident and report to police.
WHY ARE WEB FILTERS NOT ENOUGH?
Filter technologies are primarily used to manage security threats such as business intelligence, service disruptions, ransomware, fishing etc. While they can also be used to block websites known to contain child sexual abuse material, they have several weaknesses in the context of blocking child sexual abuse material. Firstly, they are only as effective as the intelligence put into the solutions – the lists of domains or URL:s known to contain harmful material. Keeping these lists up to date requires a lot of work and continuous updates and as the primary focus of these solutions are on other types of threats, child sexual abuse material unfortunately comes far down the list. The other weakness is that they only block known URL:s or domain names, thus missing all other ways of distributing the material (such as P2P, darknet, social media platforms or when someone uses a USB stick to access the material). Therefore, although using web filters is helpful, it is not enough and does not protect the organisation and its assets against child sexual abuse material.
DIGITAL FINGERPRINTS – HOW DOES IT WORK?
NetClean collaborates with law enforcement authorities who classify images and videos as illegal. In this process, a digital fingerprint is calculated from every image and video, and these digital fingerprints are added to our signature database. The database makes it possible for ProActive to detect the actual illegal content, instead of blocking an entire URL or specific file names. This means that as soon as someone downloads, opens, moves or in any way handles a suspicious file, NetClean ProActive sends a notification, matching against our database also ensures that nothing but child sexual abuse material is detected and reported, which means that ProActive will not detect family pictures from the beach etc.