The FDLE is on the cutting edge of high-tech law enforcement, fighting crimes from identity theft to child exploitation, and educating consumers and businesses.
By DAVE GUSSOW
Published March 14, 2004
TALLAHASSEE - Fighting crime is tough. Fighting high-tech crime is tougher.
For Bob Breeden of the Florida Department of Law Enforcement's Computer Crime Center, it's not just a heavy caseload that may be the most challenging. It's not even just the complexities of some of the investigations. It's technology, which adds an intimidating and sometimes baffling element for officers.
"A big bulk of our time is spent helping people do very simple stuff that they just don't know how to do," said Breeden, special agent supervisor at the Computer Crime Center. "So we're fighting a battle."
The Computer Crime Center has taken on some additional roles that go beyond FDLE's function as the state's main investigative agency: tech trainer for police agencies, security consultant for businesses, teacher and consumer advocate for the public.
While Florida may not have an image as a high-tech center for industry, FDLE has been on the cutting edge of high-tech law enforcement. In 1991, it was one of the first state agencies to set up a computer evidence recovery lab. The Computer Crime Center opened in 1998.
As the Internet has emerged as a haven for crime, with fraud and identity theft, child exploitation, hacking and other illegal activities, law enforcement has struggled to keep up.
"There's a lot of bad guys out there making a lot of dang money through Internet fraud because nobody's working it," Breeden said. "Nobody's paying attention to it, and they're ripping people off right and left."
Scams and cybercrime
Florida has a colorful history with scams, from selling swampland to unsuspecting tourists to boiler room phone schemes.
"Technology has made it so much easier," Breeden said. "One person can handle so many more victims and you don't have to set up a boiler room operation like you would have seen then to get volume."
Identity theft is one of the fastest-growing categories of fraud, yet it doesn't have high-tech roots. Most ID theft cases begin with getting personal information from the garbage, stolen mail or a lost wallet.
Because investigations are time-consuming, where even a simple case might take 90 days to handle, many agencies don't make it a priority.
"Just a one- or two-man unit can't solve all identity theft problems in one area," said Mike Phillips, a special agent supervisor. "The bad guys are definitely ahead. I'd be lying to you if I told you they weren't."
In fact, a more pressing crime for FDLE is online auction fraud. People put up an item for sale, collect money from everyone who bids and then don't deliver the goods.
"I can't tell you how many people buy a $20,000 car sight unseen just based on some pictures posted on the Internet," said Breeden, adding that the agency often runs stings to track down auction fraud suspects.
Many complaints are civil matters, such as obtaining a title to a car or receiving goods that are flawed. Typically, FDLE has a $50,000 threshold before it will take on a financial crime. But for cybercrime, the agency lowered it to $10,000.
Breeden thinks people get in trouble online because they let their guard down.
"The best rule of thumb is be doubtful," Breeden said. "Make them prove to you that they are legitimate and that you can trust them and they are trustworthy before you open yourself up."
Protecting kids
Don Condon does not look like a typical teenager. Maybe the gray hair gives him away. But people who prey on children don't see that when they're chatting with him online.
"Obviously, we have to sound like teenagers," said Condon, a special agent. "We have to be aware of things that are of interest to teenagers, so somebody that we're conversing with believes we are."
Condon did not want to reveal investigative techniques, but he has two computers in his office. One is for work, the other is running America Online in case one of his unsuspecting targets wants to send him an instant message.
Crimes against children involve two kinds of investigations. The first revolves around pornography, and the second involves "travelers," typically middle-age men who attempt to meet children online and later arrange personal contact.
"We're looking at an individual with what we refer to as a need-driven behavior," Condon said. "Realizing that law enforcement is out there is not necessarily enough of a hindrance or deterrence for them to change that behavior. So we still see, in my opinion, as many online predators today as we did five years ago."
FDLE works with local agencies and task forces around the state because, as with high-tech crime in general, jurisdictional lines are blurred. Agencies have created what Condon calls "a virtual network" of investigators who handle such cases.
The key to protecting kids, Condon says, starts at home. Parents have to be more involved and aware of what their kids are doing.
Police training
One police department seized a computer during an investigation. A detective became impatient waiting for a forensic study of the machine, so he turned it on himself to take a look.
That meant the hard drive would show activity after it left the suspect's possession, something the defense is sure to exploit if the case goes to trial.
"A lot of this stuff we learn the hard way," Breeden said. "We started from scratch and we have the bumps and bruises to prove it."
It's just one of the issues the center has to handle in working with and training law enforcement agencies in the state. It offers a basic one-day course, as well as coordinating programs with the National White Collar Crime Center, which has an office at FDLE headquarters, the FBI and other agencies.
There's a lot to cover. For example, on an intranet called the Florida Criminal Justice Network, the center has online templates for subpoenas and search warrants.
Sometimes, agencies get authority to seize a computer, but don't take the necessary steps so they can look at what's on the computer. Even when evidence is gathered and cases are made, the complexities can get in the way of a successful prosecution.
"If the prosecutors don't understand it, if the judges don't understand it and if the juries damn sure don't understand it, we're up against the curve before we even get started," Breeden said.
High-tech security
Under the theory that the best defense against crime is prevention, the Computer Crime Center works with businesses and consumers through free seminars and the Secure Florida Web site (www.secureflorida.org) to give at least the basics of high-tech security.
Ninety percent of Florida businesses have 20 or fewer employees, Breeden says, and most don't have an information technology staff to keep their systems and data safe.
"Forty percent of businesses that lose their data will not recover," Breeden said. "They'll go bankrupt and close. That obviously impacts the economy of the state of Florida."
Hacking seems to be a common business-related investigation. One company complained that a competitor hacked his Web site to divert sales leads. An Internet service provider fired an employee, who later broke into the company's system to steal customers' passwords.
On the Business section of its Web site, the center offers tips and advice on subjects such as computer laws, disaster-proofing and employee monitoring.
In addition, businesses and consumers can sign up for a free service for alerts about viruses, worms and other online dangers. Those alerts can be sent by e-mail, phone or text message to a portable device. While only "hot" or "red hot" alerts are sent, other warnings are made available online.
For consumers, too many home users don't understand why antivirus software is so important, why firewalls are necessary to keep intruders out of their systems and why they need to spend so much time on system security and maintenance.
"More and more people are using high-speed access," Breeden said. "And more and more of them who are using it have no clue that when you're always connected, you're always vulnerable."
A free daylong seminar for consumers and businesses about computer and online security issues will be held twice in the bay area. Sponsored by Secure Florida, the Florida Department of Law Enforcement and the Florida Cybersecurity Institute, C-SAFE: Cyber Security Awareness for Everyone will cover a range of topics, including viruses, spam, fraud, identity theft and network protection.
It will be held March 30 at the FDLE office, 4211 N Lois Ave., Tampa, and April 1 at the St. Petersburg College Allstate Center, 3200 34th St. S, St. Petersburg. Registration is required because space is limited. To sign up, go to www.secureflorida.org
Safeguarding your identity
Here are some tips to try to avoid having your identity stolen:
* Shred any documents that have either personal information or account numbers. Those include ATM receipts, financial statements and bills.
* Reconcile your bank statements and report any problems immediately.
* Be careful about giving out personal information online. Reputable companies will not ask you to verify accounts by e-mail.
* Don't give out your credit card number over the phone unless you made the call.
* Review your credit report at least once a year.
* Retrieve your mail from the box as soon as possible. If practical, take your outgoing mail to a collection box or post office.
* Lock the glove compartment of your car so the registration and any personal papers are not easily accessible.
- Sources: Secure Florida, U.S. Postal Service
Research and rescue sites
Here are some places online to learn more about identity theft, or to report problems: