Defense Cyber Crime Center
Defense Cyber Crime Center
- Formed = 1998
- Headquarters = Linthicum, Maryland
- Website = www.dc3.mil
DC3 is designated as a national cyber center by National Security Presidential Directive 54/Homeland Security Presidential Directive 27, as a Department of Defense (DoD) center of excellence for Digital and Multimedia (D/MM) forensics by DoD Directive 5505.13E, and serves as the operational focal point for the Defense Industrial Base Cybersecurity and Information Assurance Program. DC3 operates under the Air Force Office of Special Investigations.
Deliver superior digital forensics and multimedia lab services, cyber technical training, research, development, testing and evaluation, and cyber analysis capabilities supporting cyber counterintelligence and counterterrorism, criminal investigations, intrusion forensics, law enforcement, intelligence community, critical infrastructure partners, and information operations for the Department of Defense.
DC3's Defense Computer Forensics Laboratory (DCFL) performs digital and multimedia (D/MM) forensic examinations, device repair, data extraction, and expert testimony for DoD. The lab's robust intrusion and malware analysis capability supports other DC3 lines of business and activities. Lab operations are accredited under ISO 17025 by the American Society of Crime Laboratory Directors/Laboratory Accreditation Board (ASCLD/LAB) which guides reliable, repeatable, and valid exam results, subjected to quality control and peer review.
The Defense Cyber Investigations Training academy (DCITA) provides in-residence and online training to DoD elements that protect DoD information systems from unauthorized use, criminal, fraudulent, and foreign intelligence activities. The Academy's curriculum offers courses organized into specialty areas. Since its founding in 1998, the Academy has recorded more than 19,000 student enrollments in its courses.
As DC3's technical solutions development capability, the Defense Cyber Crime Institute (DCCI) tailors software and system solutions engineered to the specific requirements of digital forensic examiners and cyber intrusion analysts. The Institute validates commercial off-the-shelf (COTS), government off-the-shelf (GOTS), and in-house developed software/hardware before it can be used in a forensic process. In addition, DCCI functions as the DoD repository for cyber counterintelligence (CI) tools.
As the operational hub for the DIB Cybersecurity/Information Assurance Program, The Defense Industrial Base (DIB) Collaborative Information Sharing Environment (DCISE) assists DIB companies to safeguard DoD content and intellectual property residing on or transiting their unclassified networks. The Sharing Environment develops and shares actionable threat products, and performs cyber analysis, diagnostics, and remediation consults for DIB Partners.
DC3's Analytical Group (AG) performs sharply focused technical analyses to support the investigations and operations of law enforcement/counterintelligence agencies, principal among them AFOSI, NCIS, and FBI. As a member agency of the National Cyber Investigative Joint Task Force (NCIJTF), the AG leads a collaborative analytical and technical exchange with subject matter experts from Law Enforcement/Counterintelligence (LE/CI), computer network defense (CND), intelligence community (IC), and information assurance (IA) agencies to build a threat picture enabling proactive LE/CI cyber operations focuses on nation-state threat actors.
DC3 Digital Forensics Challenge
From 2006 to 2013, DC3 held a free online, international competition consisting of individual progressive-level exercises. Challenges tests included stenography, data carving, data recovery, and detection of malicious software.
In its first year, 140 teams from the U.S. participated in the Challenge. In its final year, the Challenge had grown to include 1,254 teams from 53 countries.
DoD Cyber Crime Conference
DC3 hosted the DoD Cyber Crime Conference from 2003 to 2012.