Title: AURORAGOLD

Release Date: 2014-12-04

Document Date: 2011-01-01

Description: This 4-page NSA document, presented at a Five Eyes SIGDEV conference 2011, gives an overview of the AURORAGOLD (AG) project, in which technical intelligence is gathered to ensure future agency access to mobile phone networks worldwide: see the Intercept article Operation Auroragold: How the NSA Hacks Cellphone Networks Worldwide, 4 December 2014.

Document: SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL

(u//fouo) AURORAGOLD

(S//SI//REL) Project Overview: The mission of the AURORAGOLD (AG) project is to maintain
data about international GSM/UMTS networks for the Wireless Portfolio Program Office
(WPMO), the Target Technology Trends Center (T3C/SSG4), and their customers. Analysis of this
data supports:

a) An understanding of the current state,

b) Trending, or time-series analysis, from the past through to the future, and

c) Forecasting of the evolution of global GSM/UMTS-based networks.

This analysis and developmental activity is currently focusing only on GSM/UMTS infrastructure,
voice-data convergence, UMTS technology migration, and UMTS technology deployments.
Coincident beneficiaries of this mission are, among others, other NSA SIGDEV elements, protocol
exploitation elements, and Five-Eyes Partner SIGDEV organizations.

(C//REL) Alignment: Supports NSA's and SID's imperative to "Know the Future."

(C//REL) Sponsors: WPMO/S3W

(C//REL) Customers: WPMO/S3W; T3C/SSG4; Various S3 collections organizations;
numerous IC organizations

(C//REL) Architecture and Infrastructure: Custom-built application based on OZONE
framework, using GOLDENCARRIAGE corporate servers for all application and data
storage

SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL

SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL

(u//fouo) AURORAGOLD

(S//SI//REL) Corpus:

Will contain:

• Unclassified: Complete replica of Informa Telecoms and Media's World Cellular Information Service
(WCIS) queryable database to eventually compare data against that collected from SIGINT

• Classified: SIGINT-collected IR.21 (International Roaming agreements) documents from around the
world, parsed of their information, analyzed, and giving users the ability to trend this information
over time (time-series analysis). In addition, e-mail selectors from within IR.21s and from SIGINT
metadata captured, analyzed and managed back into the SIGINT system for enhanced collection

(C//REL) Content:

• Portion of the WCIS data available via NSANet GUI; remainder to be completed within 2-3 months

• Currently, Phase 1 contains a small database of worldwide wireless networks being compared
against IR.21s from SIGINT to establish our "baseline"

(C//REL) Capabilities:

• Soon, complete WCIS repository to be copied to NSANet for querying by all NSA and 2P
Partners

• Later, agile querying through entire IR.21 and WCIS databases, with capability to perform time-
series analysis via visualization application

SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL

CONFIDENTIAL//REL TO USA, AUS, CAN, GBR, NZL

(u//fouo) AURORAGOLD Repository

Networks & Suppliers 7/2010 Handsets & Devices 6/2010 NetworK Features 1/2011 NetworK Coverage 1/2011 Licenses 1/2011 Licensed Spectrum 1/2011

Network Features

Handsets & Devices

Networks & Suppliers

TO# fcCRET SI REL TO USA.



License Spectrum

License

Network Coverage

Dene Internet M00% -
/ Start Intro > ■ Mkroscft Outbcfc j 0 lv 6’ U C Hr /a. i *l] SS
CONFIDENTIAL//REL TO USA, AUS, CAN, GBR, NZL

CONFIDENTIAL//REL TO USA, AUS, CAN, GBR, NZL

(U//FOUO)

AURORAGOLD

(C//REL) Demonstration Script

• (Only capability currently available is basic querying against small portion of WCIS database)

• Go to|

• Click on any of the brown boxes

• Select your search criteria

• Select your query result criteria

• Click "Submit"

• View the results

CONFIDENTIAL//REL TO USA, AUS, CAN, GBR, NZL

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh