The document discusses how the Child Rescue Coalition uses ScyllaDB in their digital forensic tool called Neula to locate deleted or remnant child exploitation material on pedophiles' hard drives. Key points: - Neula indexes over 2 billion block-level and cluster-level hash records from hard drives into ScyllaDB for fast searching. - When scanning a hard drive, Neula hashes file clusters, looks them up in ScyllaDB, and combines results to find known child exploitation material files, even in deleted space. - Neula then reports any found material, completion percentage, and allows exporting/rendering of evidence files. - The Scylla team provides free support

1. Protecting Children through
technology using Scylla
Jose Garcia-Fernandez
SVP Technology - Child Rescue Coalition

2. Presenter bio
▪ Vice President of Technology at Child Rescue Coalition.
▪ Responsible for the technological infrastructure, research and
development of Child Protection System software.
▪ Developed crawlers, bots, event pipeline, ETL and prioritization
algorithms for targets on Child Protection System.
▪ Works with Big Data solutions, Cyber Security and Distributed Systems.
▪ Worked and IBM and Hewlett-Packard as Software Engineer.
▪ MS in Computer Information Systems from Nova Southeastern
University
▪ MS in Computer Science from Purdue University.
▪ Bachelor of Science in Computer Science from USB from Venezuela.

3. Child Rescue Coalition
Who we are?

4. ▪ We are a 501(c)(3) nonprofit based in Boca Raton, FL that depends on
the generous donations from supporters
▪ We are a social enterprise dedicated to protecting the innocence of children
around the globe​ through technology
▪ 12 years of experience tracking pedophiles
▪ 10,000 officers using our Child Protection System​
▪ We have trained investigators in all 50 states and 90+ countries​
▪ Over 10,000 arrests and 2,000 children rescued​
▪ Also, a solution for private/public sector for reducing risk from customers
and employees

5. Success Stories
• Largest nationally coordinated CPS
operation in United Kingdom.
• 682 arrests
• 460 children
safeguarded
(127 at immediate risk of harm)

6. Operation Snapshot
• Largest nationally coordinated CPS
operation in Canada.
• 220 investigations
• 451 criminal charges
• 18 children rescued from further abuse

7. Operation Peter pan
• Largest operation in Brazil.
• 251 arrested
• More than 1 million CEM files seized.
• Arrested included women, layers,
health workers, teachers and repeated
offenders from first operation.

8. How we use ScyllaDB on our
Digital forensic product?

9. Use Case: Forensic Tool
Goal:
• Create a tool for investigators for locating deleted / remnants of Child
Exploitation Material in pedophiles hard-disks.
• Most tools work hashing allocated files

10. Use Case: Forensic Tool
New Tool: Locate deleted / remnants of Child Exploitation Material in pedophiles hard-disks by working
at a sector or cluster level and working in both allocated and unallocated (deleted) space.

11. Neula Digital Forensic Tool
Step 1: ScyllaDB for storage
of +2 billion records
2+ Billion
Block-level hash records
500 million cluster-level hashes
+ id info per terabyte of CEM
~ 1,000,000
CEM
videos/images

12. NewVideo.avi
(New File)

13. Neula Digital Forensic Tool
Step 2: Load and Scan drive:
1. Clusters are hashed
2. Filter hashes.
3. Lookup hashes.
4. Combine results.

14. Neula Digital Forensic Tool
Step 3: Report Results:
1. Results are known CEM
2. Report % completion
3. Render the CEM files.
4. Export the CEM files.
5. Report Evidence found.

15. How can I help?

16. Ways to help bring technology to rescue children
Check our web site: www.childrescuecoalition.org

17. Ways to help bring technology to rescue children
• Individuals: Become a Coalition Club member:
https://www.childrescuecoalion.org/donate
• Institutions:
Sponsor law enforcement training courses.
Sponsor projects in new technologies to prevent child victimization.
Products or services donations.
Volunteer day / donation match program.

18. Special Thanks to Scylla Team
• Our special thanks to the Scylla team for their generous
Support:
• License to use ScyllaDB Enterprise for free.
• Free community Support.
• Free training and conference pass.

19. Thank You
Any Questions ?
Please stay in touch
info@childrescuecoalition.org
@ChildRescueCo