This form is a web page which was created in MS WORD and therefore can be easily edited that way

Entry Name: “PKU-WANG-MC1”

VAST Challenge 2014
Mini-Challenge 1

Team Members:

Chenglong Wang, Peking University, chenglongwang@pku.edu.cn PRIMARY

Siming Cheng, Peking University, csm@pku.edu.cn

Zhengjie Miao, Peking University, jmiao92@pku.edu.cn

Xiaoru Yuan, Peking University, xiaoru.yuan@pku.edu.cn

Student Team: YES

Analytic Tools Used:

NewsTimeline, developed by PKUVIS, Peking University

EmailReader, developed by PKUVIS, Peking University

Jigsaw

Excel

Google Fusion

Gephi

Python

D3.js

Approximately how many hours were spent working on this submission in total?

We spent about 200 hours on this submission.

May we post your submission in the Visual Analytics Benchmark Repository after VAST Challenge 2014 is complete?

Yes

Video:

PKU-WANG-MC1.wmv

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Questions

MC1.1 – Provide a visual representation of the structure of the Protectors of Kronos network, with supporting evidence.

a. Who are the leaders?

b. Who is part of the extended network?

c. How has the group structure and organization changed over time?

d. Where are the potential connections between the POK and GAStech?

Provide novel visualizations appropriate for communicating key information to the busy leaders of the investigation. Please limit your response to no more than eight images and 500 words.

Answer for question a:

Figure 1 POK-Leaders

Figure 2 Leadership

There are three generations of leaders (Figure 1, 2), namely Henk Bodrogi (article 399, 134 etc.), Elian Karel (article 447) and Silvia Marek (article 570). For the first generation, there are seven co-founders of POK who played an important role in the leadership of POK (10 year historical document clean.doc, 5 year report clean.doc).

Answer for question b:

Figure 3 POK-Network

Figure 4 People related to Isia Vann

The extended network of POK includes three parts, namely connections between POK and Kronos government, connections between POK and organizations or schools, and connections between POK and GASTech.

1. POK and the government: Cesare Nespola (Meeting with Henk Bodrogi, article 211), Ingmar Casablancas (Cooperate with POK, article 305,823), Mandr Vann (Work at embassy in Tethys and Asteria, five year report).

2. POK and organizations:

a) APA: Possibly links to Mandor Vann, and Bodrogi family.

i. APA is associated with drug MDMC. (article 775,687,513,287)

ii. POK members are arrested on false drug charge. (article 266)

iii. Mandor used to work in Asteria (5 year report ) and APA is in Asteria (article 167, 234, 245).

iv. Carmine Bodrogi, who should be from Bodrogi family, is arrested for MDMC. (article 205)

b) WFA: Links to Bodrogi family and Vann family. (article 213, 442, 54)

c) SOW: Links to Lucio Jakab, Silvia Marek. (10 year clean report)

3. GASTech:

i. Isia Vann. (Juliana’s brother, 5 year report, 10 year report)

ii. Hank Fluss. (An environment protector. Meeting with POK. article 741, 796)

iii. Henk Mies and Minke Mies. (Same generation as Isia Vann, probably from Mies family and have relationship with Valentine Mies. By resume, employ records)

iv. Loreto Bodrogi, Hennie Osvaldo. (Related to POK leaders, probably family members. In resume, employee records)

v. Orhan Strum. (Born in Asteria, may have relationship with Mador Vann. In employee records.)

Employees that share the same period with Isia Vann. (Figure 5)

Answer for question c:

The structure changes as the leader changes. (See figure 1, figure 3)

1. The first generation: Henk Bodrogi as leader, and co-leaders worked with Henk.

2. The second generation: Elian Karel as leader, and another group consists of the Vann family and the Mies family. Elian Karel recruits SOW people, and Vann family and Mies family with their relationship in GASTech.

3. The third generation: Silvia as the leader of POK. Vann’s family, Mies’ family and Bodrogi’s family work in GASTech as part of extended network.

Answer for question d:

The key connection between GASTech and Kronos is their family relationship. Important groups of people are listed below:

Group 1: (Possibly Family Relation)

1. Isia Vann, (Brother of Junianna Vann, 5 year report)

2. Loreto Bodrogi.

a) Belongs to Bodrogi family in POK, Henk Bodrogi in POK

b) Conflict work experience in resume: Working as a security guard in RQS while studying in Abila Community College (Probably using fabricated resume to join GAStech)

3. Henk Mies, Minke Mies. (Belong to Mies Family, and Valentine Mies belongs to POK)

4. Hennie Olsvado. (Belongs to Osvaldo Family)

Remark for Group 1: They work in security department and share the similar experience in Armed Force of Kronos, they must be in good relation with each other and thus have relation with Isia Vann and POK.

Group 2: (Friends of Isia Vann in Armed Force of Kronos) (Figure 6)

Figure 5 Relationship with Isia

1. Includes people in Group 1.

2. Albina Hafon, Adan Morlun (They have overlapping experience with Isia in Armed Force of Kronos [resume as evidence] and thus have close relationship)

3. Irene Nant, Dylan Scozzese, Varro Awelon. (Similar experience in Armed Force of Kronos)

Group 3: (Mailing groups associated with POK)

Figure 6 Suspicious Email-Group

In mail header 633. Ruscella Mies Harber forward a mail from POK to these people.

1. Ruscella Mies Harber.

2. Loreto Bodrogi.

3. Isia Vann.

4. Inga Ferro.

5. Hennie Osvaldo.

And in another mail header 734. The IT manager sends an email "Action: Virus detected on your system" to the above suspicious group.

Other IMPORTANT people:

1. Panatal Rachel: Rachel’s resume has wrong name. And she has relation with Isia Vann and Hennie Osvaldo. (Mail group)

2. Orhan Strum: Experience in Asteria may let him have relationship with Malor Vann.

Figure 7 GASTech-Network

MC1.2 – Describe the events of January 20-21, 2014. What is the timeline of events? Please limit your response to no more than ten images and 500 words.

$5BN(QS_{U%R3LRJQF7ZW960$

Figure 8 Timeline

Figure 9 Timeline-Police Action

Figure 10 Timeline-Fire

Figure 11 Timeline-Missing people

Figure 12 Timeline-POK

Figure 13 Timeline-Intersect between news about police and POK

Figure 14 Timeline- Government

Events on July 20-21 are presented in Figure and evidence is provided below:

These events can be classified as events associated with POK, police, government, fire, missing people and etc, which are presented from figure 9 to figure 14.

An overview of events is presented in figure 8.

Events on Jan 20^th and 21^st is listed below:

Jan 20^th:

Ø 10:00 AM: The meeting of the annual company of GASTech with a reception of government of Kronos is closed and the executives have not yet arrived. [Article 140]

Ø 10:15 AM: Fire alarm goes off at GAStech headquarter. Abila Fire Department trucks were dispatched to GAStech – Kronos headquarters. [Article 692, 738]

Ø 10:20 AM: GAStech employees evacuate the building and a helicopter leaves from the roof of the building. [Article 763]

Ø 10:25 AM: Firemen have entered the Gastech headquarter. [Article 13,470,563,844]

Ø 10:52 AM: CEO Sanjorge arrived at the capitol building a few minutes ago. [Article 350,749]

Ø 11:45 AM: AFD gives the all clear for the GAStech employees to re-enter the building. [Article 365,376]

Ø 12:20 PM: The police of Aliba arrives at GAStech. [Article 355,806]

Ø 12:25 PM: The reporter covering reception at the capitol sees the CEO, Jr. of Sten Sanjorge, but doesn't see the rest four of the excutives. [Article 67,122,528,569]

Ø 12:30 PM: A private jet carried 7 or 8 passengers in a hurry departs Abila. [Article 202,324,633,718,721]

Ø 12:45 PM: Additional Abila Police officers arrive at GAStech headquarters. [Article 356,425]

Ø 14:05 PM: Kronos Government officials arrives at GAStech headquarters. [Article 805]

Ø 14:30 PM: Another private jet carried 7 or 8 passengers who seemed celebrating departs Abila. [Article 202,324,633,718,721]

Ø 15:12 PM: Two police vehicles each with two policemen in inside have just left GAStech headquarters with no lights or sirens. [Article 320,426]

Ø 15:20 PM: GAStech employees are being allowed to leave the building. [Article 321]

Ø 15:40 PM: One GAStech employee reports having seen several people dressed in black in the building before the fire alarm. These people were not GAStech employees are "were acting odd and lurking about".[Article 253,381]

Ø 17:00 PM GAStech's employee Edvard Vann is released after being questioned by Kronos Police and civil servant of government for 6 hours. [Article 440,466,512]

Ø 17:10 PM: A GAStech administrator who had been supporting the executive meeting has informed us that the "people in black" present that morning were the caterers. [Article 368,395]

Ø 18:10 PM: The GAStech executive jet reportedly arrived in Tethys a few hours ago bearing Sten Sanjorge Jr. The jet was quickly refueled and then departed for Abila International Airport with six GAStech officials onboard. [Article 26]

Ø 22:32 PM: Airport officials have confirmed the arrival of a private jet from Tethys. Several passengers departed into a waiting limousine which drove directly to Abila Police Headquarters. [Article 744]

Jan 21^st:

Ø 9:00 AM: The Abila police holds a press conference on the kidnapping GAStech headquarters. Police inform reporters that four of the GAStech employees whose whereabouts were unconfirmed yesterday were found overnight, leaving ten people who are presumed missing. [Article 276,372]

Ø 10:16 AM: A GAStech spokesman announces that CEO Sten Sanjorge is not among the missing GAStech employees, and has returned to Tethys. [Article 556,624]

Ø 12:00 AM: The Protectors of Kronos have released a statement claiming responsibility for the kidnapping of GAStech employees demanding a $20 million ransom. [Article 106,261,407,708]

MC1.3 – Identify at least two possible explanations why the GAStech employees may be missing. What evidence do you have to support each of these explanations? Please limit your response to no more than three additional images and 200 words.

Explanation 1: GAStech employees are kidnapped by POK as POK wants money from GAStech.

Figure 15 News About POK engagement in the missing of GAStech employee

l Evidence 1: POK made an announcement to Kronos people claiming responsibility for the kidnap, and fire alarms that day may be the result of conflict. (Article 708, 822, 460)

l Evidence 2: Kidnap is confirmed by police and POK is being investigated. (Article 761, 678, 838)

l Evidence 3: There is going to be an annual demonstration of POK and POK did some violent actions in the past so that activist in POK may take the action of kidnaping.

Explanation 2: GAStech employees are split into lower levels and high level employees, and their conflicts on money causes the kidnap of seniors by lower level employees.

Figure 16 Overlapping background of people in facilities and securities.

l Evidence 1: Frequent abnormal emails are sent inside security and facility group. (e.g. Mail header [205,231,233](Strange title: Caution downtown), [633,659](FW a POK mail), [700,937](Strange title: Guys out, no ladies; Possibly an ally))

l Evidence 2: Structure of employees are divided into groups according to their education, mail and military experiences and many employees are related to POK. (Fig. 7)

l Evidence 3: GAStech senior officers earned a lot of money these days, which may lead to a unbalance in the income. (Article 360, 679, 713)

Explanation 3: GAStech senior officers and a group of government officials fled with coffers and fabricated it as a kidnap.

Figure 17 News about fire and fled.

l Evidence 1: Reports on the possibilities of officers fleeing with coffer.(Article 616, 414)

l Evidence 2: GAStech made a lot of money these days. (Article 360, 679, 713)

l Evidence 3: Facts about fire alarm and people in black are covered up by police. (Article 731, 738)

l Evidence 4: The police and government officials interrogated Edvard Vann for 6 hours after the kidnap but they didn't interrogate Isia Vann, even Isia has stronger relation with POK. (Article 440,466,512 and the answers above)