CAC Extremist Child Exploitation Enterprise Ontology
An ontology for representing extremist criminal enterprises engaged in child exploitation, including nihilistic violent extremism (NVE) networks, content compilation systems, and enterprise structures based on analysis of the 764 network case. This ontology is grounded in the Unified Foundational Ontology (UFO) through gUFO.
Nihilistic Violent Extremism Network
Criminal network engaging in child exploitation as part of broader nihilistic violent extremism goals including social unrest and downfall of current world order (e.g., 764 network).
Child Exploitation Enterprise
Criminal enterprise as defined in 18 U.S.C. § 2252A(g) engaging in coordinated child exploitation activities with multiple participants and systematic operations.
Accelerationist Group
Extremist group with accelerationist goals seeking to hasten societal collapse through criminal activities including child exploitation.
Extremist Network Cell
Operational cell within larger extremist network conducting specialized activities.
Cyber Extremist Network
Extremist network operating primarily through digital platforms and encrypted communications.
Enterprise Hierarchy
Organizational hierarchy within child exploitation enterprise defining leadership and member roles.
Inner Core
Elite inner core of enterprise members with access to restricted channels and advanced activities.
Leadership Structure
Leadership structure of enterprise including multiple leaders and their areas of control.
Recruitment Hierarchy
Hierarchy governing recruitment of new members based on content quality and notoriety.
Membership Tier
Membership tier within enterprise hierarchy determining access and privileges.
Enterprise Role
Role within child exploitation enterprise structure.
Enterprise Leader Role
Leadership role within child exploitation enterprise, directing and coordinating activities.
Inner Core Member Role
Role of member within enterprise inner core with access to restricted channels and advanced operations.
Content Producer Role
Role focused on producing high-quality exploitative content for enterprise operations.
Recruitment Specialist Role
Role specializing in recruiting new members based on content quality and enterprise needs.
Coordinator Role
Role coordinating activities across different platforms and channels within enterprise.
Content Compilation System
System for compiling, editing, and organizing exploitative content within criminal enterprise.
Lorebook
Edited compilation of victim content including images, videos, and personal information organized by enterprise members.
Victim Content Compilation
Organized compilation of content obtained from specific victim through exploitation and coercion.
Content Editing Process
Process of editing and organizing victim content into compilations for enterprise distribution.
Content Curation Action
Action of curating and organizing exploitative content for enterprise purposes.
Content Currency System
System using exploitative content as valuable currency within criminal enterprise for advancement and access.
Content Value Assessment
Assessment of content value based on quality, notoriety, and enterprise utility.
Membership Advancement System
System governing member advancement within enterprise based on content contributions and activities.
Content Based Recruitment
Recruitment of new members based on quality and notoriety of content they produce.
Access Control System
System controlling access to enterprise channels and resources based on member status and content contributions.
Self Harm Coercion
Coercion of victims to engage in self-harm activities including cutting, burning, and extreme degradation.
Extreme Degradation Coercion
Coercion of victims to engage in extreme degrading activities beyond typical exploitation.
Name Cutting Coercion
Coercion of victims to cut enterprise member names into their bodies as ownership marking.
Self Immolation Coercion
Coercion of victims to set themselves on fire or engage in burning activities.
Animal Abuse Coercion
Coercion of victims to abuse pets or animals as part of exploitation and control.
Sibling Abuse Coercion
Coercion of victims to abuse siblings or family members as part of exploitation.
Suicide Coercion
Coercion of victims toward suicide as ultimate form of exploitation and control.
Vulnerable Population Targeting
Systematic targeting of vulnerable populations including minors with mental health challenges.
Mental Health Vulnerability Targeting
Targeting of minors with mental health challenges and psychological vulnerabilities.
Social Engineering Campaign
Systematic social engineering campaign to gain victim trust and facilitate exploitation.
Trust Building Process
Process of building trust with vulnerable victims before exploitation begins.
Victim Profile Development
Development of detailed victim profiles including vulnerabilities and exploitation opportunities.
Cross Platform Coordination
Coordination of enterprise activities across multiple internet platforms and channels.
Encrypted Channel Network
Network of encrypted messaging channels used for enterprise coordination and content sharing.
Private Group Management
Management of private groups and channels with restricted access for enterprise operations.
Alternate Account System
System of alternate accounts (alts) used to evade platform restrictions and maintain operations.
Platform Migration Strategy
Strategy for migrating operations between platforms when accounts are terminated or restricted.
Covert Employee Operation
Operation using online covert employees (OCE) to infiltrate and monitor extremist networks.
Encrypted Channel Infiltration
Infiltration of encrypted channels used by extremist networks for evidence collection.
Cross Platform Evidence Correlation
Correlation of evidence across multiple platforms to establish identity and network connections.
Identity Correlation Analysis
Analysis correlating multiple accounts and identities across platforms to establish single individual control.
Network Mapping Investigation
Investigation mapping the structure and relationships within extremist child exploitation networks.
network size
Estimated size of extremist network in number of participants.
operational scope
Geographic scope of network operations (local, national, international).
ideological framework
Ideological framework driving network activities (nihilistic, accelerationist, anarchist).
network notoriety
Level of notoriety and recognition of network within extremist communities.
leadership count
Number of individuals in leadership roles within enterprise.
inner core size
Number of members in enterprise inner core with advanced access.
membership requirements
Requirements for enterprise membership and advancement.
hierarchy complexity
Complexity level of enterprise hierarchy (simple, moderate, complex, highly_complex).
content volume items
Number of individual content items in compilation.
compilation complexity
Complexity level of content compilation and editing.
editing quality
Quality level of content editing and organization.
content notoriety
Notoriety level of content within enterprise and broader network.
content value
Assessed value of content within enterprise currency system.
membership level
Member level within enterprise hierarchy (novice, member, advanced, inner_core, leader).
advancement criteria
Criteria required for advancement to higher membership levels.
access level
Level of access to enterprise resources and channels.
coercion severity
Severity level of coercion methods used (moderate, severe, extreme, life_threatening).
degradation level
Level of degradation and humiliation involved in coercion.
self harm type
Type of self-harm coerced (cutting, burning, bruising, other).
coercion effectiveness
Effectiveness of coercion methods in victim compliance.
vulnerability type
Type of vulnerability targeted (mental_health, isolation, trauma, substance_abuse).
targeting precision
Precision level of vulnerability targeting methods.
social engineering complexity
Complexity level of social engineering campaigns.
trust building duration
Duration of trust building process before exploitation begins in days.
platform count
Number of platforms used for coordination and operations.
encryption level
Level of encryption used in communications (basic, strong, military_grade).
channel count
Number of channels maintained in encrypted network.
alt account count
Number of alternate accounts maintained per member.
infiltration duration
Duration of covert infiltration operation in days.
evidence quality
Quality level of evidence obtained through covert operations.
identity correlation accuracy
Accuracy level of identity correlation across platforms (0.0-1.0).
network mapping completeness
Completeness of network mapping investigation (0.0-1.0).
has network cell
Links extremist network to its operational cells.
operates enterprise
Links network to child exploitation enterprise it operates.
has hierarchy
Links enterprise to its organizational hierarchy.
has inner core
Links enterprise to its inner core structure.
holds leadership role
Links individual to leadership role in enterprise.
participates in inner core
Links individual to inner core membership.
recruits members
Links recruitment specialist to members they recruit.
coordinates activities
Links coordinator to activities they coordinate.
produces lorebook
Links content producer to lorebook they create.
compiles content
Links compilation system to content it compiles.
contains victim content
Links lorebook to victim content it contains.
uses as currency
Links content currency system to content used as currency.
coerces into self harm
Links enterprise role to victims coerced into self-harm.
targets vulnerability
Links targeting action to specific vulnerability exploited.
builds victim trust
Links social engineering to trust building process.
exploits victim
Links enterprise role to victims they exploit.
coordinates across platforms
Links enterprise to cross-platform coordination activities.
utilizes encrypted channels
Links enterprise to encrypted channel networks used.
manages private groups
Links coordinator to private groups they manage.
maintains alt accounts
Links enterprise member to alternate accounts they maintain.
infiltrates network
Links covert operation to network being infiltrated.
correlates evidence
Links investigation to evidence correlation performed.
maps network structure
Links mapping investigation to network structure mapped.
identifies network member
Links investigation to network members identified.
has network component
Links network to its functional components using gUFO component-of pattern.
has member
Links enterprise to its members using gUFO collection membership pattern.
has operational period
Links enterprise to its operational time period.
has formation event
Links network to the event of its formation.
has network notoriety quality
Links network to its notoriety as a reified quality.
has encryption capability
Links encrypted network to its encryption capability as a mode.
has recruitment mode
Links enterprise to its recruitment operation mode.
operates in situation
Links enterprise operations to the situation context they occur in.
creates victimization situation
Links coercion events to victimization situations they create.
has leadership relation
Links enterprise to leadership relator mediating leader-follower relationships.
has exploitation relation
Links enterprise to exploitation relator mediating perpetrator-victim relationships.
historically depends on
Captures historical dependence between enterprise events and prior enabling events.
participates in coercion
Links persons to coercion events they participate in.
participates in recruitment
Links persons to recruitment events they participate in.
has operational begin date
Begin date of enterprise operational period using gUFO temporal framework.
has operational end date
End date of enterprise operational period using gUFO temporal framework.
has coercion event begin date
Begin date of coercion event using gUFO temporal framework.
has investigation begin date
Begin date of investigation event using gUFO temporal framework.