Entry Name: UBA-Cesario_Lamagna_Picoaga-GC
VAST
2014 Challenge
Grand Challenge
Team Members:
Diego Martin Cesario, University of Buenos Aires (UBA), diegomcesario@gmail.com PRIMARY
Walter Lamagna, University of Buenos Aires (UBA), wlamagna@gmail.com (Point of contact for
questions/answers)
Jorge Kuday Picoaga, University of Buenos Aires (UBA), georgepicoaga@gmail.com (Point of
contact for questions/answers)
Student Team: YES
Analytic Tools Used:
Tableau
CityBuzz developed with simile-simeline, html5, processing and perl by Walter Lamagna.
Mapinfo, Mapbasic (programing module)
MapsearchVast, developed in Mapbasic developed in Mapbasic by Jorge Picoaga, and adapted for the challenge.
Oracle 12c database (Sql Spatial query advanced)
Approximately how many hours were spent
working on this submission in total?
360
May we post your submission in the
Visual Analytics Benchmark Repository after VAST Challenge 2014 is complete? YES
Video:
http://www.wallves.com/vast/GC_Team38.wmv
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Questions
GC.1 – Summarize and describe the events of January, 2014 relating to the
disappearance of the GAStech employees. Focus on the
disappearance of the employees, and the events immediately before and
afterward. The summary should include the following:
a. Who: Individuals and groups involved and their
roles
b. What: A description of what happened over the time
period
c. Where: Associate events with locations
d. When: Specific times of activities, particularly as
it relates to planning and execution
e. Why: A description of the motives or motivations
of the individuals or groups involved
f.
How: What, if any, notable
entities provided support for or facilitated the events that took place? These
could be people, places, or things that helped those responsible for the
disappearance in some way.
Do not
reproduce the overview or MC1 materials concerning background knowledge,
although you may reference this information if needed. Visualizations
illustrating how you determined the summary points above are encouraged. Please
limit your response to no more than five images and 500 words.
Who:
Individuals and groups involved and their roles
The individuals and groups involved in the Kronos Incident from 20-Jun are:
a) The reported missing persons from the GASTech company (image 1)
Ingrid Barranco, Ada Campo-Corrente, Orhan Strum, Willem Vasco-Pais, they are
connected in the GASTech hierarchical network because they are all executives.
They have all been kidnapped with exception of Sten SanJorge. He was not in
GASTech in the moment of the dissapearance. These persons are identified by the
green color in the network.
Image 1/5
b) Potential kidnappers
The VANN lastname is key for the authorities, and given that Isia Vann could
not be found we analyze her social network in the company through an analysis
of the emails.
For this analysis we removed the emails considered non relevant with subjects
like “funny” or “Guys night”, then got rid of all the emails with more than 7
recipients because we where looking for more close connections between
employees. To this emails network the Modularity Algorithm was applied and it
found 9 communities. (Image #2). This described the company structure matching
with the provided hierachy spreadsheets. The light blue community is the
Security Team.
Image 2/5
Some members of the Security Team (Image 2, section A) and some informers like
Ruscella Mies Haber (Image 2,section B). All these individuals are connected
through Linnea Bergen. This occurs because Linnea Bergen has a close connection
trough the emails with these few persons.
What: A description of what happened
over the time period
To describe what happened between 8 and 19 Jan we used a heatmap in combination
with the purchases and the visited places. We combined the loyalty, credit card
and gps data into one visualization.
To describe the events between 19 and 21 Jan we used a timeline in combination
with a simple Named Entiries Recognition algorithm. The Named Entities recognized
are colored in yellow background, stop words are removed, and a simple stemming
process is also applied. Finally, for a small description of the article we
used a word count and made the size of the words from larger to smaller order
given from the most frequent to the less frequent words.
The last relevant event that appears in the news from 2013, is that the GASTech
Executives got rich.
After the Elian Karel Death's remembering that occurs every year after July
2009, the POK group gets more violent. The Drug traffick gets worser, and
ending December it is anounced that the GASTech executives are very rich,
The 19th Jan an executive meeting is anounced for the next day.
Day 20-Jan:
A) During the morning of 20-Jan an Anual GASTech meeting was going to happen:
B) 10:18 AM the meeting is interrupted because the fire alarm is activated
10:00 and 10:18 it is turned off.
C) 11:45 It seems a false alarm because the GASTech employees can re-enter the
building.
D) 12:25 Sten SanJorge arrives the Capitol, but not with Ingrid Barranco, Ada
Campo- Corrente, Orhan Strum, or Willem Vasco- Pais. The content of the article
reveals this.
E) 12:45 Abila Police closes GASTech.
F) 17:30 It starts to be confirmed the kidnapping theory.
Image 3/5
Figure ( events A through F)
G) Some Mysterious Jets leave and arrive Abila. An amount of passengers are
mentioned in different articles, but we think that Sten SanJorge is taken to a
secure location in Thetys and in the other hand, security agents to help
clarify the case are arriving. In addition to the possibility that other
companies are arriving just for business reasons as normal.
H) 19:15 Edvard Vann was questioned for hours by the Police.
I) The 21th early at 7:15 it is sayd that 14 employees are missing.
Image 4/5
Figure ( events G, H, I)
Day 21-Jan:
J) 9:00 the police revises the amount of missing employees to 10.
K) 11:53, a journalist called Petrus Gerhard anounces he has an important
message to give, because Protectos Of Kronos contacted him.
L) 12:00, the message from POK is published, 20 millions are requested.
M) 14:05 The media reveals that between 10 and 14 employees are missing.
Figure ( events J, K, L, M) Where:
Associate events with locations We have identified 5 major events in the
data streams.
A: Rally Time, a multitude meets in the park arround 17:00, representing POK,
remembering Juliana and complaining against corruption. Started on 2014/01/23
17:00:00. Sylvia Marek opens with welcoming remarks on 2014/01/23 17:05:13 and
reported as finished at 2014/01/23 19:02:00 with the message Photos of the POK
Rally in the Park: POK.kronos/rallyinthepark. Event location is on N. Egeou Ave
5100 5498.
B: Second Black Van.19:26 a Suspicious Black Van was seen. This event was
reported for call center service at 2014/01/23 19:44:29 on 36,08662 and
24,857563 coordinates, exact location on N. Ithakis St / N. Dentro St, the
message reports SUSPICIOUS OCCUPIED VEHICLE-BLACK VAN on the GASTech employees
Felix Calzas, Lars Azada, Gustav Cazar and Frente Vira addresses. This report
is accompanied from other call center reports of suspect activity.
C: First Black Van escaping. In the Ithankis/Alexandrias intersection streets.
D: Fire at Dancing Dophins. Arround 18:40 a fire report is received. Reported
on 2014/01/23 18:41:00 and controlled on 2014/01/23 19:31:00. the fire was
reported in Dancin Dolphin apartment complex allocated in N Achilleos 1050 ST,
3 GASTech addresses employees were checked in this place reported as Adra
Nubarron (Engineering/Geologist), Ovan Bertrand (Facilities group Manager) and
Bergen Linnea (IT Group Manager)
E: Gelato Galore shooting. 19:40 The Black Vann being pursuit by the police,
ends in Gelato Galore where two suspects are reduced and two hostages are
saved. Event was reported as begun at 2014/01/23 19:40:29 and finished on
2014/01/23 20:54:00 with a message reporting evidence of negotiations between
police department and persecuted Black van persons. The event location is on N.
Ithakis ST 1650 street intersection with N. Alexandrias St. Black Van track was
reported from N. Limmou street since 600 block until 1100 arriving to
Gelatogalote, where it was fetterless this event.
Image 5/5
When: Specific times of activities,
particularly as they relate to planning and execution.
A) Planing meeting place on Saturday 18th
Suspect meeting between some GASTech employees. The employees involved
includes:
Orhan Strum, Lucas Alzazar, Vara Lagos, Ada Campo-Corrente, Isande Borrasca,
Loreto Bodrogi
What locations are involved? Intersection between Skarkeme / Arkadiou streets,
named Suspect place 10 in our suspect places own table. The meeting take place
the 01/18/2014 at 13:36:42
Why is this pattern or event significant? Day and location of this meeting is
considered as suspect for its location.
What is your level of confidence about this pattern or event? Why? 100% GPS
data was investigate in order to get evidence.
B) Planing meeting place on January 15th
Suspect meeting between some GASTech employees. The employees involved
includes:
Hennie Osvaldo, Loreto Bodrogi, Inga Ferro, Minke Mies
What locations are involved? Intersection between Agentes/ Maskin streets,
named Suspect place 8 in our suspect places own table. The meeting take place
the "01/15/2014 12:10:01 and we have register of other visites to same
place the 6/8/9/13/14/17
Why is this pattern or event significant? Location of this meeting is
considered as suspect for its location.
What is your level of confidence about this pattern or event? Why? 100% GPS
data was investigate in order to get evidence.
C) Planing meeting place on January 11th
Suspect meeting between some GASTech employees. The employees involved include:
Hennie Osvaldo, Loreto Bodrogi, Inga Ferro, Minke Mies, Isia Vann, Edvard Vann
What locations are involved? Intersection between Exadakitiou Way/ Matadou
streets, named Suspect place 6 in our suspect places own table. The meeting
take place the 01/11/2014 03:25:54
Why is this pattern or event significant? Location of this meeting is
considered as suspect for its location.
What is your level of confidence about this pattern or event? Why? 100% GPS
data was investigate in order to get evidence.
D) Planing visit to suspect place on January 7/8/13/15
Suspect visits to suspect place identified. The employees involved include:
Hennie Osvaldo, Loreto Bodrogi, Inga Ferro, Minke Mies
What locations are involved? Intersection between Evripidou/ Eleftherias
streets, named Suspect place 7 in our suspect places own table. The meeting
takes place several days around 11:30:00
Why is this pattern or event significant? Location of this meeting is
considered as suspect by its location.
What is your level of confidence about this pattern or event? Why? 100% GPS
data was investigate in order to get evidence.
E) Planing visit to suspect place on January 7/9/10/11/14/16
Suspect visits to suspect place identified. The employees involved include:
Hennie Osvaldo, Loreto Bodrogi, Inga Ferro, Minke Mies, Inga Ferro
What locations are involved? Intersection between Gerantoni / Aveny streets,
named Suspect place 2 in our suspect places own table. The meeting take place
several days around 11:30:01 several days.
Why is this pattern or event significant? Location of this meeting is
considered as suspect by its location.
What is your level of confidence about this pattern or event? Why? 100% GPS
data was investigate in order to get evidence.
Why: A description of the motives or
motivations of the individuals or groups involved
a) One explanation is related to the drug and smuggling incresing in Kronos.
Seems that since the energy industry evolved in Kronos, the country has changed
from being a country that imports drugs to produce them. The farms are not
proffitable any more given the contamination and this leaves many places to
hide drugs and roads with trucks that can transport anything without being
suspectful.
In the articles we searched for the chemical products that contaminate the
water. We found benzene, toluene, xylene, barium, chromium, lead and selenium.
These products are the result of the Fracking (the method used to extract GAS).
These chemicals are also used in the production of Synthetic Marijuana.
(https://www.erowid.org/archive/rhodium/chemistry/psychedelicchemistry/chapter2.html)
how: What, if any, notable entities
provided support for or facilitated the events that took place? These could be
people, places, or things that helped those responsible for the disappearance
in some way.
Part of the planing is to know which are the exact Executives moves, what they
are doing or plan to do. This task was implemented by informers working for POK
natives from Kronos. These informers are all Managers Assistants.
GC.2
– Describe at a
high level the most significant networks that exist, and how they have
influenced each other to produce the current situation. Please limit your
response to no more than three images and 100 words.
One network is part of the
Security Team that had support from the informers. All these individuals are
connected through Linnea Bergen. This occurs because Linnea Bergen has a close
connection trough the emails with these few persons.
Image 1/1
GC.3 – Identify three of the most significant information gaps that
remain at the end of the time period covered by the data. Describe why this
missing information would be important to the investigation. Highlight in your
visualizations where these knowledge gaps are present. Please limit your
response to no more than three images and 250 words.
a.-Gap information 1. Jan from 20th to 23 th GASTech employees tracks and
consumes could have helped to our investigation in order to provide us more
information about the suspects GASTech employees after the disappearance.
Image 1/3 - Final period of Employees tracks- In this figure can be checked (on
the red rectangle) that no more GASTech track information was provided since
Jan 20th. “Sunday Executive Golf” on Jan 19th was one of the last activities
reported of Jan 19th.
b.-Gap information 2. Lack of information on the GASTech Employees Credit card
data provided from Jan 06th to 19th, this data was detected as adulterated in 4
places of consumption (Jack Magical Beans, Coffee Shack, Brew Awakenings and
Bean There Done that). The correct time was replaced with 12:00h (noon) in all
cases, making difficult our research matching with Employees tracks. On the
other hand a place was modifying with a incorrect day (Kronos Mart). If this
data were provided complete and validated our research had been hardly more
efficient.
Image 2/3 - Missing / Modify Employees credit card data – In this figure can be
checked credit card modified data on the circles and its respective correct
homologous transaction (with the correct schedule) on the rectangles above.
c.-Gap information 3. News reports January 21 at 14:05 onwards, also the
statements made by POK earlier (April 9, 2012 or on the anniversaries of the
death of Karel Ellian June 20, 2013) allow us to know the reason for the
demonstration on January 23, 2014 and probably confirm the division protectors
Kronos POK: the Silvia led by Marek and the group responsible for the
kidnapping.
Image 3/3 - No more News archive information was provided after Jan 21th, as
you can see on the red rectangle.
GC.4 – The police have sufficient manpower to investigate up to two
different locations simultaneously. Provide your best recommendation to the
police chief as to where the police should be deployed, and why. Provide visualizations that help describe the
importance of this action. Please limit your response to no more than two
images and 100 words.
Locations highly recommended to
investigate a)
Intersection between Evripidou/ Eleftherias streets, named Suspect place 7 in
our suspect places table. Our GPS log file tracks reports several suspect
arrivals to this location on January 7/8/13/15 around 11:30:00 for GASTech
employees Hennie Osvaldo, Loreto Bodrogi, Inga Ferro, Minke Mies. Black Van was
reported in this place perimeter on 2014/01/23 19:24:15.
Image 1/2 - Suspect location where take place GASTech suspect arrivals on
several days coincide with the perimeter location where Suspicious vehicle was
reported. On the square above can be checked that the same location was visited
for GASTech suspect employees on the Jan 06-19 period.
b) Intersection between Gerantoni / Aveny streets, named Suspect place 2 in our
suspect places own table. Our GPS log file tracks reports several suspect
arrivals to this location on January 7/9/10/11/14/16 around 11:30:00 for
GASTech employees Hennie Osvaldo, Loreto Bodrogi, Inga Ferro, Minke Mies.
Multiple events on the Jan 23 was reported on this location perimeter as can be
check below:
CHECK ON HAZARD 6007 N. Artakis St 2014/01/23 19:42:22
SUBJECT STOP N. Pilau St / N. Aveny St 2014/01/23 18:16:34
VEHICLE ACCIDENT-REPORT N. Pilau St / N. Arkadiou St 2014/01/23 19:49:00
Image 2/2 - Suspect location where take place GASTech suspect arrivals on
several days coincide with the perimeter location where Suspicious vehicle was
reported. On the square above can be checked that the same location was visited
for GASTech suspect employees on the Jan 06-19 period.