AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW Methodology This report examines the details of the pan-European networks behind the major Islamist terror attacks carried out by individuals associated with IS in comparison with similar plots attempted by al-Qaeda in the late 1990s and early 2000s, in order to assess the extent to which the new networks may be said to present a new threat as a result of differences in the structure of the networks and the relationships of its members. To this end, the report profiles members of the network behind the November 2015 Paris attacks and the March 2015 Brussels attacks alongside those involved in the failed al-Qaeda-linked plots to attack the US Embassy and Cultural Centre in Paris, the Christmas market outside of Strasbourg Cathedral, and the Kleine Brogel NATO airbase in Belgium in 2000-2001. The report is structured in three parts: •! Part One: Profiles of the individuals which make up the networks behind the Brussels-Paris attacks, including accomplices, associates and senior IS operatives linked to the plot or attackers; Part Two: •! Profiles of the individuals which made up the networks behind the al-Qaeda-inspired plots of the early 2000s in Belgium, France and Germany, as well as any accomplices, associates, and financiers/recruiters; Part Three: •! Analysis of the direct connections between the two networks, as well as the identification of any trends in similarities and differences which can be identified in the biographical data of network members. Criteria for Inclusion •! To be profiled, individuals must have a direct and significant link to the plots or attacks examined, or to a member of the network. A significant link includes: o! Direct involvement in a successful attack as a bomber/gunman or involvement as a failed bomber; o! A criminal conviction for involvement in an attack, planned attack or recruitment network, as well as the provision of logistical support for any planned attacks; o! Criminal charges or reputable sources reporting allegations of the provision of logistical support; o! A direct personal connection to an individual convicted for involvement with another significant network or attack when arrested in relation to Islamism-inspired terrorism; o! An operational role relating to an attack profiled as a member of a proscribed terrorist group such as IS. •! Due to the contemporary nature of the IS networks, not all included have been convicted as some cases are ongoing and others have been killed in attacks or fighting abroad. Where relevant, this is indicated in the profile, for example, by referring to their connection or involvement as “suspected”; •! Those initially arrested in connection with a plot or attack but later cleared are excluded, except in instances where, although charges were initially dropped, individuals were later convicted in connection to the plot or attack; ! ! 6 !

An Enduring Threat: Europe’s Islamist Terror Networks Then and Now - Page 8 An Enduring Threat: Europe’s Islamist Terror Networks Then and Now Page 7 Page 9