It’s hard to keep our mobile devices secure. The lack of tools for early detection of attacks in mobile devices makes this even harder. Our civil society organizations, activists, journalists and human rights defenders rely on mobile devices to do their jobs, often without the protection of firewalls, IDS, or any other advanced threat protection available to corporate users. How can these individuals identify if their devices are at risk while working in the field?
We are happy to announce that with the support of the NLNET Foundation and the Czech Technical University in Prague we are working on our new project, the Civilsphere AI VPN, to provide individuals with automatic advanced threat detection on the go.
Meet Our Civilsphere AI VPN
Our Civilsphere AI VPN project will research and implement an automated, easy to install, locally deployed VPN running novel protection software that analyses your network traffic to automatically find attacks, infections, targeted threats, and data leaks. When your device is at risk, the VPN will automatically block your traffic. At the end of each day, you will receive a report with all the meaningful security events discovered. This project is not about VPN technologies, it is about protecting users.
The AI VPN will be fully integrated with the Stratosphere Linux IPS (SLIPS) to provide state-of-the-art machine learning threat detection using models trained on real attacks. SLIPS is a free software tool designed to focus on targeted attacks, detection of command and control channels to provide insights on traffic usually not caught by traditional security tools.
How Does The AI VPN Work?
The AI VPN follows the same workflow as our Emergency VPN. A user requests a new VPN profile and connects to the VPN. The AI VPN monitors the traffic in real time, blocking known threats and malicious connections. A full traffic capture of the user’s network traffic is captured for more advanced automatic analysis. After a given period of time the AI VPN will automatically generate and send a report to the user with all the known threats found in that period of time. The AI VPN is designed to protect and also help NGOs or at-risk individuals to know if they are at risk.
Your AI VPN: Modular And Customizable Design
The AI VPN follows a microservice architecture based on Docker, and is fully modular. We plan to support various types of VPN technologies including OpenVPN and Wireguard. NGOs and individuals will be able to deploy the AI VPN in their own servers reducing the need to trust third parties with their network traffic.
The integration with the Stratosphere Linux IPS also enables anyone to have threat detection on their traffic without the need to have the technical expertise. Users will simply connect to the VPN and receive a threat report from that connection.
Stay Tuned for the First Release
Our first public release of the AI VPN will be released soon! Stay tuned!