Civilsphere AI VPN

The goal of this project is to better protect the privacy of civil society by researching and developing a locally and easy to implement VPN that automatically verifies the traffic of devices with AI-based detection to automatically block threats and stop dangerous privacy leaks. The detection of malicious threats, attacks, infections and private leaked data is implemented using novel free software AI technology and automatic reporting.

The AI VPN is a modular service that automates the generation and revocation of VPN accounts, featuring the automatic capture of network traffic for each account, and the automatic network traffic analysis and reporting of incidents. The AI VPN follows a microservices design and runs using Docker Compose.

Features

The main features of AI VPN are:

• You can install it in your organization and give VPN accounts to your employees
• All the traffic going through the AI VPN is encrypted
• The traffic is automatically analyzed using Slips, a behavioral-based IDS using machine learning and rules
• You can use mails and Telegram channels to request a AI VPN profile. You can configure your own emails and Telegram channels
• A report is automatically created and sent to you using email or Telegram
• The backend VPN can be OpenSSL or Wireguard
• You can use unencrypted VPN in countries where encryption is forbidden, but still provide analysis
• It uses Pi-hole for automatic blocking of DNS requests and protection inside the VPN

Get Started

The project documentation and installation guide can be found at aivpn.readthedocs.io.

The AI VPN is under active development. The functionality of the AI VPN is provided by multiple modules:

| Module | Version | Status | Description | DockerHub | | ------ | ------- | ------ | ----------- |---- | | modmanager | 0.2 | active | Coordinates the operation of the AI VPN | | | modredis | 0.2 | active | Data storage and messaging system for modules | - | | modcommrecv | 0.2 | active | Responsible of receiving new VPN requests | | | modcommsend | 0.2 | active | Responsible of sending messages back to users | | | modreport | 0.2 | active | Responsible for traffic analysis and reporting | | | modslips | 0.1 | active | Threat detection | | | modopenvpn | 0.1 | active | Provides the VPN service using OpenVPN | | | modwireguard | 0.1 | active | Provides the VPN service using WireGuard | | | modnovpn | 0.1 | active | Provides the unencrypted tunel using OpenVPN | | | modpihole | 0.1 | active | Provides DNS real time blocking using Pi-Hole | - |

Acknowledgements

This project was funded through the NGI0 PET Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 825310.

This project was developed by the Stratosphere Laboratory, Artificial Intelligence Centre, Faculty of Electrical Engineering, Czech Technical University in Prague (2020-2021).

The AI VPN threat detection is provided by the Stratosphere Linux IPS developed at the Stratosphere Laboratory.

We would like to specially acknowledge the contributions of the following individuals:

• Veronica Valeros
• Sebastian Garcia
• Maria Rigaki
• Joaquin Bogado
• Alya Gomaa