The goal of this project is to better protect the privacy of civil society by researching and developing a locally and easy to implement VPN that automatically verifies the traffic of devices with AI-based detection to automatically block threats and stop dangerous privacy leaks. The detection of malicious threats, attacks, infections and private leaked data is implemented using novel free software AI technology and automatic reporting.

The AI VPN is a modular service that automates the generation and revocation of VPN accounts, featuring the automatic capture of network traffic for each account, and the automatic network traffic analysis and reporting of incidents. The AI VPN follows a microservices design and runs using Docker Compose.

The main features of AI VPN are:

• You can install it in your organization and give VPN accounts to your employees
• All the traffic going through the AI VPN is encrypted
• The traffic is automatically analyzed using Slips, a behavioral-based IDS using machine learning and rules
• You can use mails and Telegram channels to request a AI VPN profile. You can configure your own emails and Telegram channels
• A report is automatically created and sent to you using email or Telegram
• The backend VPN can be OpenSSL or Wireguard
• You can use unencrypted VPN in countries where encryption is forbidden, but still provide analysis
• It uses Pi-hole for automatic blocking of DNS requests and protection inside the VPN

The project documentation and installation guide can be found at aivpn.readthedocs.io.

The AI VPN is under active development. The functionality of the AI VPN is provided by multiple modules:

Module	Version	Status	Description	DockerHub
mod_manager	0.2	active	Coordinates the operation of the AI VPN
mod_redis	0.2	active	Data storage and messaging system for modules	-
mod_comm_recv	0.2	active	Responsible of receiving new VPN requests
mod_comm_send	0.2	active	Responsible of sending messages back to users
mod_report	0.2	active	Responsible for traffic analysis and reporting
mod_slips	0.1	active	Threat detection
mod_openvpn	0.1	active	Provides the VPN service using OpenVPN
mod_wireguard	0.1	active	Provides the VPN service using WireGuard
mod_novpn	0.1	active	Provides the unencrypted tunel using OpenVPN
mod_pihole	0.1	active	Provides DNS real time blocking using Pi-Hole	-

This project was funded through the NGI0 PET Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 825310.

This project was developed by the Stratosphere Laboratory, Artificial Intelligence Centre, Faculty of Electrical Engineering, Czech Technical University in Prague (2020-2021).

The AI VPN threat detection is provided by the Stratosphere Linux IPS developed at the Stratosphere Laboratory.

We would like to specially acknowledge the contributions of the following individuals:

• Veronica Valeros
• Sebastian Garcia
• Maria Rigaki
• Joaquin Bogado
• Alya Gomaa