Emergency VPN: Analyzing mobile network traffic to detect digital threats
Veronica Valeros, Sebastian Garcia
Civilsphere Project
Stratosphere Laboratory
@verovaleros, @eldracote
Time keeper, Notetaker, and Gatekeeper. https://pad.internetfreedomfestival.org/p/833
Want to know each other!
Do we know the risks and Threats of the Civil Society?
A shared discussion based on our
"Survey on Security Awareness and Risk Perception for the Civil Society"
Where you a target of a security attack?
Do you consider who your opponent may be? and plan accordingly?
Do you take any precautions about your data and communications?
What concerns do you have about security attacks?
The Emergency VPN Project
A free service to protect the civil society from real digital attacks
Modified from: https://www.eff.org/pages/tor-and-https
-
Is a free security assessment service of your mobile device network traffic.
-
The goal is to detect digital attacks.
-
Human experts manually analyze the traffic and send the report to your email.
-
The service is prioritized for people at risk.
It is not for use of general public. -
The EVPN deactivates after 3 days.
What is the EVPN?
Developed by Israel Leiva, as part of CivilSphere.
-
Download the OpenVPN application
-
Ask for help sending 'help' to vpn@aic.fel.cvut.cz
-
Ask directly for a VPN profile sending 'vpn' to vpn@aic.fel.cvut.cz
-
Wait to receive the new profile (< 1 minute).
-
Import the profile on the mobile device
-
Connect to the VPN
How to use it
-
Our own Python application.
-
Completely automated processing of accounts, profiles, logging, and alerting.
-
Your identity is anonymized even to the analysts. Only managers know your email.
-
Some tools run automatically to aid the analysts on their work. More to come.