Share your Ideas here. Be as descriptive as possible. Ask for feedback. If you find any interesting Idea, you can comment and encourage the person in taking it forward.
In the modern era of the world wide web everything that appears online should be approched with some caution. This is especially true with .exe/pkg files downloaded on your personal computer.
Introducing Trojan Vault ; an AI powered Sandbox Environment that runs as soon as you power on your personal computer. It intercepts downloaded .exe(For windows) , dmg and pkg(for MAC) files and automatically runs it to detect if a file has any trojans or viruses. The platform uses an environment seperate from that of the Local hardware of the PC and thus your harddisk will not be infected. This platform is hassle free and very light to run.
The platform will use the following technologies
- Micro-VM / WebAssembly Isolation: Each snippet runs in a disposable, ultra-light environment.
- Cryptographic Attestation: Users and code providers verify the environment before execution (leveraging Intel SGX, AMD SEV, or TPM-based attestation).
- Granular Policy Engine: Network, filesystem, and API access defined per snippet.
- Immutable Infrastructure: Each execution destroys itself afterward — no state, no persistence.
- AI Security Layer: Behavior analysis of code during runtime for anomaly/malware detection
Current Solutions and their Drawbacks
- Virtual Machines - Long boot times, heavy to run, harder for non tech folks to understand.
- Cloud compute (AWS Lambda) - Privacy concerns, Pricey Tiers.
- Anti Virus - Good at detecting viruses but can still leak it on your harddisk.
Who benefits?
- Common folks with lower knowledge of computers
- Schools and Colleges
- People who have Youtube as a career who recieve malicious emails with malicious .exe/pkg files
The motivation behind this idea is my own personal experience which resulted in my 11 year old PC being lost to a Trojan.
Lets make the WWW a better place for the common folks.
Trojan Vault is here to save the day!
Comments
1)Many average users don’t think about security until after being attacked, especially the ones who are not used to anything IT. Convincing them to install Trojan Vault, might get tricky.
2)If it’s free, how will it sustain development? If it’s paid, will everyday users prefer it over bundled antivirus, which comes free with most OSs?
THe only negative I could think of for now is that some Trojans might be adapted or encoded to run after a specific period of time, acting like a normal .exe file which might not be detected in a short run
The A.I feature might also flag false trojans or miss certain dangerous files and it depends on both the accuracy and efficiency of the VM.
Else this would be a great idea as a lightweight locally running VM would not infringe on user privacy, and would be quick to run