Skip to content
Enrique Tomás Martínez Beltrán
HomeResearchPublicationsTeachingBlog
ENES
Contact
HomeResearchPublicationsTeachingBlog
ENES
Contact

Enrique Tomás Martínez Beltrán

Ph.D. student at the University of Murcia working at the intersection of federated learning, cybersecurity, and privacy-preserving AI for real-world systems.

  • Privacy Policy
  • Terms of Service
  • Accessibility Statement
  • GitHubopens in a new tab
  • LinkedInopens in a new tab
  • Google Scholaropens in a new tab
  • RGopens in a new tab
  • ORCIDopens in a new tab
  • Scopusopens in a new tab
  • DBLPopens in a new tab
  • Web of Scienceopens in a new tab

Enrique Tomás Martínez Beltrán. All rights reserved.

Back to top

This site uses cookies for analytics to understand how visitors interact with the content. No personal data is shared with third parties.

  1. Home
  2. Research & Projects
  3. EU-GUARDIAN: European Framework and Proofs-of-concept for the Intelligent Automation of Cyber Defence Incident Management
CompletedEU-GUARDIAN

EU-GUARDIAN: European Framework and Proofs-of-concept for the Intelligent Automation of Cyber Defence Incident Management

AI-based cyber defence incident management automation framework

A cutting-edge AI-based solution for automating cyber defence incident management processes, enhancing EU cyber defence posture and operational capabilities.

University of MurciaDec 2022 — Nov 2025
EU-GUARDIAN: European Framework and Proofs-of-concept for the Intelligent Automation of Cyber Defence Incident Management
CybersecurityAICyber DefenceAutomation

EU-GUARDIAN (European framework and proofs-of-concept for the intelliGent aUtomAtion of cybeR Defence Incident mAnagemeNt) is a major €13.4 million research project funded by the European Defence Fund (EDF). Running from December 2022 to November 2025, the project aims to establish a cutting-edge European framework for automating cyber defense incident management.

Project Overview

In the modern theater of cyber warfare, Military ICT (Information and Communication Technology) infrastructures are subjected to increasingly sophisticated, coordinated, and rapid cyber-attacks. The sheer volume and complexity of these threats often overwhelm traditional, human-in-the-loop incident response protocols. Delay in detection, analysis, and response can lead to catastrophic breaches of sovereign defense networks.

EU-GUARDIAN directly addresses this challenge by researching and developing an Artificial Intelligence (AI) baseline designed to operate and automate significant portions of the cyber defense incident management process.

Core Objectives

The fundamental goal of EU-GUARDIAN is to drastically enhance the cyber resilience of European military infrastructures. This is achieved through three primary pillars:

1. AI-Driven Automation

The project focuses on creating highly accurate and reliable AI algorithms capable of autonomous or semi-autonomous execution of operational cyber defense tasks. By automating routine and complex analytical workloads, human operators are freed to focus on high-level strategic decision-making.

2. Enhanced Threat Detection and Response

EU-GUARDIAN methodologies drastically reduce the response time required to identify, classify, and mitigate advanced cyber-attacks. The automated systems are designed to detect anomalous behavioral patterns and zero-day threats within critical infrastructure networks far faster than manual intervention.

3. Cyber Situational Awareness

A key output of the project is the elevation of Cyber Situational Awareness (CSA) for military commanders. By aggregating and synthesizing vast amounts of network telemetry and threat intelligence, the AI framework provides decision-makers with a clear, actionable, and real-time overview of the cyber battlefield.

Impact and the European Defence Fund

The EU-GUARDIAN project represents a significant step toward the European Union's strategic autonomy in defense. By co-financing cross-border projects across all defense domains, the EDF fosters an innovative and competitive defense industrial base.

EU-GUARDIAN unites top-tier researchers, technology providers, and defense stakeholders across Europe to build this collaborative capability. The framework not only strengthens the resilience of national contributions but ensures interoperability and shared, state-of-the-art cyber defense mechanisms applicable across EU member states.


The EU-GUARDIAN project is funded by the European Defence Fund. For specific technical inquiries related to the AI automation models or the incident management framework research, please contact me at enriquetomas@um.es.

Methodology

  • AI-driven threat detection to surface relevant alerts in complex defence environments.
  • Automation of incident-handling workflows while preserving human oversight and explainability.
  • Cyber situational awareness pipelines for mitigation, response, and resilient decision support.
  • Alignment with European defence requirements around robustness, privacy, and accountability.

Key Metrics

EUR 13.45M

European Defence Fund budget

Programme running from December 2022 to November 2025

3 years

Programme duration

Focused on mission-critical incident automation

3

Core response stages

Detect, mitigate, and respond

Collaborating Team

University of Murcia

Academic partner

Contributes applied AI, cybersecurity, and trustworthy automation expertise from CyberDataLab.

EDF consortium

European collaboration network

Multidisciplinary partnership advancing defence automation, situational awareness, and operational resilience.

Related Research

CyberBrain: Cybersecurity in BCI for Advanced Driver Assistance

2023 — 2025

CyberBrain: Cybersecurity in BCI for Advanced Driver Assistance

A comprehensive cybersecurity framework for Brain-Computer Interface systems in advanced driver assistance scenarios, focusing on detecting and preventing cyberattacks on the BCI lifecycle.

DEFENDIS: Decentralized Federated Learning for IoT Device Identification and Security

Apr 2023 — Nov 2023

DEFENDIS: Decentralized Federated Learning for IoT Device Identification and Security

DEFENDIS develops a framework for uniquely identifying IoT devices in a distributed manner while solving security threats through decentralized federated learning.