This site loads optional analytics from Google and external analytics providers only if you accept. You can decline and continue using the site normally.
AI and machine learning methods for threat detection, incident management, situational awareness and attack mitigation.
AI for cyberdefense is valuable when it helps analysts detect, interpret and respond to hostile activity. The technical challenge is not only predictive accuracy, but also reliability under noisy telemetry, adversarial pressure and incomplete context.
Cyberdefense data is rarely centralized in a clean, complete and shareable dataset. Distributed learning, federated approaches and privacy-aware collaboration make it possible to learn from multiple environments without exposing all raw traces to one party.
The portfolio connects cyberdefense AI with decentralized federated learning, attack explanation, mitigation recommendation, robust aggregation and applied systems such as aerial reconnaissance, energy anomaly detection and IoT security.
It is the use of machine learning and AI methods to detect threats, prioritize incidents, explain attacker behavior and support mitigation in security operations.
Security teams need to understand why a model raised an alert before they trust it in high-impact response workflows.
Yes, federated and decentralized learning can train or adapt models across different environments while keeping raw telemetry local.
DEFENDIS develops a framework for uniquely identifying IoT devices in a distributed manner while solving security threats through decentralized federated learning.
View ProjectA European research project on methods and proofs of concept for supporting cyber defence incident management.
View ProjectROBUST-6G studies security mechanisms for 6G systems, including monitoring, secure data management, trustworthy AI services, federated learning, and threat response.
View ProjectA comprehensive cybersecurity framework for Brain-Computer Interface systems in advanced driver assistance scenarios, focusing on detecting and preventing cyberattacks on the BCI lifecycle.
View ProjectA practical note on how distributed monitoring, DFL models, alert evidence and LLM-based support can fit into a cyberdefense workflow.
A research note on using DFL to turn distributed telemetry, anomalies and trust signals into cyberdefense situational awareness.
A technical note on how drone fleets can use DFL to collaborate on detection models without exposing mission telemetry.
A focused research note on median, trimmed mean and trust-weighted aggregation for peer-to-peer federations under poisoning and unreliable clients.
A research note on edge training, secure aggregation and adaptive privacy budgets for IoT security monitoring.