Chaire Cyber CNI

Chaire Cyber CNI – Cybersecurity for Critical Networked Infrastructures

CyberSecDome XR Cybersecurity Demo at IRISA

A great day yesterday presenting the European project CyberSecDome at the CNRS UMR IRISA laboratory in Rennes during the visit of the Jeunes IHEDN.

Many thanks to Olivier Barais for opening the session and highlighting the strong cybersecurity ecosystem within IRISA.

As part of the activities carried by the Chaire Cybersécurité des Infrastructures Critiques within the IRISA environment, we presented our work on next-generation cybersecurity interfaces combining AI and XR technologies to improve situational awareness and reduce the cognitive load of cyber experts facing increasingly complex infrastructures.

Marc-Oliver Pahl introduced the CyberSecDome vision, architecture, and operational context, while Fabien Eyssartier delivered an impressive live demonstration of the immersive platform.

The discussions with participants were extremely engaging, ranging from operational cybersecurity to resilience and disinformation challenges. Seeing participants directly experiment with the interfaces and discuss future applications was particularly rewarding.

CyberSecDome continues to demonstrate how Europe can combine AI, immersive technologies, and operational cybersecurity expertise to strengthen the resilience of critical infrastructures.

A real pleasure to support IRISA during this successful event — and we look forward to many future collaborations with the IHEDN community.

#CyberSecurity #CyberDefense #XR #VirtualReality #AI #CriticalInfrastructure #CyberResilience #SituationalAwareness #HorizonEurope #IRISA #IMTAtlantique #CyberSecDome

The “Management of Complex Threats” workshop at IEEE/IFIP NOMS 2026 was a full success

Great discussions today at the “Management of Complex Threats” workshop at IEEE/IFIP NOMS 2026 in Rome!

Together with Pierre Parrend and colleagues from IMT Atlantique and EPITA, and with the support of the CyberSecDome Horizon Europe project, we brought together around 20 researchers and practitioners from across Europe and Asia to discuss the future of AI-driven cybersecurity and the management of complex threats.

The workshop showcased an impressive breadth of topics:
• uncertainty-aware traffic classification from researchers at Czech Technical University in Prague
• adaptive IoT anomaly detection from National Institute of Informatics
• federated security gateways for LLM agents from Hochschule Furtwangen University
• autonomous AI-driven penetration testing from University of Calabria
• LLM-based honeypots from researchers in France
• cyber-physical attacks against cooperative robot systems from Birla Institute of Technology and Science Pilani
• and topology-based cyberattack detection for water distribution systems involving University of Strasbourg, Karlsruhe Institute of Technology, and EPITA.

I was also particularly happy to see strong contributions from the broader Cyber CNI chair ecosystem at IMT Atlantique:

Mathis Durand (Cyber CNI, CNRS UMR IRISA, IMT Atlantique) presented joint work with Yvon Kermarrec and Marc-Oliver Pahl on SSH honeypot realism and fingerprinting resistance. Their work analyzed how ethical hackers detect deception systems in practice and derived a taxonomy of effective honeypot detection techniques.

Mohammed Mezaouli (CNRS Lab-STICC, IMT Atlantique) presented joint work with Yehya Nasser, Samir Saoudi, and Marc-Oliver Pahl on AI-based real-time anomaly detection for embedded C functions using instruction-level traces and current measurements — an exciting step toward protecting resource-constrained IoT systems against zero-day style attacks.

One recurring theme across the workshop was clear: AI is both the attack surface and the defense mechanism. From semantic attacks against LLMs to autonomous penetration testing and trustworthy AI-driven defense systems, future 6G, IoT, and industrial infrastructures will require fundamentally new approaches to resilience and operational security.

A big thank you to all speakers, authors, and participants for the technically deep discussions and excellent atmosphere throughout the day!

AIMLOps 2026 Workshop at IEEE/IFIP NOMS 2026 a Great Success

🚀 AI is rapidly transforming from a support tool into the operational core of future communication systems — and this was exactly the focus of the 1st AIMLOps Workshop at IEEE/IFIP NOMS 2026 in Rome.

Co-organized by Marc-Oliver Pahl (IMT Atlantique / Chaire Cyber CNI), Hanan Lutfiyya (University of Waterloo), and Stuart Clayman (University College London), the workshop brought together researchers and practitioners from across Europe, North America, and Asia to discuss the future of autonomous and AI-driven network and service management.

The workshop saw strong engagement throughout the entire day:
📌 22 participants in Session 1
📌 32 participants in Session 2
📌 27 participants in Session 3
📌 25 participants in Session 4

What stood out most was the exceptional quality of the papers and the depth of the discussions. Topics ranged from:
🔹 AI-driven cybersecurity and anomaly detection
🔹 Explainable AI (XAI) for trustworthy operations
🔹 MLOps and LLMOps for AI lifecycle management
🔹 Multimodal LLMs for troubleshooting and network management
🔹 Autonomous protocol translation for IoT interoperability
🔹 AI assurance for distributed AI infrastructures
🔹 Sovereign European cloud and AI infrastructures

The Cyber CNI Chaire ecosystem was strongly represented with two research contributions addressing key challenges for future autonomous critical infrastructures.

A first contribution was presented by Mohammed Mezaouli (CNRS Lab-STICC, IMT Atlantique, Brest, France) together with Yehya Nasser, Samir Saoudi, and Marc-Oliver Pahl. Their paper, *“Closing the Loop in Embedded Security: Evolution of an AIOps Framework for Threat Hunting,”* explored how AIMLOps methodologies can secure resource-constrained embedded systems in future 6G and IoT environments through adaptive AI pipelines, side-channel telemetry analysis, continuous model adaptation, and zero-day vulnerability detection. The work demonstrated how AI lifecycle management can become a core building block for embedded cybersecurity operations.

A second Chaire-related contribution was presented by Marc-Oliver Pahl together with his PhD student Christian Lübben from the Technical University of Munich. Their paper, *“Gateway-X: LLM-based Autonomous Adaptive Semantic and Syntactic Protocol Translation,”* addressed one of the central challenges of heterogeneous IoT and industrial environments: interoperability. The work proposed a fully automated AI-driven gateway architecture capable of performing both syntactic and semantic protocol translation using Large Language Models. The research explored how Generative AI can automate “semantic interoperability” between heterogeneous systems and protocols, opening new perspectives for autonomous IoT integration, intelligent gateways, and zero-touch operations in future cyber-physical infrastructures.

The keynote sessions perfectly complemented the technical program.

🎤 Deep Medhi (National Science Foundation, USA) delivered the keynote *“When Networks Think for Themselves: Who Is in-charge?”* and challenged the community to rethink trust, explainability, and control in future autonomous and zero-touch networks where AI systems increasingly make operational decisions themselves.

🎤 Hans Torben Löfflad and Manuel Hoffmann from STACKIT presented *“A European Data & AI Strategy – A Cloud Provider’s View.”* Their keynote addressed sovereign European cloud infrastructures, large-scale AI model serving, Kubernetes-based AI platforms, and Europe’s path toward digital sovereignty.

This discussion was particularly timely as STACKIT was recently selected by the European Commission as one of the providers for the EU Sovereign Cloud procurement initiative — a major milestone for resilient and sovereign European digital infrastructures and highly relevant for research on cyber-secure critical infrastructures.

A huge thank you to all authors, keynote speakers, participants, and organizers for making AIMLOps 2026 such an engaging and inspiring event. The workshop clearly demonstrated that AI lifecycle management, operational trustworthiness, resilience, sovereignty, and interoperability are becoming defining challenges for the future of networking and distributed systems.

#AIMLOps #NOMS2026 #AI #AIOps #MLOps #LLMOps #AutonomousNetworks #Cybersecurity #DigitalSovereignty #SovereignCloud #6G #IoT #NetworkManagement #GenerativeAI #CloudComputing #Interoperability #CyberCNI

View More