Chaire Cyber CNI

Chaire Cyber CNI – Cybersecurity for Critical Networked Infrastructures

The “Management of Complex Threats” workshop at IEEE/IFIP NOMS 2026 was a full success

Great discussions today at the “Management of Complex Threats” workshop at IEEE/IFIP NOMS 2026 in Rome!

Together with Pierre Parrend and colleagues from IMT Atlantique and EPITA, and with the support of the CyberSecDome Horizon Europe project, we brought together around 20 researchers and practitioners from across Europe and Asia to discuss the future of AI-driven cybersecurity and the management of complex threats.

The workshop showcased an impressive breadth of topics:
• uncertainty-aware traffic classification from researchers at Czech Technical University in Prague
• adaptive IoT anomaly detection from National Institute of Informatics
• federated security gateways for LLM agents from Hochschule Furtwangen University
• autonomous AI-driven penetration testing from University of Calabria
• LLM-based honeypots from researchers in France
• cyber-physical attacks against cooperative robot systems from Birla Institute of Technology and Science Pilani
• and topology-based cyberattack detection for water distribution systems involving University of Strasbourg, Karlsruhe Institute of Technology, and EPITA.

I was also particularly happy to see strong contributions from the broader Cyber CNI chair ecosystem at IMT Atlantique:

Mathis Durand (Cyber CNI, CNRS UMR IRISA, IMT Atlantique) presented joint work with Yvon Kermarrec and Marc-Oliver Pahl on SSH honeypot realism and fingerprinting resistance. Their work analyzed how ethical hackers detect deception systems in practice and derived a taxonomy of effective honeypot detection techniques.

Mohammed Mezaouli (CNRS Lab-STICC, IMT Atlantique) presented joint work with Yehya Nasser, Samir Saoudi, and Marc-Oliver Pahl on AI-based real-time anomaly detection for embedded C functions using instruction-level traces and current measurements — an exciting step toward protecting resource-constrained IoT systems against zero-day style attacks.

One recurring theme across the workshop was clear: AI is both the attack surface and the defense mechanism. From semantic attacks against LLMs to autonomous penetration testing and trustworthy AI-driven defense systems, future 6G, IoT, and industrial infrastructures will require fundamentally new approaches to resilience and operational security.

A big thank you to all speakers, authors, and participants for the technically deep discussions and excellent atmosphere throughout the day!

AIMLOps 2026 Workshop at IEEE/IFIP NOMS 2026 a Great Success

🚀 AI is rapidly transforming from a support tool into the operational core of future communication systems — and this was exactly the focus of the 1st AIMLOps Workshop at IEEE/IFIP NOMS 2026 in Rome.

Co-organized by Marc-Oliver Pahl (IMT Atlantique / Chaire Cyber CNI), Hanan Lutfiyya (University of Waterloo), and Stuart Clayman (University College London), the workshop brought together researchers and practitioners from across Europe, North America, and Asia to discuss the future of autonomous and AI-driven network and service management.

The workshop saw strong engagement throughout the entire day:
📌 22 participants in Session 1
📌 32 participants in Session 2
📌 27 participants in Session 3
📌 25 participants in Session 4

What stood out most was the exceptional quality of the papers and the depth of the discussions. Topics ranged from:
🔹 AI-driven cybersecurity and anomaly detection
🔹 Explainable AI (XAI) for trustworthy operations
🔹 MLOps and LLMOps for AI lifecycle management
🔹 Multimodal LLMs for troubleshooting and network management
🔹 Autonomous protocol translation for IoT interoperability
🔹 AI assurance for distributed AI infrastructures
🔹 Sovereign European cloud and AI infrastructures

The Cyber CNI Chaire ecosystem was strongly represented with two research contributions addressing key challenges for future autonomous critical infrastructures.

A first contribution was presented by Mohammed Mezaouli (CNRS Lab-STICC, IMT Atlantique, Brest, France) together with Yehya Nasser, Samir Saoudi, and Marc-Oliver Pahl. Their paper, *“Closing the Loop in Embedded Security: Evolution of an AIOps Framework for Threat Hunting,”* explored how AIMLOps methodologies can secure resource-constrained embedded systems in future 6G and IoT environments through adaptive AI pipelines, side-channel telemetry analysis, continuous model adaptation, and zero-day vulnerability detection. The work demonstrated how AI lifecycle management can become a core building block for embedded cybersecurity operations.

A second Chaire-related contribution was presented by Marc-Oliver Pahl together with his PhD student Christian Lübben from the Technical University of Munich. Their paper, *“Gateway-X: LLM-based Autonomous Adaptive Semantic and Syntactic Protocol Translation,”* addressed one of the central challenges of heterogeneous IoT and industrial environments: interoperability. The work proposed a fully automated AI-driven gateway architecture capable of performing both syntactic and semantic protocol translation using Large Language Models. The research explored how Generative AI can automate “semantic interoperability” between heterogeneous systems and protocols, opening new perspectives for autonomous IoT integration, intelligent gateways, and zero-touch operations in future cyber-physical infrastructures.

The keynote sessions perfectly complemented the technical program.

🎤 Deep Medhi (National Science Foundation, USA) delivered the keynote *“When Networks Think for Themselves: Who Is in-charge?”* and challenged the community to rethink trust, explainability, and control in future autonomous and zero-touch networks where AI systems increasingly make operational decisions themselves.

🎤 Hans Torben Löfflad and Manuel Hoffmann from STACKIT presented *“A European Data & AI Strategy – A Cloud Provider’s View.”* Their keynote addressed sovereign European cloud infrastructures, large-scale AI model serving, Kubernetes-based AI platforms, and Europe’s path toward digital sovereignty.

This discussion was particularly timely as STACKIT was recently selected by the European Commission as one of the providers for the EU Sovereign Cloud procurement initiative — a major milestone for resilient and sovereign European digital infrastructures and highly relevant for research on cyber-secure critical infrastructures.

A huge thank you to all authors, keynote speakers, participants, and organizers for making AIMLOps 2026 such an engaging and inspiring event. The workshop clearly demonstrated that AI lifecycle management, operational trustworthiness, resilience, sovereignty, and interoperability are becoming defining challenges for the future of networking and distributed systems.

#AIMLOps #NOMS2026 #AI #AIOps #MLOps #LLMOps #AutonomousNetworks #Cybersecurity #DigitalSovereignty #SovereignCloud #6G #IoT #NetworkManagement #GenerativeAI #CloudComputing #Interoperability #CyberCNI

Laval Virtual 2025: XR Immersion and prospects for cybersecurity

From April 9 to 11, 2025, Fabien Eyssartier, XR engineer for the CNI Cyber Chair, took part in Laval Virtual, a major trade fair for immersive technologies. This immersion enabled him to identify promising XR innovations for cybersecurity, such as digital twins for industrial systems or adaptive environments based on emotions. These discoveries feed into the work of the Chair, notably as part of the CyberSecDome project, and open up new prospects for collaboration and technology watch.

Manage-IoT 2025: 5th IEEE/IFIP International Workshop on Internet of Things Management

🚀 Take Your High-Quality IoT Research to the Global Stage! 🚀

Submit your best work to Manage-IoT 2025, the 5th IEEE/IFIP International Workshop on Internet of Things Management, co-located with NOMS 2025 in Honolulu, HI (May 12–16, 2025). We’re looking for groundbreaking papers on IoT management, from cutting-edge methodologies to real-world applications.

Accepted papers will be published in IEEE Xplore and showcased to a global audience of experts. Don’t miss this chance to elevate your research!

🗓️ Submission Deadline: January 31, 2025 (firm)

Securing Autonomous and Connected Vehicles: Cybersecurity Challenges, Mohammad Hamad (TUM)

🔒 Excited to share insights from Mohammad Hamad’s talk on “Securing Autonomous and Connected Vehicles: Cybersecurity Challenges” at IMT Atlantique! Learn about innovative solutions and collaborative projects tackling cybersecurity threats in the automotive industry. #Cybersecurity #AutonomousVehicles #ConnectedVehicles #Research #TechTalk

View More