Protecting critical infrastructure increasingly depends on continuously verifying large IoT fleets against formal security specifications at runtime. Yet the runtime-verification (RV) pipelines proposed for this task are typically single-host prototypes whose monitors read a shared log file, with no resilience to the f...
Nikolaos Kekatos, Marinelio Chintri, Panagiotis Katsaros et al.· 4 citations
Cyber resiliency in edge-IoT deployments is fundamentally an economic problem: detection must keep critical processes operating under attack, but defender resources (compute, bandwidth, operator attention) are bounded. Centralised cloud monitoring offers expressive cross-device detection at prohibitive bandwidth cost;...
Nikolaos Kekatos, Marinelio Chintri, Panagiotis Katsaros et al.· 6 citations
LLM-based agents are entering decision-support roles in defence staff work, where the obligations they must respect are already written down and binding, and where retraining is not available as a control because models arrive as procured components. What can be placed under engineering control is the interface between...
Nikolaos Kekatos, D. Nikou, Anastasios Temperekidis et al.· 0 citations
Guardrails for tool-using LLM agents are usually application-specific rules, which makes multi-step, data-dependent safety policies hard to specify, audit and reuse. As a declarative alternative, we evaluate metric first-order temporal logic (MFOTL), replaying the recorded trajectories that AgentDojo, STAC and R-Judge...
Nikolaos Kekatos, Stylianos Basagiannis, Marinelio Chintri et al.· Proceedings of the 2026 8th...· 2 citations
This case study documents a CRA preparedness pilot for one such product, SEUXDR, an AI-augmented security monitoring product with a large-language-model active-response component on the open-source CYBERFORT platform, and offers practitioners a replicable starting point for translating CRA legal text into operational p...
Georgios Koutidis, Nikolaos Kekatos, Marina Korgiala-Karyda et al.· 0 citations
A new approach for automating the orchestration of the incident lifecycle through next-generation SOC services able to detect/mitigate sophisticated attacks against CNIs, but also implement proactive detection and mitigation measures against zero-day threats is presented.
A. Lekidis, Yagmur Yigit, Leandros A. Maglaras et al.· Electronics· 0 citations
This work proposed a modular weight-based framework that evaluates cross-layer Machine Learning (ML) IDS across multiple dimensions, namely, detection effectiveness and generalizability, data quality, and attack coverage and practical deployability, and applied this framework to the state-of-the-art cross-layer ML IDS...
Dimitrios Tasiopoulos, A. Xenakis, A. Lekidis et al.· Electronics· 0 citations
Swarms of LLM-assisted autonomous robots are increasingly proposed for cooperative intelligence, surveillance, and reconnaissance (ISR) in contested environments. A growing class of their assurance failures arises not within any single platform but across the swarm: individually-compliant actions compose into a mission...
Nikolaos Kekatos, Stylianos Basagiannis, Panagiotis Katsaros et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
