Protecting critical infrastructure increasingly depends on continuously verifying large IoT fleets against formal security specifications at runtime. Yet the runtime-verification (RV) pipelines proposed for this task are typically single-host prototypes whose monitors read a shared log file, with no resilience to the f...
Nikolaos Kekatos, Marinelio Chintri, Panagiotis Katsaros et al.· 4 citations
Cyber resiliency in edge-IoT deployments is fundamentally an economic problem: detection must keep critical processes operating under attack, but defender resources (compute, bandwidth, operator attention) are bounded. Centralised cloud monitoring offers expressive cross-device detection at prohibitive bandwidth cost;...
Nikolaos Kekatos, Marinelio Chintri, Panagiotis Katsaros et al.· 6 citations
LLM-based agents are entering decision-support roles in defence staff work, where the obligations they must respect are already written down and binding, and where retraining is not available as a control because models arrive as procured components. What can be placed under engineering control is the interface between...
Nikolaos Kekatos, D. Nikou, Anastasios Temperekidis et al.· 0 citations
Security operations centres and national incident-response teams defending critical infrastructure collect abundant threat data yet struggle to turn it into actionable intelligence. A malware sandbox produces detailed behavioural evidence, but as a large, unranked report whose confidence is unstated. We present CG-CTI,...
Nikolaos Kekatos, Mihaela Curcă, Georgios Koutidis et al.· 0 citations
Guardrails for tool-using LLM agents are usually application-specific rules, which makes multi-step, data-dependent safety policies hard to specify, audit and reuse. As a declarative alternative, we evaluate metric first-order temporal logic (MFOTL), replaying the recorded trajectories that AgentDojo, STAC and R-Judge...
Nikolaos Kekatos, Stylianos Basagiannis, Marinelio Chintri et al.· Proceedings of the 2026 8th...· 2 citations
This case study documents a CRA preparedness pilot for one such product, SEUXDR, an AI-augmented security monitoring product with a large-language-model active-response component on the open-source CYBERFORT platform, and offers practitioners a replicable starting point for translating CRA legal text into operational p...
Georgios Koutidis, Nikolaos Kekatos, Marina Korgiala-Karyda et al.· 0 citations
This work quantifies privacy posture with k-anonymity, l-diversity and t-closeness, aggregate them into a composite Privacy-Posture Index (PPI), and measures residual re-identification across eight transformation configurations on internal PCAP captures and the public Idaho Labs 5GAD corpus.
Nikolaos Kekatos, Apostolos Valiakos, Alexios Lekidis et al.· 0 citations
This work organises the field of automated fact-checking by what is being formalised instead, which gives five levels: the claim, the reasoning, the system doing the checking, the ecosystem the claim spreads through, and the regulatory obligation.
Nikolaos Kekatos, Theodoros Nestoridis, Charalampos Bratsas et al.· 0 citations
A novel neurosymbolic defense-in-depth architecture that ensures end-to-end pipeline integrity and dismantles the promptware kill chain, bounding LLM stochasticity with verifiable constraints, and delivering a resilient, highly observable defense mechanism for next-generation AI-SOCs.
Anna Gazani, Spyridon Kounoupidis, Panagiotis Katsaros et al.· 0 citations
Swarms of LLM-assisted autonomous robots are increasingly proposed for cooperative intelligence, surveillance, and reconnaissance (ISR) in contested environments. A growing class of their assurance failures arises not within any single platform but across the swarm: individually-compliant actions compose into a mission...
Nikolaos Kekatos, Stylianos Basagiannis, Panagiotis Katsaros et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
