Authored by: Minh-Thuyen Thi, Ph.D., Researcher at CEA-List
Role in PROTEAS project: CEA List contributes its expertise in cybersecurity and intelligent network management to strengthen the resilience and security of the PROTEAS tactical ICT infrastructure. Its work focuses on integrating advanced intrusion detection and network management capabilities that enhance situational awareness, support cyber defence, and improve the interoperability of the project’s secure communication framework.
Modern military operations rely on resilient digital communications that can operate in demanding and rapidly changing environments. As tactical networks become increasingly connected and data-driven, cybersecurity must evolve from a protective layer into an integrated capability that continuously monitors, detects, and supports responses to cyber threats. Within the PROTEAS project, CEA helps build a secure and resilient ICT infrastructure for future Special Operations Forces Command Posts (SOFCP).
During the early stages of the project, CEA participated in the analysis of the SOFCP ICT infrastructure and cybersecurity framework. This work focused on understanding the dynamic nature of tactical communications, including network technologies, connected devices, information flows, and interfaces. These studies provided the foundation for designing cybersecurity mechanisms capable of supporting highly mobile and heterogeneous operational environments.
Building on this foundation, CEA List’s primary contribution has been the enhancement and integration of advanced cybersecurity and network management capabilities into the PROTEAS tactical ICT infrastructure. CEA List deployed its Machine Learning-enabled Network Intrusion Detection System “SIGMO-IDS”, and its Software-Defined Networking-based management solution “NEON” which is enhanced by an intelligent network monitoring component called “NMS”. CEA adapted its solutions to operate seamlessly alongside the secure communication infrastructure of the project.
Figure 1: Network intrusion detection dashboard of SIGMO-IDS
The SIGMO-IDS continuously monitors network activity to automatically detect suspicious behaviour and potential cyber threats, in real time. Complementing this capability, the NMS provides valuable operational insights to both SIGMO-IDS and the ICT officer, responsible for managing the tactical network. It supplies information such as predicted and actual network traffic load, bandwidth usage per network user, and protocol statistics. These complementary metrics enhance network monitoring, improve situational awareness, and support informed operational decisions, while helping maintain reliable mission-critical communications.
A major milestone has been achieved during the system integration and demonstration phase. CEA List enhanced its SIGMO-IDS, to communicate with other partners’ cybersecurity components, through standardized data formats, enabling effective interoperability between independently developed security solutions. This allows cybersecurity events generated by different components to be consolidated into a unified operational dashboard, giving operators a coherent view of the network security status and facilitating faster decision-making during cyber incidents.
An integrated demonstration is planned to showcase the value of this collaborative approach. During simulated cyberattack scenarios, the combined cybersecurity framework will automatically detect malicious activity in real time and share security information across the different PROTEAS components. This will demonstrate how interoperable cyber defence capabilities can improve the resilience of tactical communication systems, while reducing the operational burden on users.
As PROTEAS progresses toward its final validation activities, CEA continues to support the development of intelligent, interoperable cybersecurity solutions that enhance the security, reliability, and operational effectiveness of next-generation European defence communication systems. By combining advanced intrusion detection, smart network management, and standardized interoperability, PROTEAS is helping pave the way for more resilient tactical ICT infrastructures, capable of supporting future defence operations.
About CEA-List:
CEA-List (Laboratory for Integration of Systems and Technologies) is a leading French research institute within the CEA Tech division, specializing in smart digital systems and advanced R&D for industry and society. Based in Paris-Saclay, it brings together around 1,000 scientists, engineers, and technicians working at the intersection of digital technologies, embedded systems, artificial intelligence, cybersecurity, advanced manufacturing, and digital health. Among its core technological strengths are communication networks and network security, with expertise spanning autonomous network configuration, real-time attack detection, and the design of robust, resilient, and reconfigurable networked systems. Through these capabilities, CEA-List supports the development of secure, intelligent, and future-ready digital infrastructures that advance Europe’s technological sovereignty and innovation ambitions.
CEA-List
Centre d’intégration Nano-INNOV
2 Boulevard Thomas Gobert
91120 Palaiseau, France
https://list.cea.fr