Introducing PERUN

The PERUN research project, funded by the European Union, brings together 17 partners from across several European countries to strengthen Europe’s cybersecurity. 

The initiative focuses on developing innovative solutions powered by artificial intelligence and machine learning to detect, analyse, and counter emerging cyberthreats targeting software, firmware, and hardware systems. By combining research excellence with practical application, PERUN aims to make cybersecurity more efficient, resilient, and cost-effective. 

PERUN's Objectives

To develop AI-based methods for detecting advanced threats like
stegomalware, ransomware, and malware using encrypted communications. This includes creating custom malware
analysis sandboxes network intrusion detection systems (NIDS) with explainable AI (xAI) frameworks.

To utilise trusted hardware and software systems, such as RISC-V technology and Open FPGA Frameworks, to design resilient systems from the ground up.

Create systematic and automated approaches for
risk assessment, including the development of new risk assessment methodologies like cyber-ranges and dynamic
security assessments. This includes evaluating vulnerability combinations and critical paths in cybersecurity.

Implement AI/ML methodologies such as predictive analytics, anomaly detection, and
data fusion to provide predictive security services. This includes continuous security assessments and the integration
of AI/ML solutions with existing systems and workflows.

Ensure ethical and legal compliance of the PERUN solutions, and deliver
enhanced regulation shaping through policy recommendations. Incorporate privacy considerations, ethical guidelines,
and technical standards into the development and deployment of AI systems.

PERUN's Impacts

Scientific

Increased knowledge of AI in cybersecurity, publication of scientific papers, and participation in international events.

Societal

Improved protection against malware attacks, heightened awareness of malware threats.

Technological

Development of innovative algorithms and methods, time savings for analysts.

Economical

Reduction of financial losses from cyberattacks, increased efficiency in malware defense.

News

Europe needs cybersecurity more than ever. With rising cyberattacks and novel threats undetectable to humans, citizens’ assets are at risk. The PERUN…

View

The project PERUN has officially started!

View

Recent Publications

View all Publications

Stay up to date with PERUN’s latest research and insights into next-generation cybersecurity. Explore our recent publications to see how cutting-edge technologies are shaping Europe’s digital resilience. Discover the latest findings and practical applications from PERUN’s ongoing cybersecurity projects.

03.03.2026
Paper

Deobfuscation of JavaScript code and identification of security weaknesses through large language models

Giacomo Benedetti, Luca Caviglione, Carmela Comito, Alberto Falcone, Massimo Guarascio

Project Management

The Perun research project benefits from the strategic and operational guidance of two experienced project managers. Their role involves establishing robust frameworks, coordinating collaboration with 17 partners spanning over 8 countries, and ensuring a successful project conclusion.

Contact us
Michał Choraś Image Project Coordinator Michał Choraś
Marek Pawlicki Image Technical Manager Marek Pawlicki

Latest Updates from PERUN

✨​ Today we present you @ECLEXYS SAGL! ✨​

Based in Riva San Vitale, on the southern shore of Lake Lugano in Switzerland, ECLEXYS SAGL is a privately-owned SME founded in 2005 with a mission that sits at the intersection of advanced ICT engineering and everyday life. What sets the company apart is its strong academic heritage: its core team has built deep expertise through continuous collaboration with major universities and research centres worldwide.

ECLEXYS operates across several interconnected technology domains, cybersecurity, e-health, embedded systems, IoT, and satellite positioning, combining hardware and software expertise to deliver cost-effective, integrated solutions. Unlike many competitors, ECLEXYS applies a true "security by design" philosophy, embedding advanced cybersecurity features in its products and services.

𝐂𝐨𝐫𝐞 𝐀𝐫𝐞𝐚𝐬 𝐨𝐟 𝐄𝐱𝐩𝐞𝐫𝐭𝐢𝐬𝐞

🔹​ Cybersecurity: A founding pillar of the company, rooted in early academic research at Swiss universities and polytechnic schools. ECLEXYS experts are devoted to combating cybercrime by offering a consolidated portfolio of security products, including the EXYS7500-Kondra (SIEM/NDR) and the EXYS7600-Ocelot (Vulnerability scanner/ Asset manager)

🔹​ e-Health: Developing technology platforms that leverage big data analysis, embedded sensors, and IoT gateways to support healthcare and caregiving.

🔹​ Privacy & GDPR Compliance: Applying privacy by design principles across all ICT projects, with particular sensitivity to health data protection.

🔹​ Research & Innovation: Active participation in EU-funded research initiatives, including PERUN, bridging academic knowledge and applied engineering.

Visit our website to learn more about the project
👉​ https://perun.technology/

#cybersecurity #ehealth #detection

✨​ 𝐈𝐧𝐭𝐫𝐨𝐝𝐮𝐜𝐢𝐧𝐠 𝐂𝐍𝐑 ✨​

The National Research Council (CNR) is the largest public research institution of Italy, devoted to advance scientific knowledge and promote innovation across many disciplines.
Within the framework of PERUN, CNR participates with two research institutes: the Institute for Applied Mathematics and Information Technologies (IMATI), and the Institute for High Performance Computing and Networking (ICAR).
The key person involved are @Luca Caviglione and @Massimo Guarascio, which share a long-time cooperation on the design of AI mechanisms for improving the cybersecurity posture of the Internet and of software ecosystems.

The roles of IMATI and ICAR in the PERUN Project are:
🤖 AI/ML-based mechanisms to detect malicious software with advanced capabilities, such as malware able to conceal a payload within images or communicate covertly with a remote command & control facility;
🧠 adoption of Large Language Models to automatically generate synthetic sample to anticipate malware evolving into a family for making detection techniques more robust;
⌨️ outline new challenges of AI-generated threats, for instance against industrial settings or the software supply chain.

Visit our website to learn more about the project
👉​ https://perun.technology/

✨ 𝗧𝗼𝗱𝗮𝘆 𝘄𝗲 𝗶𝗻𝘁𝗿𝗼𝗱𝘂𝗰𝗲 @ITTI

Located in Poznań, Poland, ITTI is a software house with a strong focus on R&D, employing around a hundred professionals — firmly placing them in the SME category.

What sets ITTI apart is their track record in European research: they have been awarded the Crystal Brussels prize five times for being the most active SME in EC Framework Programmes in Poland. They are also members of multiple international and national bodies in the security and public safety communications space.

Their core expertise is in Machine Learning and pattern recognition, applied across cybersecurity, soft target protection, and beyond, backed by a long list of EU-funded projects including AI4Cyber, STARLIGHT, SPARTA, ELEGANT, SIMARGL, Prevision and others.

The ITTI team brings depth across several interconnected domains:
- AI for Cybersecurity: developing advanced ML-based solutions for threat detection, malware analysis, and network intrusion detection;
- Trustworthy & Explainable AI: ensuring AI systems are secure, fair, and interpretable — a focus area they pioneered through the SPARTA SAFAIR program;
- Research & Dissemination: co-authoring open-access publications in top peer-reviewed journals such as IEEE Access and Neurocomputing (Elsevier).

𝐑𝐨𝐥𝐞 𝐢𝐧 𝐭𝐡𝐞 𝐏𝐄𝐑𝐔𝐍 𝐏𝐫𝐨𝐣𝐞𝐜𝐭

ITTI plays a central role within the PERUN consortium:
- WP3 Lead: Use Cases, Requirements & Architecture: ITTI leads the entire workpackage dedicated to gathering PERUN requirements, defining use case scenarios with end-users, planning pilots, and specifying the modular system architecture of the PERUN platform;
- AI-Powered Network Intrusion Detection (WP5 & WP7): developing and piloting a trustworthy, explainable AI-based NIDS — leveraging Cyber Threat Intelligence and xAI — including visualization tools to assist cybersecurity teams in rapid response;
- Malware Research (WP4): analysing the state of the art in malware encryption and communication strategies to strengthen EU-wide cybersecurity frameworks;
- Ethical & Legal Compliance (WP10): supporting the identification, mapping, and continuous monitoring of ethical and legal challenges throughout the project lifecycle;
- Data Management & Dissemination: contributing to project-wide data governance and scientific dissemination, including policy recommendations at EU level.

Visit our website to learn more about the project
👉​ https://perun.technology/

✨​ Today we present you @netzfactor GmbH! ✨​

Located in Bochum, Germany, netzfactor GmbH is a digital IT company that serves as a holistic partner for media and technologies. Founded in 1999 by Prof. Dr. Jörg Muschiol during the early days of corporate websites, the company has always been driven by the vision of global data interoperability. Today, they proudly position themselves as "the data engineers."

Range of Services
The service portfolio is broad and covers six main areas:
🔹​ Web: content management, accessibility, intranets, SEO, and AI-Search Optimization;
🔹​ Applications: web and mobile solutions, IoT and digitalization, AR & VR, iOS and Android;
🔹​ Media design: design and conception, photo and video production, 2D/3D media, and UI/UX optimization;
🔹 Network: server management, IT infrastructure, firewalls, antivirus protection, and hosting;
🔹 Consulting: expert advice on software and infrastructure;
🔹 Research: active participation in various research projects, including EU-funded initiatives.

Role in the PERUN Project

Within the PERUN consortium, netzfactor leverages its expertise in two crucial areas.
​🔸 Technical Development: contributing to AI-based cybersecurity solutions by designing a learning dashboard based on real Security Operations Center (SOC) incidents to make training accessible and efficient (WP9);
​🔸Visual Communication: maintaining and developing the project website, including a general project overview, an up-to-date list of news and publications, and a list of the consortium.

We are proud to have netzfactor in the PERUN consortium, bringing their unique blend of research experience and human interface expertise to the project!

Visit our website to learn more about the project
👉​ https://perun.technology/

✨ 𝗧𝗼𝗱𝗮𝘆 𝘄𝗲 𝗶𝗻𝘁𝗿𝗼𝗱𝘂𝗰𝗲 @Pluribus One

Pluribus One is a research-intensive cybersecurity company based in Italy, specialized in providing innovative solutions for Web Application and API protection. Founded in 2015 as a spin-off of the University of Cagliari, the company bridges the gap between scientific excellence and the market. Pluribus One is the creator of Seer Box®, the only ADR (Application Detection & Response) solution in Europe designed with a privacy-preserving and safe-by-design approach to protect critical digital assets.

The company is ISO 9001 and ISO 27001 certified and holds the "Cybersecurity Made in Europe" label from ECSO, confirming its role as a key player in the European ecosystem.

🔹 𝗥𝗼𝗹𝗲 𝗶𝗻 𝗣𝗘𝗥𝗨𝗡🔹

In the PERUN project, Pluribus One plays a dual, strategic role:

✔️​ 𝗦𝘁𝗿𝗮𝘁𝗲𝗴𝗶𝗰 𝗟𝗲𝗮𝗱𝗲𝗿𝘀𝗵𝗶𝗽: leading the Communication, Dissemination, and Exploitation activities (WP11/WP12) to ensure the project’s innovations reach key stakeholders and translate into real market value.

✔️​ 𝗧𝗲𝗰𝗵𝗻𝗶𝗰𝗮𝗹 𝗘𝘅𝗰𝗲𝗹𝗹𝗲𝗻𝗰𝗲: contributing to the core development of AI-based cybersecurity solutions. This includes the design of secure architectures for Critical Infrastructures and SOCs, AI-driven malware detection, and the integration of explainable AI (XAI) into network analysis and incident response tools.

Pluribus One is also actively involved in the demonstration and validation of PERUN’s use cases, ensuring that the technology is not only innovative but ethically compliant and ready for operational deployment.

We are proud to have Pluribus One in the PERUN consortium, bringing their unique blend of research rigor and advanced defensive technology!

Visit our website to learn more: https://perun.technology/

@Davide Ariu @Luca Piras @NASK @FernUniversität in Hagen @ITTI @University POLITEHNICA of Bucharest @Commissariat a l'Energie Atomique et aux Energies Alternatives @CERN @RevelSI @CiberTRS @EDF @Vicomtech @Katholieke Universiteit Leuven (KU Leuven) @netzfactor GmbH @Thales @CyberPeace Institute @ECLEXYS SAGL
#webapp #api #adr #cybersecurity

It’s official: PERUN has launched. 🎉
In an era where cyberattacks are evolving faster than ever, Europe needs more than just standard protection. New attack vectors and complex encryption often make threats invisible to human detection: this is why PERUN exists.

PERUN is a large-scale European project designed to build a holistic, AI-powered shield for our digital world. Rather than just reacting to attacks, it focuses on the "unseen" layers of technology, protecting everything from the software we use daily to the firmware and hardware that run our critical systems.
By leveraging machine learning, the project strengthens European cybersecurity by countering emerging threats in an efficient and cost-effective way. PERUN aims to enhance the security and resilience of digital infrastructures—from national networks and energy grids to NGOs and Security Operations Centers (SOCs)—by developing advanced solutions that leverage AI/ML technologies.
To this end, the project produces innovative methods and algorithms to detect new types of malware, as well as high TRL tools validated by representatives of critical sectors. These results are applied in five real-life scenarios: nonprofits, energy, telecommunications, private SOCs, and CERTs/CSIRTs, providing an instant boost to Europe’s strategic autonomy.

The project officially started with the signing of the Grant Agreement on October 1, 2025, and has successfully already had its Kick-off Meeting (KoM) on October 26, 2025, in Warsaw, hosted by our partner @NASK.

#europeancybersecurity #cyberresilience #digitalinfrastructuresecurity #technologicaladvantage