{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,30]],"date-time":"2026-10-30T17:32:27Z","timestamp":1793381547969,"version":"4.5.0"},"update-to":[{"DOI":"10.12688\/openreseurope.22957.1","type":"new_version","label":"New version","source":"publisher","updated":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T00:00:00Z","timestamp":1781308800000}}],"reference-count":38,"publisher":"CERN","license":[{"start":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T00:00:00Z","timestamp":1781308800000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"European Commission","award":["101119681"],"award-info":[{"award-number":["101119681"]}],"id":[{"id":"https:\/\/ror.org\/00k4n6c32","id-type":"ROR","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Open Res Europe"],"abstract":"<jats:p>Background\n                    The cybersecurity domain faces dual challenges: a global shortage of qualified professionals and persistent human-factor vulnerabilities contributing to the majority of security breaches. Traditional Security Information and Event Management (SIEM) systems generate excessive false positives causing analyst alert fatigue, while conventional awareness programmes demonstrate limited effectiveness in changing user behaviour. Integrated solutions addressing both technical detection and human-centric education are needed.\n                \n                \n                    Methods\n                    We developed SentinelSphere, an AI-driven platform combining machine learning-based threat detection with Large Language Model (LLM)-powered security training. The detection component employs an Enhanced Deep Neural Network trained on the CIC-IDS2017 and CIC-DDoS2019 benchmark datasets. To mitigate the substantial class imbalance present in these datasets (e.g. 168,186 benign samples versus 21 SQL injection samples), class weights inversely proportional to class frequencies were applied during training. The educational component utilises Microsoft\u2019s Phi-4 model (14 billion parameters) with quantisation techniques to enable deployment on standard hardware. System performance was optimised through Rust-based preprocessing and validated via pilot deployments across two workshops with a total of 79 stakeholders (3 professionals in maritime, educational and manufacturing sectors; 76 in an educational setting) in Greece.\n                \n                \n                    Results\n                    The Enhanced DNN achieved high detection accuracy with significant false positive reduction compared to baseline models, while maintaining strong recall for critical attack categories including DDoS, botnet, and brute force attacks. Rust optimisation delivered substantial speedup in both single-record and batch processing. Stakeholder validation revealed high satisfaction rates, with most participants achieving improved security concept comprehension post-training. The platform identified critical awareness gaps, particularly regarding data protection regulations and multi-factor authentication adoption.\n                \n                \n                    Conclusions\n                    SentinelSphere demonstrates that integrating intelligent threat detection with adaptive, LLM-powered security education shows strong potential to address both technical detection and human security awareness challenges, although longitudinal studies are required to validate sustained behavioural change. The resource-efficient design enables deployment in SME environments without enterprise-grade infrastructure, supporting comprehensive cyber resilience approaches within the European Union\u2019s regulatory framework.<\/jats:p>","DOI":"10.12688\/openreseurope.22957.2","type":"journal-article","created":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T11:09:06Z","timestamp":1781348946000},"update-policy":"https:\/\/doi.org\/10.68336\/openreseurope.updatepolicy","source":"Crossref","is-referenced-by-count":0,"title":["SentinelSphere: An AI-driven cybersecurity platform integrating real-time threat detection with security awareness education"],"prefix":"10.68336","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6727-1014","authenticated-orcid":true,"given":"Nikolaos D.","family":"Tantaroudas","sequence":"first","affiliation":[{"name":"Ethniko Metsobio Polytechneio Ereunetiko Panepistemiako Institouto Systematon Epikoinonion kai Ypologiston, Athens, Attica, Greece"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-8581-8335","authenticated-orcid":true,"given":"Ilias","family":"Karachalios","sequence":"additional","affiliation":[{"name":"National Technical University of Athens, Zografou, Attica, Greece"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrew J.","family":"McCracken","sequence":"additional","affiliation":[{"name":"183 Rue de l'Abb\u00e9 Griffon, DASKALOS-APPS, P\u00e9ronnas, 01960, France"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"13904","published-online":{"date-parts":[[2026,6,13]]},"reference":[{"key":"104629","doi-asserted-by":"crossref","unstructured":"1. Ramezan CA: Examining the Cyber Skills Gap: An Analysis of Cybersecurity Positions by Sub-Field. J. Inf. Syst. Educ. 2023; 34(1): 94\u2013105. Reference Source (https:\/\/aisel.aisnet.org\/jise\/vol34\/iss1\/8\/)","DOI":"10.62273\/WICW4769"},{"key":"104630","unstructured":"2. ISC2: ISC2 Cybersecurity Workforce Study 2023. Alexandria, VA: International Information System Security Certification Consortium;2023. Reference Source (https:\/\/www.isc2.org\/research)"},{"key":"104631","doi-asserted-by":"crossref","unstructured":"3. Kucuk MF, Uysal I: Anomaly Detection in Self-Organizing Networks: Conventional Versus Contemporary Machine Learning. IEEE Access. 2022; 10: 61744\u201361752. Reference Source (https:\/\/ieeexplore.ieee.org\/document\/9793641\/)","DOI":"10.1109\/ACCESS.2022.3182014"},{"key":"104632","unstructured":"4. Ponemon Institute: The Cost of Malware Containment. Traverse City, MI: Ponemon Institute LLC;2023."},{"key":"104633","unstructured":"5. Verizon: 2025 Data Breach Investigations Report. New York: Verizon Business;2025. Reference Source (https:\/\/www.verizon.com\/business\/resources\/reports\/dbir\/)"},{"key":"104634","doi-asserted-by":"publisher","DOI":"10.2824\/782573"},{"key":"104635","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.CSWP.29"},{"key":"104636","unstructured":"8. ResilMesh Consortium: ResilMesh: Situation Aware enabled Cyber Resilience for Dispersed, Heterogenous Cyber Systems. EU Horizon Europe Project 101119681, Technical Report. 2023."},{"key":"104637","doi-asserted-by":"publisher","DOI":"10.34190\/eccws.23.1.2258"},{"key":"104638","doi-asserted-by":"publisher","DOI":"10.23919\/CNSM63122.2024.10814789"},{"key":"104639","doi-asserted-by":"crossref","unstructured":"11. Tantaroudas ND, Karachalios I, McCracken AJ: SentinelSphere: AI-Driven Cybersecurity Platform Combining Threat Detection with Security Awareness. Proceedings of the 21st International Conference on Cyber Warfare and Security (ICCWS 2026). Wilmington, USA: University of North Carolina;2026 5-6 March 2026.","DOI":"10.34190\/iccws.21.1.4465"},{"key":"104640","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.25"},{"key":"104641","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2762418"},{"key":"104642","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2895334"},{"key":"104643","doi-asserted-by":"publisher","DOI":"10.5220\/0006639801080116"},{"key":"104644","doi-asserted-by":"publisher","DOI":"10.1109\/CCST.2019.8888419"},{"key":"104645","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-25109-3_9"},{"key":"104646","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2022.103560"},{"key":"104647","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2019.102419"},{"key":"104648","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103251"},{"key":"104649","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2402.00891"},{"key":"104650","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2405.04760"},{"key":"104651","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-025-00361-w"},{"key":"104652","doi-asserted-by":"publisher","DOI":"10.3390\/ai6090216"},{"key":"104653","doi-asserted-by":"publisher","DOI":"10.3390\/bdcc9070184"},{"key":"104654","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2405.14487"},{"key":"104655","doi-asserted-by":"publisher","DOI":"10.1145\/3686852.3686887"},{"key":"104656","doi-asserted-by":"publisher","DOI":"10.1016\/j.heliyon.2017.e00346"},{"key":"104657","doi-asserted-by":"publisher","DOI":"10.3390\/fi11030073"},{"key":"104658","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1901.02672"},{"key":"104659","doi-asserted-by":"publisher","DOI":"10.1145\/3427920"},{"key":"104660","doi-asserted-by":"publisher","DOI":"10.3390\/app14052116"},{"key":"104661","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2024.127427"},{"key":"104662","doi-asserted-by":"publisher","DOI":"10.1109\/TELFOR63250.2024.10819044"},{"key":"104663","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2014.103"},{"key":"104664","doi-asserted-by":"publisher","DOI":"10.5281\/zenodo.18400306"},{"key":"104665","doi-asserted-by":"publisher","DOI":"10.5281\/zenodo.18400377"},{"key":"104666","doi-asserted-by":"publisher","DOI":"10.5281\/zenodo.18393845"}],"container-title":["Open Research Europe"],"original-title":[],"link":[{"URL":"https:\/\/open-research-europe.ec.europa.eu\/articles\/6-58\/v2\/xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/ore.eu\/ore\/article\/download\/1253\/version\/2143\/4283","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/ore.eu\/ore\/article\/download\/1253\/version\/2143\/4284","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/ore.eu\/ore\/article\/download\/1253\/version\/2143\/4283","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,10,30]],"date-time":"2026-10-30T17:11:02Z","timestamp":1793380262000},"score":1,"resource":{"primary":{"URL":"https:\/\/ore.eu\/ore\/article\/view\/1253\/version\/2143"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,13]]},"references-count":38,"URL":"https:\/\/doi.org\/10.12688\/openreseurope.22957.2","relation":{"is-version-of":[{"id-type":"doi","id":"10.12688\/openreseurope.22957.1","asserted-by":"subject"}],"has-review":[{"id-type":"doi","id":"10.21956\/openreseurope.26095.r75845","asserted-by":"object"},{"id-type":"doi","id":"10.21956\/openreseurope.26095.r75844","asserted-by":"object"},{"id-type":"doi","id":"10.21956\/openreseurope.26095.r75909","asserted-by":"object"},{"id-type":"doi","id":"10.21956\/openreseurope.26095.r75908","asserted-by":"object"}]},"ISSN":["2732-5121"],"issn-type":[{"value":"2732-5121","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,13]]},"assertion":[{"value":"2026-06-13","name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}},{"value":"The project has received funding from the European Union's Horizon Europe programme under Grant Agreement No. 101119681. \n\n                    The funders had no role in study design, data collection and analysis, decision to publish, or preparation of the manuscript.","name":"funding_statement","label":"Funding Statement","group":{"name":"funding_information","label":"Funding Information"}}],"article-number":"58"}}