Cyber Security Incident Handling, Warning and Response System for the European Critical Infrastructures


Critical Information Infrastructures (CIIs) rely on complex and robust ICT systems and infrastructures in order to experience flexibility, scalability and operations’ efficiency in the communication and coordination of advance services. Those systems are becoming more and more vulnerable to the advanced and sophisticated activities of hackers and other perpetrators of cyber-related crime. Website:

What is the problem the project is addressing?

CyberSANE is an EU-funded project aiming to develop an innovative and novel system to protect Critical Information Infrastructures (CIIs) against cybercriminals and tackle current threats that could affect the operations of infrastructures related to healthcare, energy, and transportation.

How is it solving the problem?

CyberSANE is developing a state of the art solution that improves the detection and analysis of cyber-attacks and threats on CIIs and increases the knowledge of the current cyber threat landscape. It also supports human operators to dynamically increase preparedness, improve cooperation among CIIs operators, and adopt appropriate steps to manage security risks, report, and handle security incidents.

Our role in the project is the development of DarkNet component, which is a software solution for searching and analyzing threat actor communications in dark web communities and a solution for automatic monitoring and aggregating unstructured data in media articles blog posts and social media. Our solution is enabling cross-lingual analysis of the crawled content and provides business intelligence. This helps end users to get the big picture of global cybercrime and cybersecurity activities and to raise awareness about cyber incidents to the end users.

    What is the logic of the data in the project?

    CyberSANE platform is using various data sources. However, DarkNet component is specifically designed for automatic collection, analysis and visualisation of unstructured data in different languages.

    Which partners are bringing which data?

    Majority of data for the project are obtained by our tools. DarkNet component is collecting the data by crawling dark web, media articles, blog posts and social media.

    Tangible results

    CyberSANE Platform is currently being actively developed and will be tested and validated through a series of large-scale pilots addressing the needs of CIIs in the area of maritime transport, healthcare and energy.


    International Research Centre
    on Artificial Intelligence (IRCAI)
    under the auspices of UNESCO 

    Jožef Stefan Institute
    Jamova cesta 39
    SI-1000 Ljubljana


    The designations employed and the presentation of material throughout this website do not imply the expression of any opinion whatsoever on the part of UNESCO concerning the legal status of any country, territory, city or area of its authorities, or concerning the delimitation of its frontiers or boundaries.

    Design by Ana Fabjan