R2D2 will participate in the EUSEW 2025
R2D2 will participate in the EUSEW 2025
The R²D² project is proud to announce its participation in the upcoming European Sustainable Energy Week (EUSEW) 2025, taking place in Brussels from June 10 to 12. As part of the Networking Village, R²D² will be present at booth C5, hosted by the project’s coordinator ETRA, offering attendees a closer look at its advanced tools to secure and strengthen Europe’s energy infrastructure.
R²D² is an Innovation Action designed to enhance the resilience, reliability, and security of today’s Electrical Power and Energy Systems (EPES). In the face of increasing threats—whether technical failures, physical attacks, or cyber incidents—R²D² is developing innovative solutions to prevent and mitigate vulnerabilities in these critical infrastructures.
Visitors to the booth will be able to explore four key tools developed by the project to support the prevention, protection, and restoration of EPES. These solutions are being deployed and validated in two distinct but complementary real-world scenarios:
• Regional coordination among Transmission System Operators (TSOs),
• Data privacy protection for low-voltage (LV) customers.
Both use cases reflect the project’s end-to-end approach to energy resilience—addressing security at both the grid and consumer levels.
The R²D² project plays an active role in reinforcing energy coordination in South-East Europe (SEE), in line with EU regulatory frameworks and the cybersecurity roadmap promoted by ENTSO-E for transmission systems. By combining advanced monitoring, predictive analytics, and incident response mechanisms, R²D² aims to strengthen the European energy system’s capacity to withstand and recover from disruptions.
EUSEW 2025, under the theme “Powering a fair and competitive green transition,” offers a key platform to engage with innovators and policymakers working toward a secure and sustainable energy future. R²D² is proud to contribute to this effort and looks forward to connecting with stakeholders from across the energy ecosystem.


This project has received funding from the European Union’s Horizon Europe research and innovation programme under grant agreement No 101075714.
BRIDGE Newsletter: R2D2 Advancing Cybersecurity in Energy Systems
BRIDGE Newsletter: R2D2 Advancing Cybersecurity in Energy Systems
The latest BRIDGE Newsletter explores how the R2D2 project is advancing state-of-the-art cybersecurity solutions to strengthen the resilience and reliability of Electrical Power and Energy Systems (EPES) in response to growing threats and vulnerabilities.
The featured article focuses on R2D2’s development of advanced tools designed to help EPES operators identify and address supply chain security gaps. These tools detect vulnerabilities and provide actionable insights, empowering organizations to mitigate risks, improve supply chain resilience, and contribute to a more secure energy ecosystem.
Among the key innovations is the R2D2 Self-Assessment Tool, part of the PRECOG solution (Prevention Systems for Energy Infrastructure Security). This tool enables EPES operators to evaluate their cybersecurity posture and take informed steps to enhance their defenses.
Read the full article here: ETIP SNET – BRIDGE – R2D2: Advancing Cybersecurity in Energy Systems

This project has received funding from the European Union’s Horizon Europe research and innovation programme under grant agreement No 101075714.
R2D2 Showcases Cutting-Edge Cybersecurity Solutions at the InCyber Forum
R2D2 Showcases Cutting-Edge Cybersecurity Solutions at the InCyber Forum
From April 1–3, 2025, R2D2 proudly showcased its state-of-the-art cybersecurity solutions at the InCyber Forum in Lille, joining other EU-funded projects at a collaborative exhibition stand.
This premier European event—dedicated to digital security and trust—served as an ideal platform to demonstrate how R2D2’s innovative tools are empowering Electrical Power and Energy Systems (EPES) operators to identify and mitigate vulnerabilities in their supply chains.
Cybersecurity experts from R2D2 partners CyberNoesis and S2 Grupo were on hand at the booth to engage with visitors and share insights. In addition, S2 Grupo presented at the Planning EU pitch area, further amplifying the project’s visibility and impact. Check out the presentation here.
Participating in the InCyber Forum was a fantastic opportunity to connect with industry professionals, exchange knowledge, and reinforce our shared commitment to building a secure digital future rooted in European values and strategic interests.

This project has received funding from the European Union’s Horizon Europe research and innovation programme under grant agreement No 101075714.
R2D2 Showcases Cybersecurity Solutions at InCyber Forum
R2D2 Showcases Cybersecurity Solutions at InCyber Forum
R2D2 is set to showcase its cutting-edge cybersecurity solutions at the InCyber Forum in Lille from April 1-3, where it will join other EU projects at a collaborative stand. The event will highlight how R2D2’s innovative tools help Electrical Power and Energy Systems (EPES) operators identify and address vulnerabilities in supply chain security. Cybersecurity experts from R2D2 partners CyberNoesis and S2 Grupo will be present at the booth, with S2 Grupo also set to present at the Planning EU pitch area on April 2 at 14:30.
This collaborative stand will gather eight projects AI4CYBER, CoCyber, R2D2, Resilmesh, Sunrise, Nemecys, TRANSCEND, and Harpocrates.
R2D2’s participation in this conference is justified by its developments in cybersecurity technologies aimed at enhancing the resilience and reliability of EPES against the growing number of threats and vulnerabilities that could impact these critical infrastructures.
Focusing on EPES cybersecurity, R2D2 works on developing advanced tools to assist EPES operators in identifying and addressing potential gaps in supply chain security. By detecting vulnerabilities and providing actionable insights, these tools empower organizations to effectively mitigate risks, strengthen supply chain practices, and ensure a more secure and resilient energy ecosystem.
Specifically, the R2D2 Self-Assessment Tool, a key component of the PRECOG product (Prevention Systems for Energy Infrastructures Security), helps EPES operators identify and address potential gaps in supply chain security. By pinpointing vulnerabilities and providing actionable insights, the tool empowers organizations to effectively mitigate risks and strengthen their supply chain practices.
Discover the innovative R2D2 Self-Assessment Tool in this video:

This project has received funding from the European Union’s Horizon Europe research and innovation programme under grant agreement No 101075714.
R2D2 - Supply Chain Risk Management Platform Wins Gold at the Cyber Security Awards 2025
R2D2 - Supply Chain Risk Management Platform Wins Gold at the Cyber Security Awards 2025
Cyber Noesis, partner of R2D2 project, has been awarded the Gold Prize at the Cyber Security Awards 2025 for its contribution to the R2D2 – Supply Chain Risk Management Platform. This recognition highlights the project’s dedication to advancing cybersecurity in supply chains, particularly within critical energy infrastructure and real-world security applications.
As a key partner in the EU-funded R2D2 project, Cyber Noesis has developed cutting-edge risk management solutions designed to strengthen supply chain resilience, mitigate threats, and protect operations in the Electrical Power and Energy Systems (EPES) sector.
This award reflects the collective efforts of the Cyber Noesis team, project partners, and the broader R2D2 consortium, emphasizing their commitment to innovation and security in the energy sector.
If you want to learn more about the R2D2 – Supply Chain Risk Management Platform, watch this video where George Aslanidis and Kostas Papadatos from Cyber Noesis introduce the tool:

This project has received funding from the European Union’s Horizon Europe research and innovation programme under grant agreement No 101075714.
R2D2 Progresses Toward Its Final Year: Key Discussions Held in Paris
R2D2 Progresses Toward Its Final Year: Key Discussions Held in Paris
As the R2D2 project enters its final year, the consortium convened in Paris on November 19–20, 2024, for a critical Plenary Meeting. Hosted by RTE, this gathering focused on assessing the progress of innovations and refining plans for implementing the project’s use cases across its four pilot sites (Serbia, Greece, Spain and Slovenia).
This milestone meeting addressed vital project areas, including dissemination strategies, tool integration, deployment, and the validation of solutions. Special emphasis was placed on the demonstration activities for use cases such as operational planning tools, crisis handling for cascading effects, wildfire impact simulations, and dynamic cybersecurity risk assessments among many others. Partners discussed the status of these use cases, challenges faced, solutions proposed, and the next steps to ensure their successful execution.
The R2D2 project has made significant progress in standardization and recommendations by identifying relevant legislation and standards for its products, along with challenges and gaps for compliance and operation. Solutions were proposed to enhance legislation and standards, while addressing interoperability issues and applying security-by-design measures. Additionally, the project aligned its efforts with the objectives of the Digitalising the Energy System – EU Action Plan, contributing to a more secure and standardized energy ecosystem.
Spotlight on Cybersecurity
A dedicated session led by CyberNoesis highlighted the importance of addressing cybersecurity in energy systems. During this session, partners were introduced to the Self-Assessment Tool, as part of the PRECOG product (Prevention Systems For Energy Infrastructures Security). This tool is specifically designed to help Electric Power and Energy Systems (EPES) operators enhance the security of their supply chain practices and identify any possible gaps in their security controls regarding their supply chain practices. Once these gaps are identified, EPES operators can use the insights to develop actionable plans to implement the necessary controls. The tool also supports defining good vendor management practices, such as supplier qualification and auditing, which operators can adopt to strengthen their supply chain security. By leveraging these measures, EPES operators can effectively identify and mitigate security risks, reduce the likelihood of cyberattacks, enhance resilience to disruptions, and safeguard critical assets.
Now fully deployed, this tool is now ready to support stakeholders in strengthening their cybersecurity frameworks. From now, R2D2 partners will test the tool to ensure its effectiveness in practical scenarios and provide valuable feedback.
The session also highlighted CyberNoesis’s efforts to finalize a demonstration plan aimed at engaging EPES stakeholders and ensuring the tool’s practical application. Recorded for wider accessibility, the session provided valuable insights into the tool’s capabilities and broader cybersecurity challenges. A recording of the session will be made available soon.
Replay the recorded session:
The Case for Open Source
RTE partner brought an expert on Open Source, Boris Dolley – Head of Open Source Program Office and Sustainable IT, who provided an inspiring perspective to the meeting by advocating for open-source principles in software development. As energy systems grow more complex, with distributed renewable energy sources, electric mobility, and third-party smart services, solutions must evolve to monitor, control, and optimize these networks effectively. Boris encouraged the consortium to embrace a cultural shift “move from ‘control and forbid’ to ‘motivate and enable’: foster openness, trust in technical communities, and collaboration to create value and drive innovation.” This sparked a robust debate among attendees, highlighting the opportunities and challenges of adopting open source in the energy sector.
Beyond the project
Finally, a discussion took place regarding the exploitation plans for the various products of R2D2. While a preliminary plan was defined by partners at the beginning of the project, efforts are now being focused on refining and implementing it. Partners have already defined the intellectual property and are currently working on identifying and detailing the Key Exploitable Results (KERs). Internal discussions are ongoing to finalize the identification and definition of these KERs. The next steps involve outlining the exploitation intentions, conducting a thorough characterization and risk assessment, exploring use options, and defining a comprehensive roadmap. Additionally, recognising the importance of replication and scalability in this process, partners have developed a scalability questionnaire to support this analysis.

This project has received funding from the European Union’s Horizon Europe research and innovation programme under grant agreement No 101075714.
Unlocking the Power of Threat Hunting in OT Environments
Unlocking the Power of Threat Hunting in OT Environments
In today’s ever-evolving digital landscape, industrial systems and critical infrastructures are more exposed than ever to cyber threats. Since the arrival of the Industry 4.0 paradigm, both Information Technologies and Operational Technologies (IT and OT) coexist, and APT groups and cybercriminals take advantage of vulnerabilities in either of these two technologies to cause damage to these industrial infrastructures or to the society itself, which relies on them.
Threat hunting is a complex process carried out by cybersecurity experts to detect the presence of the above-mentioned Advanced Persistent Threats (APTs). This process usually entails inspecting network traffic, analyzing user and application logs, and correlating all that heterogeneous information in search of indications of the presence of any threat or potential vulnerability in the system.
CARMEN, the tool developed by S2 Grupo in collaboration with Spain’s National Cryptologic Centre to identify compromises by APTs, is one of the tools cybersecurity experts can use in the threat-hunting process. CARMEN covers both IT and OT traffic, providing comprehensive threat visibility that enables early detection of vulnerabilities and anomalies in industrial control systems. Proactive threat detection in OT environments enhances overall security, improves incident response, and minimizes operational disruptions. Furthermore, it enhances asset visibility, inventory management, compliance adherence, and cost reduction. Ultimately, this adaptation future-proofs security measures, ensuring the safeguarding of critical infrastructure in our ever-evolving digital landscape.
As part of the R2D2 project, S2 Grupo has begun expanding CARMEN’s capabilities for analyzing OT traffic by developing new capabilities for data ingestion and threat detection. These developments will include the creation of new specific protocol dissectors for CARMEN, such as MQTT, ICCP 60870-6/TASE.2, IEC 60870-5-104, or Modbus, as well as new pre-processing and aggregation capabilities to reduce the amount of information to be processed and its inner variability. These developments will enhance CARMEN’s ability to carry out a more in-depth analysis of network traffic at different levels and to improve its detection capabilities, including both signature-based and anomaly-detection-based methods.
Additionally, new capabilities aimed at APT and zero-day threat detection using Machine Learning techniques are being developed for CARMEN within the scope of R2D2. This approach is based on modeling and characterizing tactical and operational intelligence, allowing for the comparison of suspicious actions. This way, APT groups can be clustered based on the tactical and operational intelligence they employ when attacking a system. As a result, when anomalous behavior is observed and detected, it’s possible to match this behavior against each APT group cluster, assess the possibility of being under an attack carried out by one of the APT groups in these clusters, and raise an alert. Furthermore, this approach allows for alerting cybersecurity analysts about other actions typically associated with these APT groups so that they can search for any of these actions if they haven’t been noticed before or be prepared for the next stages of the attack.
This developmental milestone and new feature have received substantial acclaim, especially at events like the Navaja Negra Conference, held in Spain in October 2023. The enthusiastic approval from both attendees and experts underscores the significance of this advancement in threat-hunting technology.

This project has received funding from the European Union’s Horizon Europe research and innovation programme under grant agreement No 101075714.




















