;; home / profile index.html

Prof. Dr. Šarūnas Grigaliūnas

Vulnerability shaped my life. Resilience shapes my work.

I know what a single point of failure can cost. I build post-quantum security, AI governance and cyber resilience for systems that cannot afford to fail.

This is not a story about fragility. It is a record of what becomes possible when lived vulnerability is turned into strategic clarity.

01 / portrait.raw1800 × 1800
Portrait of Prof. Dr. Šarūnas Grigaliūnas 55°55'12.3"N 21°02'51.7"E
// human in the loopacademic · builder · survivor
1998vulnerability became lived experience
1999→working in cybersecurity
4connected fields of practice
1systems that endure
;; story / source narrative.sh
02

* The source code

One point of failure can change everything.

In 1998, my body told me to stop.

Since that day, vulnerability has never been an abstract concept. It has been a daily operating condition—something to understand, work with and refuse to surrender to.

I do not use that history as a request for sympathy. I use it as a source of rigor. It taught me that resilience is not the absence of weakness. It is the ability to keep identity, purpose and essential functions intact when weakness is real.

That is why I work where post-quantum security, AI governance and critical infrastructure meet. Not because these subjects are fashionable, but because I know how easily one unprotected dependency can bring down everything around it.

;; operating principle

Find the point the system cannot afford to lose. Then design so it does not have to.

sarunas@resilience: ~/narrative zsh

Last login now — resilience console

sarunas@resilience:~$ ./profile --all

[1998] vulnerability became lived experience.

[1999] cybersecurity became a field of work.

[today] professor, centre head, researcher and builder.

[focus] post-quantum security · AI governance · forensics · resilience.

[method] translate frontier risk into systems people can use.

[mission] make Lithuania and the Baltic region harder to break.

[status] still building_

sarunas@resilience:~$

  1. 1998The premise

    Vulnerability stops being theory.

  2. 1999The practice

    Cybersecurity becomes a professional path.

  3. NowThe platform

    Research, infrastructure, governance and public education converge.

  4. NextThe ambition

    A quantum-safe, AI-ready and resilient Baltic region.

;; work / practice expertise.org
03

* Four connected domains

I do not study the future from a distance.

I turn emerging risk into migration plans, governance models, evidence practices and infrastructure that can survive contact with reality.

01PQC / QKD

Quantum-Safe Security

Preparing institutions for cryptographic transition, long-term confidentiality risk and interoperable quantum-secure communication.

  • Post-quantum migration and crypto-agility
  • Quantum-safe identity and trust services
  • QKD infrastructure and interoperability
  • Collect-now-decrypt-later risk
02AI / GOV

AI Security Governance

Making accountability, decision rights and operational safeguards explicit before AI becomes an unmanaged dependency.

  • CARI readiness models
  • CAISO role and accountability design
  • AI-enabled threat readiness
  • Executive governance structures
03RES / OPS

Cyber Resilience

Helping critical sectors preserve trust and continuity before, during and after digital disruption.

  • Critical infrastructure protection
  • NIS2, DORA and regulatory readiness
  • Incident and executive decision readiness
  • Security governance and risk
04DFIR / OSINT

Digital Forensics

Connecting technical evidence, investigation logic and defensible decisions across complex incidents.

  • Digital evidence object models
  • Cybercrime investigation
  • Forensic readiness and reconstruction
  • OSINT and evidence-based analysis
;; how the work moves
Researchfind the real risk
Translatemake it decision-ready
Buildcreate something usable
Provetest it under pressure
;; teaching / modules modules.ktu
04

* Modules I teach

I teach security where the systems actually run.

I teach these modules in the second-cycle programme Information and Information Technology Security at the Faculty of Informatics, KTU. Each one is 6 ECTS. The KTU researcher profile lists them for 2022–2026.

T120M1446 ECTS

Virtual Infrastructure Security

Information and Information Technology Security

Knowledge of virtual architectures and their security technologies, and skills to manage virtual environments and apply virtual-infrastructure security tools.

Official module page

T120M1526 ECTS

Cybercrime and Computer Forensics

Information and Information Technology Security

Knowledge of cybercrime and its identification, analysis and investigation with modern digital forensics, and of incident investigation that preserves digital evidence.

Official module page

T120M1546 ECTS

Ethical Hacking and Vulnerability Detection Methods

Information and Information Technology Security

Knowledge and skills for assessing information systems and networks with ethical hacking and security testing, within legal and ethical limits.

Official module page
;; projects / field map projects.d/
05

* Work in motion

A portfolio should show what is being built—not just what is known.

Institutional programmes, independent laboratories, community work and products—grouped by the outcome they are designed to create.

01

Operational trust

Cyber Resilience

3 featured · 9 initiatives
~/projects/cyber-resilience9 entries
02

Trust beyond classical cryptography

Quantum-Safe

2 EU programmes · 19 labs
~/projects/quantum-safe19 entries
03

Technology in service of people

Volunteer

2 impact projects · 3 expert roles · 5 communities
~/projects/community5 entries
04

Ideas that become usable products

Business

9 ventures and products
~/projects/business6 entries
;; proof / public record evidence.log
06

* Evidence over adjectives

Credibility should be inspectable.

The profile is anchored in current institutional roles, programmes and public research records—not generic claims of expertise.

;; recent public voice

From research to national trust

The consistent public argument is simple. Quantum security is not a distant research problem. Cryptographic visibility, identity and interoperability are resilience questions for today.

Outdated cryptography as a national trust problem ↗ Quantum-secure identity for the Baltic region ↗
;; publications / selected papers.bib
07

* Selected primary works

Read the papers, then check the profiles.

Selected primary works, linked by DOI. Citation counts stay on the profiles.

  1. Oleksii Chalyi, Kęstutis Driaunys, Šarūnas Grigaliūnas, Rasa Brūzgienė

    Standard-Oriented Architecture for AI-Powered Information Security Risk Management

    Electronics 15(6):12822026

  2. Pete Herzog, Michael Sletten, Šarūnas Grigaliūnas, Rasa Brūzgienė

    Security as a Natural Law: A Quantum-Inspired Hypothesis for Information Persistence

    Entropy 28(7):7702026

  3. Roberts Grants, Nadezhda Kunicina, Rasa Brūzgienė, Šarūnas Grigaliūnas, Andrejs Romanovs

    Decision-Support Framework for Cybersecurity Risk Assessment in EV Charging Infrastructure

    Energies 19(8):18142026

  4. Simas Krušniauskas, Šarūnas Grigaliūnas, Rasa Brūzgienė, Mert Cayir

    A Quantum-Adjusted Risk Model for Enterprise Infrastructure Across Data In Transit, In Use, and At Rest

    Electronics 15(12):25462026

  5. Šarūnas Grigaliūnas, Rasa Brūzgienė

    Towards a Unified Quantum Risk Assessment

    Electronics 14(17):33382025

  6. Šarūnas Grigaliūnas, Rasa Brūzgienė, Kęstutis Driaunys, Renata Danielienė, Ilona Veitaitė, Paulius Astromskis, Živilė Nemickienė, Dovilė Vengalienė, Audrius Lopata, Ieva Andrijauskaitė, Neringa Gaubienė

    Navigating the CISO’s Mind by Integrating GenAI for Strategic Cyber Resilience

    Electronics 14(7):13422025

  7. Algimantas Venčkauskas, Šarūnas Grigaliūnas, Linas Pocius, Rasa Brūzgienė, Andrejs Romanovs

    Machine Learning in Money Laundering Detection Over Blockchain Technology

    IEEE Access 13:7555-75732025

  8. Šarūnas Grigaliūnas, Michael Schmidt, Rasa Brūzgienė, Panayiota Smyrli, Stephanos Andreou, Audrius Lopata

    Holistic Information Security Management and Compliance Framework

    Electronics 13(19):39552024

  9. Šarūnas Grigaliūnas, Rasa Brūzgienė, Algimantas Venčkauskas

    Ontology-Driven Digital Profiling for Identification and Linking Evidence Across Social Media Platform

    IEEE Access 11:111672-1116912023

  10. Algimantas Venčkauskas, Donatas Kukta, Šarūnas Grigaliūnas, Rasa Brūzgienė

    Enhancing Microservices Security with Token-Based Access Control Method

    Sensors 23(6):33632023

;; media / talks appearances.log
08

* Public record

The work also has to travel outside the lab.

Interviews, talks and news, newest first.

;; speaking / advisory translate.md
09

* Make the complex actionable

Frontier risk is useless until someone can make a decision about it.

I work with executive, technical, academic and public-sector audiences to translate emerging cybersecurity into clear priorities and defensible action.

;; core briefings
01

The quantum cybersecurity transition

PQC, QKD, crypto-agility and quantum-safe identity—what must move now.

02

AI security governance, from CISO to CAISO

Accountability and resilience before AI becomes an uncontrolled dependency.

03

Collect now, decrypt later

Long-term confidentiality risk translated for executive decisions.

04

Digital forensics in the age of AI

Evidence, OSINT and investigation when authenticity is under pressure.

05

Cyber resilience for critical infrastructure

Moving from compliance to operational readiness and continuity.

;; contact / next move connect.txt

* The next resilient system starts with a conversation

What cannot your organisation afford to lose?

If the answer involves trust, identity, continuity or evidence, we should talk.

LocationKaunas, Lithuania
InstitutionKaunas University of Technology
CentreCyber Security Centre of Excellence
Available forResearch · advisory · executive education · speaking
© 2026 Šarūnas Grigaliūnas ;; designed for resilience back to top ↑
Email copied to clipboard.