Apply now! The application period for the orientation program has been extended until August 31, 2026.

An Immune System for Buildings

How a TUHH partnership aims to digitally shield critical infrastructure

graphic of the UN-Goals 9, 11 und 17

Researchers: Prof. Kay Smarsly, Kosmas Dragos 

What do bridges, tunnels, and diving towers have in common with the human body? An astonishing amount, according to a research team from Hamburg University of Technology (TUHH). While rapid digitalisation makes modern structures smarter, it also leaves them vulnerable to cyberattacks. To tackle this, the Institute of Digital and Autonomous Construction (IDAC) at TUHH is working within a German–Greek collaboration to design a revolutionary security architecture. Their goal: to develop self-protecting structures equipped with their own digital immune systems, much like a living organism.

A deep blue sea on the horizon, a cloudless, bright blue sky, and a stark white diving tower rising into the air. What appears to be an idyllic holiday backdrop in the port city of Thessaloniki is actually the site of high-precision scientific fieldwork. At the National Swimming Pool, the usual crowds of swimmers have been replaced by researchers in bright yellow vests. Armed with laptops, cordless screwdrivers, and small, wireless sensors, the team is busy mounting the hardware directly onto the concrete using magnets.

"We are using the sensors to investigate the vibration behaviour of the construction,” explains Kosmas Dragos, a research associate at the Institute of Digital and Autonomous Construction at TUHH. "The dynamic properties of the diving tower must fulfil normative requirements so that the facility can be used safely." Whenever wind hits the structure or people use the tower, the building begins to vibrate imperceptibly. The sensors capture these accelerations and send the data directly to Dragos’s computer in real time.

{f:variable name="poster" value=""}

Video: LSMS/AUTH & IDAC/TUHH

Photo: Unsplash/Samarth Kulkarni

Turning Sensors into a Digital Nervous System

This measurement method is called Structural Health Monitoring (SHM) and is used worldwide—primarily for bridges, offshore wind turbines, or tunnels. Effectively, SHM acts as a nervous system for buildings. Its functionality is based on strategically placed sensors that continuously track vibrations, temperatures, or material strain. These raw data streams are transmitted to central computing units, where specialised algorithms analyse even the smallest deviations from normal structural behaviour—long before they become visible to the human eye.

The decisive advantage of this method is obvious: damage and material fatigue can be detected early on before they develop into critical impairments, saving massive maintenance costs. "Our data provide the owner with vital information on how flexibly and safely the diving tower responds under load," Dragos explains. The doctoral candidate, who studied civil engineering at the Aristotle University of Thessaloniki, now leads the Smart Monitoring working group at IDAC and splits his working time between Hamburg and his hometown of Thessaloniki. "Through the measurements, we provide indications of potential damage and highlight concretely which areas should be examined more closely."

The swimming pool is currently undergoing refurbishment, meaning the Hamburg measurement data flows directly into the official structural and static assessment. Dragos notes that the rare deployment of SHM systems on everyday buildings like residential housing is purely pragmatic: "Ultimately, deploying an SHM system is always the result of a cost-benefit analysis by the owners. Right now, this technology is systematically prioritised for public, safety-critical infrastructure like bridges or pipelines."

However, equipping safety-critical structures with monitoring systems also brings dangers, warns Professor Kay Smarsly, director of the Institute of Digital and Autonomous Construction (IDAC) at TUHH. "In the future, civil engineering structures will increasingly be equipped with sensor systems that are available online. This opens the door wide to cyberattacks," Smarsly explains. "A structure can therefore be intact while its online-networked monitoring system is faulty or compromised—and vice versa." The comprehensive digital networking of infrastructure makes buildings smarter, but it also leaves them more vulnerable.

Critical Infrastructure in the Crosshairs

"For a modern bridge or tunnel, we can no longer just look at the physical concrete structure," Smarsly says. "The structure, its sensors, the communication networks, the data processing, and the ensuing decisions form a tightly coupled cyber-physical system." According to Smarsly, such an integrated system can be impaired in three distinct ways: by structural damage to the building itself, by internal monitoring faults—such as a defective sensor—and by cyberattacks.

The most realistic threat today is not a spectacular, Hollywood-style "bridge collapse via a mouse click," Smarsly notes, but rather attacks on the digital eyes and nerves of the infrastructure. Data streams could be manipulated, monitoring services disabled, urgent warnings suppressed, or disruptive false alarms triggered. As a consequence, vital maintenance might get neglected, or expensive, unnecessary closures could threaten cities. The danger escalates dramatically if attackers compromise actuators—the controllable mechanical components that operate tunnel ventilation or moving swing bridges.

Learning from Biological Defense Mechanisms

To counter this new threat landscape, the German Research Foundation (DFG) is funding a joint cooperation project titled "Digital Immunization of Civil Infrastructure". The initiative bridges IDAC with the Laboratory of Experimental Strength of Materials and Structures at the Aristotle University of Thessaloniki. The project’s unique twist: the research team maps the exact functional logic of the biological immune system onto physical structures.

The human body protects itself through a fast, innate defense layer and builds a memory against future attacks via its adaptive immunity. Following this model, the digital protection architecture of bridges and tunnels is designed to become adaptive, enabling it to fend off threats independently. "In our digital counterpart, sensors, diagnostic modules, digital threat markers, and reaction memories assume comparable functional roles," Smarsly explains.

The IDAC team is performing true pioneering work worldwide. Until now, the construction industry lacked a reference architecture that mirrors the biological defense cascade—from entire cells down to signaling molecules—and transfers it onto digital components.“ For Kosmas Dragos, the system represents the next logical step for a well-established and proven technology: "While the term digital immunisation sounds completely novel, the technology is based on the consistent advancement of real, existing tools—such as digital twins." A digital twin is a virtual model of the real structure on a computer, which is fed with all live sensor data to replicate its behavior dynamically.

If the self-protecting building of the future detects a threat, it triggers a staged, automated defense chain. First, a suspicious sensor value is cross-checked against measurement data from neighbouring sensors and expected structural models. If the suspicion is confirmed, the affected data stream or hacked network node can be isolated de-centrally. At this point, a form of digital self-healing is designed to step in. A computationally generated "virtual sensor" temporarily replaces the failed hardware, allowing the monitoring to continue operating until the defective sensor can be physically replaced. This self-healing is made possible by physics-based models. Since the algorithm incorporates the mechanical laws of the building, it can reconstruct the missing measurements using model-based estimation.

[Translate to English:] Portrait von Prof. Kay Smarsly
Photo: Bettina Engel-Albustin
Prof. Kay Smarsly
[Translate to English:] Portrait von Kosmas Dragos
Photo: TUHH/Hornburg
Kosmas Dragos

Danger from "Digital Allergies"

"Our vision is a structure that does not only continuously ask: 'How is my load-bearing structure doing?', but at the same time: 'Can I trust my sensors, my data, and my digital decisions?'" Smarsly says. Tomorrow's buildings will be capable of learning and will store threat signatures in a digital memory. Connected to modern building automation, actuators, or robotics, a structure could autonomously initiate its first protective measures in an emergency. According to Smarsly's vision, the structure could independently trigger an in-depth measurement, deploy an inspection robot, or close a fire door.

Crucially, once a glitch is fixed, the system must stand down automatically and scale back its protective measures in a controlled manner, instead of remaining permanently in an alarm state. This final function is vital, Smarsly emphasizes: "A good immune system must not only know when to react, but also when to stop." This capability is decisive to avoid "digital allergies" or autoimmune reactions—such as constant false alarms or unnecessary public closures. To keep these far-reaching decisions transparent, IDAC is heavily researching Explainable Artificial Intelligence (XAI). The key word here is "explainable", Smarsly highlights: "Decisions with far-reaching or irreversible consequences must remain comprehensible, rule-bound, and overridable by responsible humans."

A European Hub for the Future of Construction

The ultimate goal of this research project is to establish a permanent international research structure. The vision: the founding of a joint International Center for Sustainable Digital and Autonomous Constructions (SDAC). The SDAC will transform this long-term cooperation into a permanent common institution. Research will no longer take place solely within isolated, short-term project grants, but will be driven by a long-term research agenda, continuous staff rotations, and joint educational and training formats. IDAC brings its expertise in cyber-physical monitoring systems, digital models, artificial intelligence, and decentralised data processing, while the Greek partners complement this with decades of expertise in structural mechanics and heavy-duty laboratory testing infrastructures. "This allows digital methods to be tested under real physical and mechanical conditions," Smarsly says, "instead of just relying on computer simulations."

This cross-border collaboration is already concrete reality, as proven by daily practice at IDAC. Since 2021, Kosmas Dragos has worked seamlessly from Greece on the embedded, physics-based models for wireless monitoring—the core theme of his TUHH doctoral dissertation. Today, he integrates these efforts into the German–Greek DFG cooperation. His role perfectly embodies the very foundation of the planned center: a vibrant, real-time international network that is building the self-protecting infrastructure of tomorrow, brick by brick.