Full Program

Enhancing Cyber Threat Intelligence Sharing through Data Spaces in Critical Infrastructures

Summary:

Complex cyber threats in interconnected critical infrastructures, such as smart grids and power systems, demand cooperative defense. Although sharing Cyber Threat Intelligence can strengthen cybersecurity, existing platforms often lack interoperability, trust, and data sovereignty. To bridge these gaps, we propose a data space framework that leverages IDS Connectors, Metadata Brokers, and formal policy negotiation, ensuring a decentralized environment in which organizations retain full control over shared intelligence. While data spaces are well-established in other fields, their application in sharing the threat information remains underexplored. Our evaluation demonstrates enhanced trust, data sovereignty, and practical viability of the solution for critical infrastructure sectors.

Author(s):

Mehdi Akbari Gurabi    
Fraunhofer FIT, RWTH Aachen
Germany

Ömer Sen    
Fraunhofer FIT, RWTH Aachen
Germany

Navid Rahimidanesh    
RWTH Aachen
Germany

Andreas Ulbig    
Fraunhofer FIT, RWTH Aachen
Germany

Stefan Decker    
Fraunhofer FIT, RWTH Aachen
Germany