Enhancing Cyber Threat Intelligence Sharing through Data Spaces in Critical Infrastructures

IEEE International Conference on Cyber Security and Resilience (CSR), pp. 83–90

Abstract

Complex cyber threats in interconnected critical infrastructures, such as smart grids and power systems, demand cooperative defense. Although sharing Cyber Threat Intelligence can strengthen cybersecurity, existing platforms often lack interoperability, trust, and data sovereignty. To bridge these gaps, we propose a data space framework that leverages IDS Connectors, Metadata Brokers, and formal policy negotiation, ensuring a decentralized environment in which organizations retain full control over shared intelligence. While data spaces are well-established in other fields, their application in sharing the threat information remains underexplored. Our evaluation demonstrates enhanced trust, data sovereignty, and practical viability of the solution for critical infrastructure sectors.

Authors 5

1. Mehdi Akbari Gurabi Aachen

   Fraunhofer Institute for Applied Information Technology · RWTH Aachen University

   Affiliation as printed

   Aachen University,Fraunhofer FIT & RWTH,Aachen,Germany

2. Ömer Sen Aachen

   Fraunhofer Institute for Applied Information Technology · RWTH Aachen University

   Affiliation as printed

   Aachen University,Fraunhofer FIT & RWTH,Aachen,Germany

3. Navid Rahimidanesh Aachen

   RWTH Aachen University

   Affiliation as printed

   Aachen University,RWTH,Aachen,Germany

4. Andreas Ulbig Aachen

   Fraunhofer Institute for Applied Information Technology · RWTH Aachen University

   Affiliation as printed

   Aachen University,Fraunhofer FIT & RWTH,Aachen,Germany

5. Stefan Decker Aachen

   Fraunhofer Institute for Applied Information Technology · RWTH Aachen University

   Affiliation as printed

   Aachen University,Fraunhofer FIT & RWTH,Aachen,Germany