Enhancing Cyber Threat Intelligence Sharing through Data Spaces in Critical Infrastructures

Complex cyber threats in interconnected critical infrastructures, such as smart grids and power systems, demand cooperative defense. Although sharing Cyber Threat Intelligence can strengthen cybersecurity, existing platforms often lack interoperability, trust, and data sovereignty. To bridge these gaps, we propose a data space framework that leverages IDS Connectors, Metadata Brokers, and formal policy negotiation, ensuring a decentralized environment in which organizations retain full control over shared intelligence. While data spaces are well-established in other fields, their application in sharing the threat information remains underexplored. Our evaluation demonstrates enhanced trust, data sovereignty, and practical viability of the solution for critical infrastructure sectors.