LATTICE

Thu, 01 Oct 2026 00:00:00 +0000

Attackers coordinate across borders, while defenders often do not: threat information is shared late, if at all, and many organisations stay out of threat-intelligence sharing altogether because of confidentiality and data protection concerns. LATTICE builds a federated layer that allows organisations to detect, decide and respond to threats together, without relying on a central authority and without disclosing sensitive data.

LATTICE is built around three innovations:

Jury Protocol: a graduated, Byzantine-fault-tolerant consensus mechanism through which federated Security Operations Centres jointly decide on escalating responses, from enhanced monitoring to coordinated investigation and full containment;
Privacy-preserving correlation: secure multi-party computation and zero-knowledge proofs allow organisations to confirm that they are observing the same attack patterns without revealing their detection methods or vulnerable systems;
Federated digital twin network: shared cyber ranges where organisations can safely rehearse and validate responses before deploying them, lowering costs especially for SMEs.

The project, coordinated by the Luxembourg Institute of Science and Technology (LIST) with 14 partners across 9 countries, aims to bring the technology from TRL 4 to TRL 7 and validates it through four pilots on live telemetry in Germany, Greece, the Netherlands and Luxembourg, covering cross-sector threat intelligence, hospital protection, real-time SOC coordination, and national CSIRT vulnerability intelligence. Core components will be released as open source under the EUPL.

Threat Intelligence | Emmanuele Zambon @ TU/e

LATTICE