Data sharing is notably the most efficient manner to fight cybercrime as it enhances the capabilities of collaborating by sharing Tactics, Techniques, and Procedure used by attackers. However, good practices are often challenging to implement due to hurdles like 1) compliance and regulatory constraints, 2) time constraints for sharing and processing shared information, and 3) perceived lack of value in the information. These barriers hinder the dissemination of crucial information that could improve attack detection and response.

This session will address each of these obstacles by identifying strategies for mutualizing data without revealing the data itself. To do this, I will explain how to remove barriers limiting information sharing by leveraging the data mesh—where the interpretation, rather than the raw data, is shared—and by using advanced technical solutions such as Federated Learning— where only the AI model's parameters are shared instead of the training data—and Fully Homomorphic Encryption—which allows operations on encrypted data without revealing the data itself—. These technologies used within a specific ecosystem will both help bypass regulatory hurdles while strongly elevating the value of data and the competitive advantage against cybercrime by dismantling existing barriers that prevent sharing.

Attendees will be informed how this approach contributes to the compliance with regulatory frameworks like NIS2 and DORA applicable to any corporation doing business with European customers also to gain insights from the success of Luxembourg's first ISAC for the manufacturing industries. The session will also review Luxembourg's National Cybersecurity Strategy, which aims to enhance cybersecurity capabilities by implementing a national network of probes and by introducing sectoral Security Operations Centers. The latter to fortify national defenses against organized attacks targeting economic sectors, critical infrastructures and the society at large.

Attendees will leave this session with a comprehensive understanding of how some advanced technologies can remove barriers to increase the volume and type of shared information while ensuring compliance with regulatory standards that leads to a more secure global community. My goal is to sensitize the audience on how to reduce the usual reluctance when it comes to information sharing by demonstrating how to use processes and technologies at community scale to protect the society at large.