About the project
Lateral Adaptive Threat Triaging and Intelligence Collaborative Ecosystems
European cybersecurity suffers from dangerous fragmentation: organisations and Member States defend in isolation while attackers coordinate across borders. Hospitals discover ransomware days after neighbouring facilities faced identical threats; financial institutions miss sector-wide campaigns. The result is preventable breaches and billions in losses.
Collective defence makes everyone stronger — when one organisation detects an attack pattern, all can respond immediately. Yet barriers block collaboration: privacy regulation prevents cross-border data sharing, organisations cannot reveal vulnerabilities to competitors, and today's platforms demand either centralised control or manual coordination that takes hours when minutes matter.
LATTICE breaks these barriers with three innovations — federated consensus for distributed response without central authority, privacy-preserving computation that verifies threats while keeping detection methods secret, and digital twin networks that test dangerous responses safely before deployment — demonstrated through four operational pilots processing millions of security events from genuine threats.
Objectives
Primary objective
Transform European cybersecurity from fragmented silos to privacy-preserving collective defence at operational scale.
Peer-to-peer secure multi-party computation at security-operations speed, targeting a 99.9% privacy guarantee verified through zero-knowledge proofs per NIST SP 800-226 — validated on 50+ federated nodes.
The Jury Protocol's graduated 60/75/90% thresholds against today's 12–24-hour baseline — a 48–96× improvement, with ≥90% consensus accuracy and Byzantine fault tolerance up to 33% malicious nodes.
A federated digital twin network at roughly a tenth of the €500K–€2M cost of dedicated ranges, cutting validation cycles from 6–8 weeks to 24–48 hours — with SME participation proven in the pilots.
70% automation of NIS2 Article 23 incident reporting, validated with the Luxembourg NIS2 authority — with full audit trails and GDPR-compliant data handling throughout.
Six months of sustained operation on real telemetry in every pilot, targeting ≥99.5% uptime and ≥85% practitioner satisfaction — independently assessed against ISO 16290.
EUPL releases (alpha 2028, full platform 2029), 1,000+ downloads and 5+ external deployments targeted, standards contributions to ETSI and CEN-CENELEC, and a Digital Europe Programme transition pathway.