Governing Cross-Border Cyber Threat Intelligence Sharing for Maritime Security Resilience in the Strait of Malacca

Authors

DOI:

https://doi.org/10.46507/jcgpp.v7i1.797

Keywords:

Cooperative Sovereignty, Cyber Threat Intelligence, Maritime Cyber Resilience, Regional Governance

Abstract

The Straits of Malacca and Singapore are among the most strategically important maritime chokepoints in the global trading system. Although conventional threats such as piracy have been managed through regional cooperation, the rapid digitalisation of ports, vessel traffic systems, and naval command infrastructures has created new hybrid cyber-physical vulnerabilities. Despite recurring cyber incidents between 2020 and 2025, no institutionalised real-time cross-border Cyber Threat Intelligence (CTI) mechanism has emerged among Indonesia, Malaysia, and Singapore. This study examines the puzzle of institutional inertia under growing threat interdependence and its implications for SDG 9, Target 9.1 on resilient infrastructure, and SDG 17, Targets 17.16 and 17.17 on knowledge-sharing and effective public-private partnerships. Drawing on 18 semi-structured interviews and qualitative analysis of policy documents from 2020 to 2025, the study identifies three governance bottlenecks: legal-institutional ambiguity, sovereignty-related political constraints, and technical-operational interoperability gaps. Building on Regional Security Complex Theory and regime complexity scholarship, the article theorises Cooperative Sovereignty as a middle-ground governance modality between supranational integration and sovereignty-maximising bilateralism. It proposes the Malacca Cyber Intelligence Node (MCIN) as a federated, sovereignty-compatible mechanism for structured cyber threat signalling while preserving national control over data. The study contributes to governance scholarship and offers actionable pathways for strengthening maritime cyber resilience in sovereignty-sensitive regions.

References

Aaronson, S. A., & Leblond, P. (2018). Another Digital Divide: The Rise of Data Realms and its Implications for the WTO. Journal of International Economic Law, 21(2), 245–272. https://doi.org/10.1093/Jiel/Jgy019

Abdullah, M., Nawaz, M. M., Saleem, B., Zahra, M., Ashfaq, E. B., & Muhammad, Z. (2025). Evolution Cybercrime—Key Trends, Cybersecurity Threats, and Mitigation Strategies from Historical Data. Analytics, 4(3), 25. https://doi.org/10.3390/analytics4030025

Abraham, C., Bélanger, F., & Daultrey, S. (2025). Promoting research on cyber threat intelligence sharing in ecosystems. Journal of Cybersecurity, 11(1), 1–11. https://doi.org/10.1093/cybsec/tyaf016

Adewumi, I. J. (2021). Exploring the Nexus and Utilities Between Regional and Global Ocean Governance Architecture. Frontiers in Marine Science, 8(645557), 1–22. https://doi.org/10.3389/fmars.2021.645557

Afenyo, M., & Caesar, L. D. (2023). Maritime cybersecurity threats: Gaps and directions for future research. Ocean & Coastal Management, 236, Article 106493. https://doi.org/10.1016/j.ocecoaman.2023.106493.

Agastia, I. G. B. D. (2021). Maritime security cooperation within the ASEAN institutional framework: a gradual shift towards practical cooperation. JAS (Journal of ASEAN Studies), 9(1), 25–48. https://doi.org/10.21512/jas.v9i1.6919

Aji, M. P. (2025). Cybersecurity Politics in Building Cyber Sovereignty in Indonesia Through Strengthening the Role of the National Cyber and Crypto Agency. Society, 13(2), 1056–1071. https://doi.org/10.33019/society.v13i2.960

Alaeifar, P., Pal, S., Jadidi, Z., Hussain, M., & Foo, E. (2024). Current approaches and future directions for Cyber Threat Intelligence sharing: A survey. Journal of Information Security and Applications, 83(103786), 1–30. https://doi.org/10.1016/j.jisa.2024.103786

Androjna, A., Perkovič, M., Pavic, I., & Mišković, J. (2021). Ais data vulnerability indicated by a spoofing case-study. Applied Sciences (Switzerland), 11(11), 1–25. https://doi.org/10.3390/APP11115015

Bettani, S. A., & Ahmed, Z. S. (2023). China and Regional Security in South and Southeast Asia: A Comparative Analysis of ASEAN and SAARC. Journal of ASEAN Studies, 11(2), 289–310. https://doi.org/10.21512/jas.v11i2.9600

Bolbot, V., Kulkarni, K., Brunou, P., Banda, O. V., & Musharraf, M. (2022). Developments and research directions in maritime cybersecurity: A systematic literature review and bibliometric analysis. International Journal of Critical Infrastructure Protection, 39(100571), 1–18. https://doi.org/10.1016/j.ijcip.2022.100571

Braun, V., & Clarke, V. (2019). Reflecting on reflexive thematic analysis. Qualitative Research in Sport, Exercise and Health, 11(4), 589–597. https://doi.org/10.1080/2159676X.2019.1628806

Bühler, M. M., Nübel, K., Jelinek, T., Riechert, D., Bauer, T., Schmid, T., & Schneider, M. (2023). Data Cooperatives as a Catalyst for Collaboration, Data Sharing and the Digital Transformation of the Construction Sector. Buildings, 13(2), 1–22. https://doi.org/10.3390/buildings13020442

Buzan, Barry., & Wæver, O. (2003). Regions and powers : a guide to the global security order. Cambridge University Press. https://doi.org/10.1017/CBO9780511491252

Caballero-Anthony, M. (2020). Security Governance and ASEAN’s Political Security Community: Fragmented but Inclusive Security Communities? Fudan Journal of the Humanities and Social Sciences, 13(1), 151–167. https://doi.org/10.1007/S40647-019-00269-Z/METRICS

Chai, Y., & Wu, Y. (2025). The marine community of shared destiny driving paradigm shift in vessel pollution governance: an integrated governance framework for sustainable ocean development. Frontiers in Marine Science, 12(1682990), 1–7. https://doi.org/10.3389/fmars.2025.1682990

Chen, J., Lu, Y., Zhang, Y., Huang, F., & Qin, J. (2023). A management knowledge graph approach for critical infrastructure protection: Ontology design, information extraction and relation prediction. International Journal of Critical Infrastructure Protection, 43(100634), 100634. https://doi.org/10.1016/j.ijcip.2023.100634

Chen, X., & Gao, X. (2024). Norm diffusion in cyber governance: China as an emerging norm entrepreneur? International Affairs, 100(6), 2419–2440. https://doi.org/10.1093/ia/iiae237

Chen, X., & Yang, Y. (2022). Different Shades of Norms: Comparing the Approaches of the EU and ASEAN to Cyber Governance. The International Spectator, 57(3), 48–65. https://doi.org/10.1080/03932729.2022.2066841

Cheryl, B.-K., & Ng, B.-K. (2022). Protecting the Unprotected Consumer Data in Internet of Things: Current Scenario of Data Governance in Malaysia. Sustainability, 14(9893), 1–25. https://doi.org/10.3390/su14169893

Christensen, J. (2023). Studying expert influence: a methodological agenda. West European Politics, 46(3), 600–613. https://doi.org/10.1080/01402382.2022.2086387

Cui, D. (2025). Data Sovereignty Disputes and International Cooperation in the Digital Economy of Southeast Asia. In A. Senadjki (Ed.), Proceedings of the 2025 7th International Conference on Economic Management and Cultural Industry (ICEMCI 2025) (pp. 933–941). Atlantis Press. https://doi.org/10.2991/978-94-6463-888-2_91

Dang, V. H., & Mon, S. W. (2023). Improving Maritime Cybersecurity in Southeast Asia: Suggestions for Further Action by asean. Asia-Pacific Journal of Ocean Law and Policy, 8, 329–351. https://doi.org/10.1163/24519391-08020008

de la Peña Zarzuelo, I. (2021). Cybersecurity in ports and maritime industry: Reasons for raising awareness on this issue. Transport Policy, 100, 1–4. https://doi.org/10.1016/j.tranpol.2020.10.001

Denzin, N. K. (1978). The logic of naturalistic inquiry. McGraw-Hill.

Dhakal, K. (2022). NVivo. Journal of the Medical Library Association, 110(2), 270–272. https://doi.org/10.5195/jmla.2022.1271

Dimitriadis, A., Prassas, C., Flores, J. L., Kulvatunyou, B., Ivezic, N., Gritzalis, D. A., & Mavridis, I. K. (2021). Contextualized filtering for shared cyber threat information. Sensors, 21(14), Article 4890. https://doi.org/10.3390/s21144890

Edwards, S. (2022). Fragmentation, Complexity and Cooperation: Understanding Southeast Asia’s Maritime Security Governance. Contemporary Southeast Asia, 44(1), 87–121. https://doi.org/10.1355/CS44-1D

Emerson, K., Nabatchi, T., & Balogh, S. (2012). An Integrative Framework for Collaborative Governance. Journal of Public Administration Research and Theory, 22(1), 1–29. https://doi.org/10.1093/JOPART/MUR011

European Commission. (2025). The EU Blue economy report 2025: Maritime Affairs and Fisheries (DG-MARE). European Commission. https://op.europa.eu/webpub/mare/eu-blue-economy-report-2025/blue-economic-sectors/maritime-transport.html

Fenton, A. J. (2024). Preventing Catastrophic Cyber–Physical Attacks on the Global Maritime Transportation System: A Case Study of Hybrid Maritime Security in the Straits of Malacca and Singapore. Journal of Marine Science and Engineering, 12(3), 2–26. https://doi.org/10.3390/jmse12030510

Ferreira, V. A., & Cavelti, L. (2025). Good Faith and Investment Treaties with a Particular View on Pillar Two. Intertax, 53(4), 342–361. https://doi.org/10.54648/TAXI2025031

Flick, U. (2022). The SAGE Handbook of Qualitative Research Design. SAGE Publications Ltd

Fortnam, M., Evans, L., Amira Mas Ayu, A. M., Bastian, L., Chaigneau, T., Creencia, L., Goh, H. C., Gonzales, B., Madarcos, K., Maharja, C., Mohd Iqbal, M., Ngoc Le, T., Praptiwi, R. A., Sugardjito, J., Van Nguyen, Q., & Wan Nur Syazana, W. M. A. (2022). Polycentricity in practice: Marine governance transitions in Southeast Asia. Environmental Science & Policy, 137, 87–98. https://doi.org/10.1016/j.envsci.2022.08.010

Hanisch, M., Graf‐Vlachy, L., Haeussler, C., König, A., & Cho, T. S. (2025). Kindred spirits: Cognitive frame similarity and good faith provisions in strategic alliance contracts. Strategic Management Journal, 46(2), 436–469. https://doi.org/10.1002/smj.3660

Hofmann, S. C., & Pawlak, P. (2023). Governing cyberspace: policy boundary politics across organizations. Review of International Political Economy, 30(6), 2122–2149. https://doi.org/10.1080/09692290.2023.2249002

Honrada, G. J. P., & Bokeriya, S. A. (2023). The Shanghai Spirit and the ASEAN Way as the Foundations of a New Regionalism. Vestnik RUDN. International Relations, 23(2), 253–264. https://doi.org/10.22363/2313-0660-2023-23-2-253-264

Horst, H. A., Sargent, A., & gaspard, luke. (2024). Beyond extraction: Data strategies from the Global South. New Media & Society, 26(3), 1366–1383. https://doi.org/10.1177/14614448231201651

Huang, H., Sun, B., & Hu, L. (2024). A task offloading approach based on risk assessment to mitigate edge DDoS attacks. Computers & Security, 140(103789), 1–13. https://doi.org/10.1016/j.cose.2024.103789

Ishkhanyan, A. (2025). The sovereignty-internationalism paradox in AI governance: digital federalism and global algorithmic control. Discover Artificial Intelligence, 5(123), 123. https://doi.org/10.1007/s44163-025-00374-x

Jin, X., Huang, S., & Lei, X. (2024). Research on the Impact Mechanism of Green Innovation in Marine Science and Technology Enabling Dual Economic Circulations. Sustainability (Switzerland), 16(19). https://doi.org/10.3390/SU16198421

Jin, Y., Feng, Y., Liu, C., & Li, S. (2025). Navigating the digital seas: Legal challenges and global governance of maritime cyber operations. Frontiers in Marine Science, 12, 1616906. https://doi.org/10.3389/fmars.2025.1616906

Khan, A. A. (2024). Reconceptualizing Policing for Cybercrime: Perspectives from Singapore. Laws, 13(4). https://doi.org/10.3390/laws13040044

Klar, R., Fredriksson, A., & Angelakis, V. (2023). Digital Twins for Ports: Derived from Smart City and Supply Chain Twinning Experience. IEEE Access, 11, 71777–71799. https://doi.org/10.1109/access.2023.3295495

Lawale, S., & Ahmad, T. (2025). Maritime chokepoints in the Asia-Pacific: geo-economic and security challenges for the GCC states amidst regional and great power competitions. Asian Journal of Middle Eastern and Islamic Studies, 19(3), 235–250. https://doi.org/10.1080/25765949.2025.2595594

Liebetrau, T., & Bueger, C. (2024). Advancing coordination in critical maritime infrastructure protection: Lessons from maritime piracy and cybersecurity. International Journal of Critical Infrastructure Protection, 46(100683), 1–8. https://doi.org/10.1016/j.ijcip.2024.100683

Louart, M., Szkolnik, J. J., Boudraa, A. O., Le Lann, J. C., & Le Roy, F. (2023). Detection of AIS messages falsifications and spoofing by checking messages compliance with TDMA protocol. Digital Signal Processing: A Review Journal, 136. https://doi.org/10.1016/J.DSP.2023.103983

Magunna, A. (2024). Charting waters: the private sector’s evolving governance role in Southeast Asian maritime security. Australian Journal of International Affairs, 78(3), 306–325. https://doi.org/10.1080/10357718.2024.2337013

McCabe, R. (2023). Environmental drivers of maritime insecurity: governance, enforcement and resilience in the western Indian Ocean. Conflict, Security & Development, 23(3), 237–265. https://doi.org/10.1080/14678802.2023.2256251

Melaku, H. M. (2023). A Dynamic and Adaptive Cybersecurity Governance Framework. Journal of Cybersecurity and Privacy, 3(3), 327–350. https://doi.org/10.3390/jcp3030017

Moher, D., Liberati, A., Tetzlaff, J., & Altman, D. G. (2009). Preferred reporting items for systematic reviews and meta-analyses: the PRISMA statement. BMJ, 339(b2535), 1–8. https://doi.org/10.1136/bmj.b2535

Montfort, S., Fischer, M., Hollway, J., & Jager, N. W. (2023). Design paths of federal intergovernmental cooperation. Policy Studies Journal, 51(4), 773–792. https://doi.org/10.1111/psj.12498

Naeem, M., Ozuem, W., Howell, K., & Ranfagni, S. (2023). A Step-by-Step Process of Thematic Analysis to Develop a Conceptual Model in Qualitative Research. International Journal of Qualitative Methods, 22, 1–18. https://doi.org/10.1177/16094069231205789

Nowell, L. S., Norris, J. M., White, D. E., & Moules, N. J. (2017). Thematic Analysis. International Journal of Qualitative Methods, 16, 1–13. https://doi.org/10.1177/1609406917733847

Otto, B., & Jarke, M. (2019). Designing a multi-sided data platform: findings from the International Data Spaces case. Electronic Markets, 29(4), 561–580. https://doi.org/10.1007/s12525-019-00362-x

Panke, D., & Stapel, S. (2024). Cooperation between international organizations: Demand, supply, and restraint. The Review of International Organizations, 19(2), 269–305. https://doi.org/10.1007/s11558-023-09506-3

Peng, P., Xie, X., Claramunt, C., Lu, F., Gong, F., & Yan, R. (2025). Bibliometric analysis of maritime cybersecurity: Research status, focus, and perspectives. Transportation Research Part E: Logistics and Transportation Review, 195(103971). https://doi.org/10.1016/j.tre.2025.103971

Permal, S., & Moorthy, R. (2024). Nuancing Maritime Security Governance in The Straits of Malacca: A Comparative Analysis on Indonesia, Malaysia, and Singapore. Malaysian Journal of History, Politics & Strategic Studies, 51(3), 273–292. https://doi.org/10.17576/jebat.2024.5103.02

Pestana, G., & Sofou, S. (2024). Data Governance to Counter Hybrid Threats against Critical Infrastructures. Smart Cities, 7(4), 1857–1877. https://doi.org/10.3390/smartcities7040072

Poonnawatt, K. (2023). Multilateral cooperation against maritime piracy in the Straits of Malacca: From the RMSI to ReCAAP. Marine Policy, 152(105628), 105628. https://doi.org/10.1016/j.marpol.2023.105628

Pramono, B. (2025). Strategic adaptations for hybrid warfare: Enhancing Indonesian national defence in the digital ERA. International Journal of Innovative Research and Scientific Studies, 8(6), 974–981. https://doi.org/10.53894/ijirss.v8i6.9776

Qiao-Franco, G., Karmazin, A., & Kolmaš, M. (2025). The Indo-Pacific and the Next Phase of ASEAN Centrality. Journal of Current Southeast Asian Affairs, 44(3), 413–435. https://doi.org/10.1177/18681034241307658

Qu, X., & Meng, Q. (2012). The economic importance of the Straits of Malacca and Singapore: An extreme-scenario analysis. Transportation Research Part E: Logistics and Transportation Review, 48(1), 258–265. https://doi.org/10.1016/j.tre.2011.08.005

Radanliev, P. (2025). Cyber diplomacy: defining the opportunities for cybersecurity and risks from Artificial Intelligence, IoT, Blockchains, and Quantum Computing. Journal of Cyber Security Technology, 9(1), 28–78. https://doi.org/10.1080/23742917.2024.2312671

Ramsdale, A., Shiaeles, S., & Kolokotronis, N. (2020). A Comparative Analysis of Cyber-Threat Intelligence Sources, Formats and Languages. Electronics, 9(824), 1–22. https://doi.org/10.3390/electronics9050824

Rantos, K., Spyros, A., Papanikolaou, A., Kritsas, A., Ilioudis, C., & Katos, V. (2020). Interoperability Challenges in the Cybersecurity Information Sharing Ecosystem. Computers, 9(18), 1–17. https://doi.org/10.3390/computers9010018

Rodrigues, R. (2020). Legal and human rights issues of AI: Gaps, challenges and vulnerabilities. Journal of Responsible Technology, 4. https://doi.org/10.1016/j.jrt.2020.100005

Rosnani, Heryadi, D., M.yani, Y., & Sinaga, O. (2022). Asean maritime security cooperation. Journal of Maritime Research, 19(2), 60–64. https://doi.org/10.12716/1001.16.03.01

Rusli, M. H. M., Suherman, A. M., Yuliantiningsih, A., Wismaningsih, & Indriati, N. (2021). The Straits of Malacca and Singapore: Maritime conduits of global importance. Research in World Economy, 12(2), 123–131. https://doi.org/10.5430/rwe.v12n2p123

Saeed, S., Suayyid, S. A., Al-Ghamdi, M. S., Al-Muhaisen, H., & Almuhaideb, A. M. (2023). A Systematic Literature Review on Cyber Threat Intelligence for Organizational Cybersecurity Resilience. Sensors, 23(16), 1–27. https://doi.org/10.3390/s23167273

Sałek, K., & Fajdek, P. (2025). Analysis of the implementation of the NIS2 directive in the Weimar Triangle countries. Central European Review of Economics & Finance, 50(1), 41–52. https://doi.org/10.24136/ceref.2025.003

Senarak, C. (2025). Leveraging advanced technologies and strategies for port cyber resilience: Strengthening incident response and recovery. Transportation Research Interdisciplinary Perspectives, 34(101666), 1–25. https://doi.org/10.1016/j.trip.2025.101666

Setiawan, A., & Padilla, A. M. (2025). Addressing Maritime Security Threats in the Malacca Strait: A Malaysian Perspective. Open Journal of Social Sciences, 13(02), 333–359. https://doi.org/10.4236/jss.2025.132021

Sharma, L. (2024). Maritime cybersecurity in the Indo-Pacific: envisioning a role for the Quad. Journal of the Indian Ocean Region, 20(1), 14–36. https://doi.org/10.1080/19480881.2024.2341467

Singh, N. K., Jash, A., & Nanjappa, Y. (2025). Navigating the nexus: geopolitical, international relations and technical dimensions of US-China cyber strategic competition. Cogent Social Sciences, 11(1), 1–18. https://doi.org/10.1080/23311886.2025.2499171

Soner, O. (2025). Modeling and analyzing cybersecurity risk propagation in ports using fuzzy cognitive maps: System sensitivity to key threat factors. Ocean & Coastal Management, 270(107857), 1–12. https://doi.org/10.1016/j.ocecoaman.2025.107857

Soner, O., Kayisoglu, G., Bolat, P., & Tam, K. (2024). Risk sensitivity analysis of AIS cyber security through maritime cyber regulatory frameworks. Applied Ocean Research, 142(103855). https://doi.org/10.1016/j.apor.2023.103855

Subramaniam, G. A. M., & Fernandez, K. (2025). Contested Waters, Contested Futures: The South China Sea Security Complex and Malaysia’s Sabah Dilemma. AEI Insights, 10(1), 56–69. https://doi.org/10.22452/AEIINSIGHTS.vol10no1.5

Tenny, J. A., & Kassim, A. (2025). Strategic Pathways for Resilience in Maritime Governance in Southeast Asia: A Systematic Literature Review. Proceedings of the 2nd International Conference on Administrative Science (ICAS 2024), 717–732. https://doi.org/10.2991/978-94-6463-791-5_72

Tikanmäki, I., & Ruoslahti, H. (2024). Exploring crisis management response to hybrid threats and warfare. Journal of Military Studies, 1(1), 1–12. https://doi.org/10.2478/jms-2024-0009

Triwahyuni, D., Anggraeni, S., Iqbal, M., Fadilla, N. T., & Mokoginta, F. (2025). Strengthening Indonesia’s Cybersecurity Through Cooperation in The ASEAN Regional Forum (pp. 131–148). https://doi.org/10.2991/978-2-38476-442-6_13

Tuan Binh, N., Xuan Hiep, T., & Hoang Long, T. (2022). Maritime Security in the Indo-Pacific Region: A View from the Geostrategic Position of The Malacca Strait. AUSTRAL: Brazilian Journal of Strategy & International Relations, 11(21), 115–131. https://doi.org/10.22456/2238-6912.119787

Unctad. (2020). Trade And Development Report 2020: From Global Pandemic to Prosperity for All: Avoiding Another Lost Decade. United Nations Publications.

United Nations. (2026). Review Of Maritime Transport 2025: staying the course in turbulent waters. United Nations Publications.

Wang, Q. (2025). Managing emerging port security challenges in developing green and digital shipping corridors: A port governance cooperation perspective under the Belt and Road Initiative. Ocean & Coastal Management, 270(107924). https://doi.org/10.1016/j.ocecoaman.2025.107924

Weaver, G. A., Feddersen, B., Marla, L., Wei, D., Rose, A., & Van Moer, M. (2022). Estimating economic losses from cyber-attacks on shipping ports: An optimization-based approach. Transportation Research Part C: Emerging Technologies, 137. https://doi.org/10.1016/j.trc.2021.103423

Xu, W., & Zuo, X. (2026). Confronting Cross-Border Data Risks. Journal of Global Information Management, 34(1), 1–25. https://doi.org/10.4018/JGIM.399056

Yu, M., & Wang, L. (2025). China’s cross-border maritime data flow governance: Progress, challenges, and prospects. Frontiers in Marine Science, 12, 1600050. https://doi.org/10.3389/fmars.2025.1600050

Zibak, A., Sauerwein, C., & Simpson, A. C. (2022). Threat intelligence quality dimensions for research and practice. Digital Threats: Research and Practice, 3(4), 1–22. https://doi.org/10.1145/3484202

Downloads

Published

2026-04-19

How to Cite

Suhirwan, S. (2026). Governing Cross-Border Cyber Threat Intelligence Sharing for Maritime Security Resilience in the Strait of Malacca. Journal of Contemporary Governance and Public Policy, 7(1), 107–134. https://doi.org/10.46507/jcgpp.v7i1.797