Artificial Intelligence and the Future of Cybersecurity: Threats, Defenses, and Strategic Imperatives
Keywords:
Artificial Intelligence, Cybersecurity, Threat Detection, Zero Trust Architecture, AI Governance, Machine Learning, Generative AIAbstract
High-speed networks and rapid advances in artificial intelligence give rise to new offensive and defensive cyber operations. Offensive AI can provide targeted phishing, advanced and adaptive malware, and automated exploitability assessment. These tools lower the barrier for entry. This paper also considers autonomous behavior in AIOps, such as machine-speed detection of anomalies and security self-adaptation. Employing a systematic literature review, we characterize how, across three complementary dimensions, threat amplification, defensive enablement and calculated governance, AI-enabled tools and techniques are shifting the balance of the cybersecurity landscape. Our review analyzes 20 peer-reviewed and non-peer-reviewed industry articles published between 2015 and 2026, covering attack vectors, AI-enabled detection architecture, and governing frameworks, including the NIST AI RMF, EU AI Act, and NIST AI 600-1. The quantitative pillars are AI Security Return on Investment, AI Cyber Anomaly Index, Detection-Exposure Gap, and Organizational Cyber Risk Score, or ASROI, ACAI, DEG, and OCRS, respectively. The report found that organizations that have deployed AI-enabled defensive systems experience a 50% reduction in MTTD and a $2.22 million lower average cost of a breach compared to a non-AI environment. The results are relevant to the asymmetric setting in which the offense is much more capable than the defense, as this scenario is the setting that regulatory systems have not yet adapted to.
Downloads
References
A. L. Buczak and E. Guven, "A survey of data mining and machine learning methods for cyber security intrusion detection," IEEE Communications Surveys & Tutorials, vol. 18, no. 2, pp. 1153–1176, 2015. Available: https://ieeexplore.ieee.org/abstract/document/7307098
N. Kaloudi and J. Li, "The AI-based cyber threat landscape: A survey," ACM Computing Surveys, vol. 53, no. 1, pp. 1–34, 2020. Available: https://dl.acm.org/doi/abs/10.1145/3372823
R. Kaur, D. Gabrijelcic, and T. Klobucar, "Artificial intelligence for cybersecurity: Literature review and future research directions," Information Fusion, vol. 97, p. 101804, 2023. Available: https://doi.org/10.1016/j.inffus.2023.101804
S. Rose, O. Borchert, S. Mitchell, and S. Connelly, "Zero trust architecture," NIST Special Publication 800-207, 2020. Available: https://doi.org/10.6028/NIST.SP.800-207
National Institute of Standards and Technology, "Artificial Intelligence Risk Management Framework (AI RMF 1.0)," NIST AI 100-1, 2023. Available: https://doi.org/10.6028/NIST.AI.100-1
European Parliament and Council of the European Union, "Regulation (EU) 2024/1689 on Artificial Intelligence (AI Act)," Official Journal of the European Union, 2024. Available: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689
OWASP Foundation, "OWASP Top 10 for Large Language Model Applications 2025," Available: https://owasp.org/www-project-top-10-for-large-language-model-applications/ (accessed May 2026).
IBM Security, "Cost of a Data Breach Report 2025," IBM, 2025. Available: https://www.ibm.com/reports/data-breach
World Economic Forum, "Global Cybersecurity Outlook 2025," 2025. Available: https://www.weforum.org/publications/global-cybersecurity-outlook-2025/
World Economic Forum, "Global Cybersecurity Outlook 2026," 2026. Available: https://reports.weforum.org/docs/WEF_Global_Cybersecurity_Outlook_2026.pdf
M. Ozkan-Okay et al., "A comprehensive survey: Evaluating the efficiency of artificial intelligence and machine learning techniques on cyber security solutions," IEEE Access, vol. 12, pp. 12229–12256, 2024. Available: https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=10403908
K. Dhanushkodi and S. Thejas, "AI enabled threat detection: Leveraging artificial intelligence for advanced security and cyber threat mitigation," IEEE Access, vol. 12, pp. 173127–173136, 2024. Available: https://ieeexplore.ieee.org/iel8/6287639/10380310/10747338
K. Chokkanathan et al., "AI-driven zero trust architecture: Enhancing cyber-security resilience," in Proc. 2024 8th Int. Conf. on Computational System and Information Technology for Sustainable Solutions (CSITSS), pp. 1–6, IEEE, 2024. Available: https://ieeexplore.ieee.org/abstract/document/10816746
K. Achuthan, S. Ramanathan, S. Srinivas, and R. Raman, "Advancing cybersecurity and privacy with artificial intelligence: current trends and future research directions," Frontiers in Big Data, vol. 7, p. 1497535, 2024. Available: https://doi.org/10.3389/fdata.2024.1497535
C. J. Zhang, A. Q. Gill, B. Liu, and M. J. Anwar, "AI-based identity fraud detection: a systematic review," arXiv preprint arXiv:2501.09239, 2025. Available: https://doi.org/10.48550/arXiv.2501.09239
M. Uddin et al., "Generative AI revolution in cybersecurity: a comprehensive review of threat intelligence and operations," Artificial Intelligence Review, vol. 58, no. 8, p. 236, 2025. Available: https://link.springer.com/article/10.1007/s10462-025-11219-5
National Institute of Standards and Technology, "Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile," NIST AI 600-1, Jul. 2024. Available: https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf
M. L. Gambo and A. Almulhem, "Zero trust architecture: A systematic literature review," Journal of Network and Systems Management, vol. 34, no. 1, p. 25, 2026. Available: https://link.springer.com/article/10.1007/s10922-025-09998-x
Z. Zhang et al., "Explainable artificial intelligence applications in cyber security: State-of-the-art in research," IEEE Access, vol. 10, pp. 93104–93139, 2022. Available: https://ieeexplore.ieee.org/abstract/document/9875264
W. Ibrar et al., "Generative AI: a double-edged sword in the cyber threat landscape," Artificial Intelligence Review, vol. 58, no. 9, p. 285, 2025. Available: https://link.springer.com/article/10.1007/s10462-025-11285-9
Downloads
Published
How to Cite
Issue
Section
License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
All papers should be submitted electronically. All submitted manuscripts must be original work that is not under submission at another journal or under consideration for publication in another form, such as a monograph or chapter of a book. Authors of submitted papers are obligated not to submit their paper for publication elsewhere until an editorial decision is rendered on their submission. Further, authors of accepted papers are prohibited from publishing the results in other publications that appear before the paper is published in the Journal unless they receive approval for doing so from the Editor-In-Chief.
IJISAE open access articles are licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. This license lets the audience to give appropriate credit, provide a link to the license, and indicate if changes were made and if they remix, transform, or build upon the material, they must distribute contributions under the same license as the original.
