JUCS - Journal of Universal Computer Science 31(10): 1102-1129, doi: 10.3897/jucs.137544
Advancing the Threat Intelligence with AI: An Overview, Taxonomy and Roadmap
expand article infoIgor Tomičić, Petra Grd, Andrija Bernik§
‡ University of Zagreb, Varaždin, Croatia§ University North, Varaždin, Croatia
Open Access
Abstract
This paper presents a comprehensive analysis of the integration of artificial intelligence (AI) into threat intelligence (TI) systems, focusing on its potential to enhance cybersecurity operations. The paper presents an extensive literature review, covering the current state of AI applications in TI, including machine learning, deep learning, and natural language processing for automating threat detection, classification, and analysis. It outlines the core functions of AI in TI, such as threat detection, correlation, prediction, and automated response, and introduces a detailed taxonomy categorizing AI techniques based on their roles in enhancing TI processes. Additionally, the paper proposes a conceptual workflow for AI-powered TI, illustrating how AI can streamline data collection, threat analysis, and incident response. A roadmap for future research is further provided, highlighting key areas for development, including explainable AI, federated learning, and edge computing. This work contributes to the field by offering a structured framework for integrating AI into TI and identifying critical challenges and future directions in AI-driven cybersecurity.
Keywords
Artificial Intelligence, Cybersecurity, Threat Intelligence, Threat Detection, Incident Response, SOC
login to comment