There is no denying that the use of Information Technology (IT) is undergoing exponential growth in today's world. This digital transformation has also given rise to a multitude of security challenges, notably in the realm of cybercrime. In response to these growing threats, public and private sectors have prioritized the strengthening of IT security measures. In light of the growing security concern, Artificial Intelligence (AI) has gained prominence within the cybersecurity landscape. This paper presents a comprehensive survey of recent advancements in AI-driven threat response systems. To the best of our knowledge, the most recent survey covering the AI reaction domain was conducted in 2017. Since then, considerable literature has been published and therefore it is worth reviewing it. By means of several shared features, each of the studies is compared on a common ground. Through an analysis of the research papers conducted on a standardized basis, this survey aims to unravel the complexities and opportunities of integrating AI into cyber defense. The conclusions drawn from this collective analysis provide a comprehensive snapshot of the evolving landscape at the intersection of AI and cybersecurity. This landscape underscores the growing significance of not only anticipating and detecting threats but also responding to them effectively. Additionally, from these reviews, various research challenges for the future are presented. These challenges serve as a roadmap for researchers and practitioners in the field of AI-integrated reactive strategies.
翻译:不可否认,信息技术(IT)在当今世界的应用正经历指数级增长。这种数字化转型也引发了一系列安全挑战,尤其在网络犯罪领域尤为突出。为应对这些日益增长的威胁,公共与私营部门已将加强IT安全措施列为优先事项。鉴于安全问题的日益突出,人工智能(AI)在网络安全领域的重要性日益凸显。本文对AI驱动型威胁响应系统的最新进展进行了全面综述。据我们所知,涵盖AI响应领域的最新综述发表于2017年。自此之后,大量文献得以发表,因此对其进行系统回顾具有重要价值。通过若干共同特征的比对,各项研究在统一框架下进行比较。基于标准化研究论文分析,本综述旨在揭示AI融入网络防御的复杂性与机遇。从综合分析得出的结论,为AI与网络安全交叉领域的动态发展提供了全景概览,彰显了不仅需要预测和检测威胁,更要有效应对威胁的日益重要性。此外,本文基于这些综述提出了未来研究面临的诸多挑战,这些挑战为从事AI集成响应策略研究的学者和实践者提供了路线图。