Advancing the Threat Intelligence with AI: An Overview, Taxonomy and Roadmap

This paper presents a comprehensive analysis of the integration of artificial intelligence (AI) into threat intelligence (TI) systems, focusing on its potential to enhance cybersecurity operations. The paper presents an extensive literature review, covering the current state of AI applications in TI, including machine learning, deep learning, and natural language processing for automating threat detection, classification, and analysis. It outlines the core functions of AI in TI, such as threat detection, correlation, prediction, and automated response, and introduces a detailed taxonomy categorizing AI techniques based on their roles in enhancing TI processes. Additionally, the paper proposes a conceptual workflow for AI-powered TI, illustrating how AI can streamline data collection, threat analysis, and incident response. A roadmap for future research is further provided, highlighting key areas for development, including explainable AI, federated learning, and edge computing. This work contributes to the field by offering a structured framework for integrating AI into TI and identifying critical challenges and future directions in AI-driven cybersecurity.