ARTIFICIAL INTELLIGENCE–ENHANCED CYBERSECURITY FRAMEWORKS FOR REAL-TIME THREAT DETECTION IN CLOUD AND ENTERPRISE

Real-time threat detection in cloud and enterprise settings remains constrained by high alert noise, data drift, and limited analyst capacity; organizations need evidence on whether deeper AI integration improves detection timeliness and operational quality. This study’s purpose is to quantify the association between AI-enhanced cybersecurity frameworks and measurable outcomes under routine operations. We adopt a quantitative, cross-sectional, case-based design spanning 18 heterogeneous deployments across cloud-first, hybrid, and on-premises environments. The sample consists of cloud and enterprise cases that meet inclusion criteria for active SOCs, centralized logging, and at least one AI-driven detection or orchestration component. Following a targeted review of 100 peer-reviewed papers to ground constructs and measures, we operationalize an AI Integration Index and model its relationship to key variables detection latency, precision, recall, F1, false-positive rate, and mean time to respond using a pre-registered analysis plan: descriptive profiling, correlation screening with multiple-comparison control, robust OLS and median quantile regression for continuous outcomes, beta or fractional logit models for rates, interaction tests with cloud maturity, influence diagnostics, leave-one-case-out validation, and bootstrap intervals. Headline findings show that higher integration aligns with materially shorter detection latency and MTTR, higher precision and F1, and lower false-positive rates, with effects strongest in mature cloud contexts where control-plane observability and API-mediated enforcement are pervasive. Implications for practice are to treat AI as a system capability spanning fusion across telemetry, model freshness with analyst feedback, drift monitoring, and graded, reversible SOAR automation that links detection confidence to proportionate action, thereby reducing dwell time without sacrificing oversight.

Authors

Institutions

Publication Details

Published
2025-01-01
DOI
https://doi.org/10.63125/yq1gp452
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

ARTIFICIAL INTELLIGENCE–ENHANCED CYBERSECURITY FRAMEWORKS FOR REAL-TIME THREAT DETECTION IN CLOUD AND ENTERPRISE

Subrata Biswas
Network Security and Intrusion Detection
article

ARTIFICIAL INTELLIGENCE–ENHANCED CYBERSECURITY FRAMEWORKS FOR REAL-TIME THREAT DETECTION IN CLOUD AND ENTERPRISE

Subrata Biswas
article en

Abstract

Real-time threat detection in cloud and enterprise settings remains constrained by high alert noise, data drift, and limited analyst capacity; organizations need evidence on whether deeper AI integration improves detection timeliness and operational quality. This study’s purpose is to quantify the association between AI-enhanced cybersecurity frameworks and measurable outcomes under routine operations. We adopt a quantitative, cross-sectional, case-based design spanning 18 heterogeneous deployments across cloud-first, hybrid, and on-premises environments. The sample consists of cloud and enterprise cases that meet inclusion criteria for active SOCs, centralized logging, and at least one AI-driven detection or orchestration component. Following a targeted review of 100 peer-reviewed papers to ground constructs and measures, we operationalize an AI Integration Index and model its relationship to key variables detection latency, precision, recall, F1, false-positive rate, and mean time to respond using a pre-registered analysis plan: descriptive profiling, correlation screening with multiple-comparison control, robust OLS and median quantile regression for continuous outcomes, beta or fractional logit models for rates, interaction tests with cloud maturity, influence diagnostics, leave-one-case-out validation, and bootstrap intervals. Headline findings show that higher integration aligns with materially shorter detection latency and MTTR, higher precision and F1, and lower false-positive rates, with effects strongest in mature cloud contexts where control-plane observability and API-mediated enforcement are pervasive. Implications for practice are to treat AI as a system capability spanning fusion across telemetry, model freshness with analyst feedback, drift monitoring, and graded, reversible SOAR automation that links detection confidence to proportionate action, thereby reducing dwell time without sacrificing oversight.

Vol. 01(01)
Troy University (US)
Openalex Percentile: Top 70%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.