Software Engineering Institute

This report examines the feasibility and usefulness of implementing artificial intelligence (AI) and machine learning (ML) in cyber defense with a particular focus on advanced persistent threats (APTs). In this report, we examine the current state of AI-enabled APT defense. We begin by describing the stages that an APT must go through to succeed. Next, we perform a commercial market analysis of APT defenses. We then perform a bibliometric analysis to map out the academic research landscape on APTs. We highlight the strengths and limitations of research on the use of AI for APT defense. Finally, we offer practical recommendations that will help organizations start incorporating AI into their layered APT defense strategies.