赋能防御者：人工智能在网络安全中的应用

W H I T EP A P E R Contents Foreword Executive summary Introduction 1.1 AI-driven cyber governance8 1.2 AI-enabled risk identification9 1.3 AI-augmented cyber protection11 1.6 AI-supported incident recovery20 2 Important considerations for AI adoption in cybersecurity21 2.1 How does the adoption of AI for cybersecurity align withand accelerate strategic priorities? 2.2 Is the organization ready to deploy AI in cybersecurityeffectively?22 2.3 How can the organization validate AI solutions beforefull deployment?24 2.4 How best to scale and maintain AI solutions while ensuringcontinuous optimization?25 3 The evolving landscape of AI in cybersecurity26 3.1 The opportunity of agentic AI26 3.2 Unpacking the spectrum of AI autonomy26 Conclusion Contributors Endnotes Disclaimer This document is published by the World EconomicForum as a contribution to a project, insight areaor interaction. The findings, interpretations andconclusions expressed herein are a result of acollaborative process facilitated and endorsed by ©2026 World Economic Forum. All rights reserved.No part of this publication may be reproduced ortransmitted in any form or by any means, includingphotocopying and recording, or by any informationstorage and retrieval system. Foreword Akshay JoshiHead of the Centre forCybersecurity; Member of Laurent GobbiPartner, Global Head ofCyber & Tech Risk, KPMG With the advent of the Intelligent Age, artificialintelligence (AI) and cybersecurity have becomeinextricably linked. In 2025, the World EconomicForum publishedArtificial Intelligence andCybersecurity: Balancing Risks and Rewards,which highlighted the inherent cybersecurity Success will depend on key foundational elements,including strong executive support, high-quality data, a skilled workforce and integratedinfrastructure. As automation becomes increasingly Developed by the World Economic Forum’s CyberFrontiers initiative in collaboration with KPMG, thispaper brings together contributions from leadingexperts in cybersecurity and AI. Through a seriesof workshops, these leaders shared insights intohow AI can be harnessed effectively to enhance This white paper examines the application of AItechnologies across the cybersecurity life cycle,drawing on real-world examples from WorldEconomic Forum partner organizations. It outlinesthe strategic considerations and practical steps that Executive summary While AI can enhance cyberdefences, its effectiveness relies onhaving a clear strategy grounded in Artificial intelligence (AI) is reshaping thecybersecurity landscape. Attackers are increasinglyusing AI to increase the speed, scale andsophistication of threats. To address these evolvingrisks, cybersecurity must keep pace with thegrowing speed and sophistication of modern Executive and cyber leaders embarking on the AIadoption journey for cyber defence should therefore: –Align the adoption of AI in cybersecurity withorganizational strategic priorities –Establish organizational readiness acrossprocesses, data, infrastructure, skills and –Validate AI solutions through structured pilotsprior to full deployment This paper focuses on the use of AI by defenders,thereby providing actionable guidance to –Scale and monitor the performance of AI incybersecurity and optimize as needed With the right approach in place, organizations canharness AI technologies to strengthen defencestoday, while building the agility to keep pace with Real-world applications of AI in cybersecurity,illustrated through case studies submitted byWorld Economic Forum partners, demonstrate,for example, the use of AI to improve vulnerabilitydetection, curate threat intelligence data andenhance defences against phishing and other Introduction The deployment of AI in cybersecurityis accelerating, although the pace and AI is no longer a peripheral innovation; it is redefiningcybersecurity by enabling advanced defencecapabilities, creating new requirements to secureAI-driven systems and amplifying the tools availableto adversaries. In fact, its strategic importance isreflected in the findings of theGlobal Cybersecurity breach costs by $1.9 million.3More broadly, AIhelps address the structural challenges faced bycybersecurity, including the rising volume andsophistication of attacks, persistent talent shortages Yet progress on the defensive side is unfoldingin parallel with a rapidly evolving threatenvironment, where adversaries are increasinglyoperating at machine speed, using AI to conductreconnaissance of targets and vulnerabilities,generate malware, exploit code, evade detection While 77% of organizations report using AIin cybersecurity, deployment is closely tiedto organizational size and resources.1Largercompanies, supported by greater technical maturityand investment capacity, report higher adoptionrates, whereas smaller entities, governments and Against this backdrop, AI has become a coreenabler of modern cybersecurity. Its value liesnot just in automati