AI-Driven Open Source Intelligence in Cyber Defense: A Double-edged Sword for National Security
Titilayo Modupe Kolade
*
Ministry of Foreign Affairs, Tafawa Balewa House, Central Business District, Abuja, Nigeria.
Onyinye Agatha Obioha-Val
Computer and Electrical Engineering Department, University of District of Columbia, 4200 Connecticut Avenue NW Washington DC 20008, United States of America.
Adebayo Yusuf Balogun
University of Tampa, 401 W Kennedy Blvd, Tampa, FL 33606, United States of America.
Michael Olayinka Gbadebo
University of the Cumberlands, 104 Maple Drive, Williamsburg, KY 40769, United States of America.
Oluwaseun Oladeji Olaniyi
University of the Cumberlands, 104 Maple Drive, Williamsburg, KY 40769, United States of America.
*Author to whom correspondence should be addressed.
Abstract
This study explores the dual implications of Artificial Intelligence (AI)-driven Open Source Intelligence (OSINT) in enhancing cyber defense capabilities. Using publicly available datasets, including IBM X-Force breach metrics, MITRE ATT&CK adversarial tactics, GDPR privacy violations, AI-driven phishing incidents, and case-specific data from the Colonial Pipeline ransomware attack and Russia-Ukraine conflict, the research employs multivariate regression, logistic regression, and K-Means clustering. The findings indicate that AI investments improve detection time (-0.68), accuracy (+2.09), and resolution rates (+1.55) with statistical significance (p < 0.001). However, risks associated with algorithmic opacity, weak regulatory frameworks, and reactive AI systems pose ethical and operational challenges. Clustering reveals variability in AI applications, with optimized systems achieving 95.2% detection rates and 5.5-hour response times. Recommendations include investing in scalable tools, strengthening regulations, fostering public-private collaborations, and enhancing reactive AI oversight. The results highlight AI’s transformative potential in cyber defense while emphasizing the need for ethical and regulatory alignment. Future directions include testing these models in diverse operational environments to validate effectiveness and exploring hybrid AI approaches to balance proactive and reactive capabilities, ensuring robust and adaptive defense mechanisms.
Keywords: AI-driven OSINT, Cyber defense, regulatory frameworks, reactive AI risks, K-Means clustering