Open Access

Autonomous Threat Remediation in Localized AI Environments: A Review of Security-as-Code Execution Models

https://doi.org/10.55640/ijaair-v03i06-01

PDF

Myroslav Mishov ¹ ,

⁴ Founder, TECH EVOLVERS INC Round Rock, TX, USA

Abstract

This article examines approaches to autonomous remediation of cyber threats in the context of the development of distributed computing environments, increasing infrastructure complexity, and growing requirements for data sovereignty. The study is conducted as a systematic review and analytical synthesis of scientific publications focused on threat detection methods, decision-making processes, execution of protective measures, and security architectures. Particular attention is given to interpreting the gap between threat detection and remediation as a systemic effect arising from the separation of analytical and execution layers, as well as to analyzing the impact of cloud-centric and virtualized architectures on the speed and accuracy of implementing protective actions. It is established that isolated improvements in detection accuracy do not lead to risk reduction without integrating execution mechanisms into the computational environment. An original architectural model for autonomous threat remediation is proposed, based on localized AI environments, Kubernetes deployed on physical infrastructure, and the implementation of security policies as executable code. The results obtained make it possible to consider the resilience of a security system as a function of execution architecture, degree of localization, and level of integration of all components into a unified control loop. The article will be useful for researchers in cybersecurity and distributed systems, as well as for practitioners involved in designing sovereign and autonomous infrastructures.

Keywords

cybersecurity, autonomous threat remediation, artificial intelligence, Security-as-Code, localized computing environments, zero trust, data sovereignty

References

Afolalu, O., & Tsoeu, M. S. (2025). Artificial intelligence as the next frontier in cyber defense: Opportunities and risks. Electronics, 14(24), 4853. https://doi.org/10.3390/electronics14244853

Alevizos, L. (2025). Automated cybersecurity compliance and threat response using AI, blockchain and smart contracts. International Journal of Information Technology, 17, 767–781. https://doi.org/10.1007/s41870-024-02324-9

Alnfiai, M. M. (2025). AI-powered cyber resilience: A reinforcement learning approach for automated threat hunting in 5G networks. Journal of Wireless Communications and Networking, 2025, 68. https://doi.org/10.1186/s13638-025-02497-2

Alzakari, S. A., Aljebreen, M., Ahmad, N., et al. (2025). Explainable artificial intelligence-based cyber resilience in internet of things networks using hybrid deep learning with improved chimp optimization algorithm. Scientific Reports, 15, 33160. https://doi.org/10.1038/s41598-025-15146-x

Basic, E., & Giaretta, A. (2026). From vulnerabilities to remediation: A systematic literature review of LLMs in code security. arXiv. https://arxiv.org/abs/2412.15004

Brandão, P. R. (2025). Exploring the role of artificial intelligence in detecting advanced persistent threats. Computers, 14(7), 245. https://doi.org/10.3390/computers14070245

Coutinho, A. C., & Araújo, L. V. D. (2025). MICRA: A modular intelligent cybersecurity response architecture with machine learning integration. Journal of Cybersecurity and Privacy, 5(3), 60. https://doi.org/10.3390/jcp5030060

Hu, Y., Li, Z., Shu, K., Guan, S., Zou, D., Xu, S., Yuan, B., & Jin, H. (2025). SoK: Automated vulnerability repair: Methods, tools, and assessments. arXiv. https://arxiv.org/abs/2506.11697

Ismail, K., Kurnia, R., Brata, Z. A., Nelistiani, G. A., Heo, S., Kim, H., & Kim, H. (2025). Toward robust security orchestration and automated response in security operations centers with a hyper-automation approach using agentic artificial intelligence. Information, 16(5), 365. https://doi.org/10.3390/info16050365

Khan, H. U., Khan, R. A., Alwageed, H. S., et al. (2025). AI-driven cybersecurity framework for software development based on the ANN-ISM paradigm. Scientific Reports, 15, 13423. https://doi.org/10.1038/s41598-025-97204-y

Liu, Z., Ma, Y., Xu, J., Ai, J., Gao, X., Sun, H., & Roychoudhury, A. (2025). Agent that debugs: Dynamic state-guided vulnerability repair. arXiv. https://arxiv.org/abs/2504.07634

Mohamed, N. (2025). Artificial intelligence and machine learning in cybersecurity: A deep dive into state-of-the-art techniques and future paradigms. Knowledge and Information Systems, 67, 6969–7055. https://doi.org/10.1007/s10115-025-02429-y

Nong, Y., Yang, H., Cheng, L., Hu, H., & Cai, H. (2024). Automated software vulnerability patching using large language models. arXiv. https://arxiv.org/abs/2408.13597

Pitkar, H. (2025). Cloud security automation through symmetry: Threat detection and response. Symmetry, 17(6), 859. https://doi.org/10.3390/sym17060859

Salem, A. H., Azzam, S. M., Emam, O. E., et al. (2024). Advancing cybersecurity: A comprehensive review of AI-driven detection techniques. Journal of Big Data, 11, 105. https://doi.org/10.1186/s40537-024-00957-y

Most read articles by the same author(s)

1 2 3 4 5 6 7 8 > >>

International Journal of Advanced Artificial Intelligence Research

Autonomous Threat Remediation in Localized AI Environments: A Review of Security-as-Code Execution Models

Abstract

Keywords

References

Most read articles by the same author(s)

Similar Articles