From what I've seen of attempts to apply AI to the cyber security domain, a big impediment tends to be the lack of cohesion between the AI experts and the domain experts. There's often decades of work on the domain of study, and it's important that you use this information to inform your algorithms/ML models. I once worked with some ML researchers on trying to apply machine learning to some netflow data we had. These researchers were quite good at their field, but didn't know much about netflow data analysis. I remember them being all excited in a meeting because their models found some pattern in the data. It turns out they had discovered the difference between high ports and low ports...