Spy Vs. AI
U.S. Diplomacy
Since its starting in 1922, Foreign Affairs has actually been the leading online forum for major discussion of American diplomacy and global affairs. The magazine has included contributions from numerous leading global affairs experts.
More Resources
- Feedback
- Institutional Subscriptions
- Gift a Membership
- About Us
- Events
- Issue Archive
- Advertise
- Audio Content
- Account Management
- FAQs
Spy vs. AI
ANNE NEUBERGER is Deputy Assistant to the President and Deputy National Security Adviser for Cyber and Emerging Technology on the U.S. National Security Council. From 2009 to 2021, she served in senior operational functions in intelligence and cybersecurity at the National Security Agency, including as its very first Chief Risk Officer.
- More by Anne Neuberger
Spy vs. AI
How Artificial Intelligence Will Remake Espionage
Anne Neuberger
-.
Copy Link Copied.
Article link: https://www.foreignaffairs.com/united-states/spy-vs-aihttps://www.[foreignaffairs](https://www.ossendorf.de).com/united-states/spy-vs-[ai](https://theboxinggazette.com).
Copy
Gift Link Copied.
This is a subscriber-only feature. Subscribe now or Check in.
Create Citation Copied.
Chicago MLA APSA APA.
Chicago Cite not available at the moment.
MLA Cite not available at the moment.
APSA Cite not available at the minute.
APA Cite not available at the minute
Download PDF.
This is a subscriber-only function. Subscribe now or Check in.
Request Reprint.
Request reprint approvals here.
In the early 1950s, the United States dealt with a crucial intelligence challenge in its burgeoning competitors with the Soviet Union. Outdated German reconnaissance pictures from The second world war could no longer provide adequate intelligence about Soviet military capabilities, and existing U.S. surveillance capabilities were no longer able to permeate the Soviet Union's closed airspace. This shortage spurred an adventurous moonshot initiative: the advancement of the U-2 reconnaissance aircraft. In only a few years, U-2 objectives were providing crucial intelligence, recording pictures of Soviet missile installations in Cuba and bringing near-real-time insights from behind the Iron Curtain to the Oval Office.
Today, the United States stands at a similar point. Competition between Washington and its rivals over the future of the worldwide order is magnifying, and now, much as in the early 1950s, the United States need to benefit from its world-class economic sector and adequate capability for innovation to outcompete its adversaries. The U.S. intelligence neighborhood need to harness the nation's sources of strength to deliver insights to policymakers at the speed of today's world. The integration of synthetic intelligence, particularly through big language designs, uses groundbreaking opportunities to improve intelligence operations and analysis, allowing the delivery of faster and more appropriate support to decisionmakers. This technological revolution drawbacks, however, specifically as enemies make use of comparable improvements to reveal and counter U.S. intelligence operations. With an AI race underway, the United States must challenge itself to be first-first to gain from AI, first to secure itself from opponents who may utilize the innovation for ill, and first to utilize AI in line with the laws and values of a democracy.
For the U.S. national security neighborhood, fulfilling the guarantee and handling the peril of AI will need deep technological and cultural changes and a determination to alter the way agencies work. The U.S. intelligence and military neighborhoods can harness the capacity of AI while alleviating its inherent dangers, guaranteeing that the United States maintains its competitive edge in a quickly progressing worldwide landscape. Even as it does so, the United States should transparently convey to the American public, and to populations and partners around the globe, how the country means to fairly and securely use AI, in compliance with its laws and values.
MORE, BETTER, FASTER
AI's potential to revolutionize the intelligence community lies in its ability to process and evaluate vast amounts of data at unprecedented speeds. It can be challenging to analyze large quantities of collected data to generate time-sensitive warnings. U.S. intelligence services could leverage AI systems' pattern recognition capabilities to identify and alert human experts to potential hazards, such as missile launches or military movements, or essential global developments that analysts know senior U.S. decisionmakers have an interest in. This capability would ensure that crucial warnings are prompt, actionable, and relevant, enabling more reliable reactions to both rapidly emerging dangers and emerging policy chances. Multimodal models, which incorporate text, images, and audio, boost this analysis. For example, utilizing AI to cross-reference satellite images with signals intelligence could offer a detailed view of military movements, making it possible for quicker and more accurate risk evaluations and potentially new means of delivering details to policymakers.
Intelligence analysts can also offload repetitive and time-consuming jobs to devices to focus on the most satisfying work: producing initial and much deeper analysis, increasing the intelligence community's overall insights and efficiency. An excellent example of this is foreign language translation. U.S. intelligence agencies invested early in AI-powered abilities, and the bet has paid off. The abilities of language models have grown progressively advanced and accurate-OpenAI's recently released o1 and wiki.whenparked.com o3 designs demonstrated considerable development in precision and thinking ability-and can be utilized to even more rapidly translate and summarize text, audio, and video files.
Although challenges remain, future systems trained on higher amounts of non-English data might be efficient in discerning subtle differences in between dialects and comprehending the significance and cultural context of slang or Internet memes. By depending on these tools, the intelligence community could concentrate on training a cadre of extremely specialized linguists, who can be tough to discover, often battle to get through the clearance process, and take a very long time to train. And obviously, by making more foreign language materials available across the right agencies, U.S. intelligence services would have the ability to more rapidly triage the mountain of foreign intelligence they receive to choose the needles in the haystack that actually matter.
The worth of such speed to policymakers can not be undervalued. Models can quickly sort through intelligence information sets, open-source details, and standard human intelligence and produce draft summaries or preliminary analytical reports that analysts can then confirm and fine-tune, ensuring the last products are both detailed and accurate. Analysts could team up with an innovative AI assistant to overcome analytical issues, test concepts, and brainstorm in a collective fashion, enhancing each version of their analyses and delivering completed intelligence quicker.
Consider Israel's experience in January 2018, when its intelligence service, the Mossad, covertly got into a secret Iranian center and stole about 20 percent of the archives that detailed Iran's nuclear activities in between 1999 and 2003. According to Israeli officials, the Mossad gathered some 55,000 pages of documents and a more 55,000 files kept on CDs, including images and videos-nearly all in Farsi. Once the archive was obtained, senior authorities put immense pressure on intelligence specialists to produce detailed evaluations of its material and whether it pointed to an ongoing effort to construct an Iranian bomb. But it took these experts numerous months-and hundreds of hours of labor-to translate each page, examine it by hand for appropriate content, and integrate that details into assessments. With today's AI capabilities, the first 2 actions in that procedure could have been achieved within days, possibly even hours, permitting analysts to comprehend and contextualize the intelligence rapidly.
One of the most interesting applications is the method AI could change how intelligence is taken in by policymakers, enabling them to connect straight with intelligence reports through ChatGPT-like platforms. Such abilities would permit users to ask particular concerns and get summarized, pertinent details from countless reports with source citations, assisting them make informed choices rapidly.
BRAVE NEW WORLD
Although AI offers various benefits, it also poses considerable brand-new risks, especially as adversaries develop comparable innovations. China's advancements in AI, especially in computer system vision and monitoring, threaten U.S. intelligence operations. Because the nation is ruled by an authoritarian regime, it lacks personal privacy constraints and civil liberty securities. That deficit allows large-scale data collection practices that have actually yielded data sets of tremendous size. Government-sanctioned AI designs are trained on huge quantities of personal and behavioral information that can then be used for different purposes, such as security and social control. The existence of Chinese business, such as Huawei, in telecommunications systems and software application all over the world might supply China with all set access to bulk information, notably bulk images that can be used to train facial recognition designs, a specific issue in nations with big U.S. military bases. The U.S. nationwide security community need to think about how Chinese models developed on such extensive information sets can give China a strategic benefit.
And it is not simply China. The proliferation of "open source" AI designs, such as Meta's Llama and those developed by the French company Mistral AI and the Chinese business DeepSeek, is putting powerful AI abilities into the hands of users around the world at fairly budget friendly costs. A lot of these users are benign, but some are not-including authoritarian programs, cyber-hackers, and criminal gangs. These malign actors are using big language models to rapidly generate and spread out incorrect and malicious material or to carry out cyberattacks. As seen with other intelligence-related technologies, such as signals obstruct abilities and unmanned drones, China, Iran, and Russia will have every reward to share some of their AI breakthroughs with customer states and subnational groups, such as Hezbollah, Hamas, and the Wagner paramilitary business, consequently increasing the danger to the United States and its allies.
The U.S. military and intelligence community's AI models will become attractive targets for foes. As they grow more effective and main to U.S. nationwide security decision-making, intelligence AIs will become crucial nationwide possessions that need to be protected against adversaries looking for to jeopardize or control them. The intelligence neighborhood must purchase developing safe and secure AI models and in developing standards for "red teaming" and continuous assessment to secure against possible threats. These teams can utilize AI to mimic attacks, discovering potential weaknesses and establishing techniques to alleviate them. Proactive steps, consisting of partnership with allies on and investment in counter-AI technologies, will be important.
THE NEW NORMAL
These obstacles can not be wished away. Waiting too wish for AI innovations to fully mature carries its own dangers; U.S. intelligence capacities will fall back those of China, Russia, and other powers that are going complete steam ahead in developing AI. To guarantee that intelligence-whether time-sensitive cautions or longer-term strategic insight-continues to be a benefit for the United States and its allies, the country's intelligence community needs to adapt and innovate. The intelligence services should rapidly master the use of AI innovations and make AI a fundamental element in their work. This is the only sure way to ensure that future U.S. presidents receive the very best possible intelligence assistance, remain ahead of their enemies, and protect the United States' delicate abilities and operations. Implementing these changes will require a cultural shift within the intelligence community. Today, intelligence experts mainly construct items from raw intelligence and information, with some assistance from existing AI models for voice and imagery analysis. Moving on, intelligence officials should check out consisting of a hybrid technique, in line with existing laws, utilizing AI models trained on unclassified commercially available information and refined with categorized details. This amalgam of technology and conventional intelligence gathering could lead to an AI entity supplying instructions to imagery, signals, open source, and measurement systems on the basis of an integrated view of regular and anomalous activity, automated imagery analysis, and automated voice translation.
To speed up the transition, intelligence leaders must champion the advantages of AI combination, stressing the enhanced capabilities and effectiveness it offers. The cadre of recently appointed chief AI officers has been established in U.S. intelligence and defense to act as leads within their companies for promoting AI innovation and getting rid of barriers to the technology's execution. Pilot jobs and early wins can construct momentum and self-confidence in AI's abilities, encouraging wider adoption. These officers can utilize the competence of nationwide labs and other partners to evaluate and refine AI designs, guaranteeing their efficiency and security. To institutionalise modification, leaders must develop other organizational rewards, consisting of promos and training opportunities, to reward inventive approaches and those workers and units that show efficient usage of AI.
The White House has actually developed the policy needed for using AI in national security companies. President Joe Biden's 2023 executive order concerning safe, safe, and credible AI detailed the guidance required to fairly and safely utilize the innovation, and National Security Memorandum 25, provided in October 2024, is the nation's fundamental technique for utilizing the power and managing the dangers of AI to advance nationwide security. Now, Congress will need to do its part. Appropriations are needed for departments and firms to produce the facilities needed for innovation and experimentation, conduct and scale pilot activities and assessments, and continue to buy evaluation capabilities to make sure that the United States is constructing trustworthy and high-performing AI innovations.
Intelligence and military neighborhoods are devoted to keeping human beings at the heart of AI-assisted decision-making and have created the frameworks and tools to do so. Agencies will require standards for how their analysts must utilize AI models to make certain that intelligence products meet the intelligence neighborhood's requirements for dependability. The government will likewise require to maintain clear guidance for handling the data of U.S. residents when it pertains to the training and use of large language models. It will be crucial to stabilize the usage of emerging technologies with safeguarding the personal privacy and civil liberties of people. This suggests augmenting oversight mechanisms, updating pertinent frameworks to reflect the capabilities and dangers of AI, and fostering a culture of AI advancement within the nationwide security apparatus that utilizes the potential of the innovation while protecting the rights and liberties that are fundamental to American society.
Unlike the 1950s, when U.S. intelligence raced to the forefront of overhead and satellite images by developing numerous of the key technologies itself, winning the AI race will need that neighborhood to reimagine how it partners with private market. The personal sector, which is the main means through which the federal government can realize AI development at scale, is investing billions of dollars in AI-related research study, information centers, and computing power. Given those business' improvements, intelligence agencies need to prioritize leveraging commercially available AI models and improving them with classified information. This method allows the intelligence community to quickly expand its capabilities without needing to start from scratch, allowing it to remain competitive with adversaries. A recent cooperation between NASA and IBM to develop the world's biggest geospatial foundation model-and the subsequent release of the model to the AI community as an open-source project-is an excellent presentation of how this kind of public-private partnership can operate in practice.
As the national security community integrates AI into its work, it should make sure the security and resilience of its models. Establishing standards to deploy generative AI safely is important for maintaining the integrity of AI-driven intelligence operations. This is a core focus of the National Security Agency's brand-new AI Security Center and its cooperation with the Department of Commerce's AI Safety Institute.
As the United States faces growing rivalry to shape the future of the global order, it is urgent that its intelligence agencies and military capitalize on the country's innovation and leadership in AI, focusing particularly on big language models, to offer faster and more pertinent details to policymakers. Only then will they gain the speed, breadth, and depth of insight required to browse a more intricate, competitive, and content-rich world.