Spy Vs. AI

U.S. Diplomacy


Since its founding in 1922, Foreign Affairs has actually been the leading forum for serious conversation of American foreign policy and global affairs. The publication has included contributions from numerous leading international affairs specialists.


More Resources


- Feedback

- Institutional Subscriptions

- Gift a Subscription

- About Us

- Events

- Issue Archive

- Advertise

- Audio Content

- Account Management

- FAQs


Spy vs. AI


ANNE NEUBERGER is Deputy Assistant to the President and Deputy National Security Adviser for Cyber and Emerging Technology on the U.S. National Security Council. From 2009 to 2021, she served in senior functional functions in intelligence and cybersecurity at the National Security Agency, consisting of as its first Chief Risk Officer.


- More by Anne Neuberger


Spy vs. AI


How Artificial Intelligence Will Remake Espionage


Anne Neuberger


-.

Copy Link Copied.
Article link: https://www.foreignaffairs.com/united-states/spy-vs-aihttps://www.foreignaffairs.com/united-states/spy-vs-ai.
Copy



Gift Link Copied.
This is a subscriber-only function. Subscribe now or Check in.



Create Citation Copied.
Chicago MLA APSA APA.
Chicago Cite not available at the minute.
MLA Cite not available at the moment.
APSA Cite not available at the minute.
APA Cite not available at the minute



Download PDF.
This is a subscriber-only function. Subscribe now or Sign in.



Request Reprint.
Request reprint approvals here.






In the early 1950s, the United States faced a critical intelligence difficulty in its growing competitors with the Soviet Union. Outdated German reconnaissance pictures from The second world war could no longer offer enough intelligence about Soviet military abilities, and existing U.S. monitoring capabilities were no longer able to permeate the Soviet Union's closed airspace. This shortage stimulated an adventurous moonshot initiative: the development of the U-2 reconnaissance aircraft. In only a few years, U-2 missions were providing essential intelligence, recording pictures of Soviet rocket setups in Cuba and bringing near-real-time insights from behind the Iron Curtain to the Oval Office.


Today, the United States stands at a similar juncture. Competition between Washington and its rivals over the future of the worldwide order is intensifying, and now, much as in the early 1950s, the United States need to benefit from its world-class private sector and adequate capacity for innovation to outcompete its adversaries. The U.S. intelligence community should harness the country's sources of strength to provide insights to policymakers at the speed these days's world. The combination of expert system, especially through big language models, uses groundbreaking chances to enhance intelligence operations and analysis, enabling the delivery of faster and more appropriate assistance to decisionmakers. This technological revolution includes significant disadvantages, nevertheless, especially as enemies make use of comparable developments to uncover and counter U.S. intelligence operations. With an AI race underway, the United States must challenge itself to be first-first to gain from AI, first to safeguard itself from opponents who might use the innovation for ill, and first to utilize AI in line with the laws and values of a democracy.


For the U.S. national security community, satisfying the guarantee and handling the danger of AI will need deep technological and cultural changes and a willingness to alter the way companies work. The U.S. intelligence and military communities can harness the capacity of AI while mitigating its intrinsic dangers, making sure that the United States maintains its competitive edge in a rapidly progressing worldwide landscape. Even as it does so, the United States must transparently convey to the American public, and to populations and partners around the globe, how the country plans to fairly and securely utilize AI, in compliance with its laws and worths.


MORE, BETTER, FASTER


AI's potential to change the intelligence neighborhood lies in its capability to procedure and examine vast amounts of data at unprecedented speeds. It can be challenging to evaluate big quantities of collected information to generate time-sensitive cautions. U.S. intelligence services could take advantage of AI systems' pattern recognition capabilities to identify and alert human experts to potential hazards, such as missile launches or military motions, or important worldwide developments that experts understand senior U.S. decisionmakers have an interest in. This ability would make sure that critical cautions are timely, actionable, and appropriate, permitting more effective responses to both rapidly emerging dangers and emerging policy opportunities. Multimodal models, which incorporate text, images, and audio, enhance this analysis. For users.atw.hu example, utilizing AI to cross-reference satellite imagery with signals intelligence could provide a detailed view of military movements, making it possible for much faster and more precise risk evaluations and possibly new ways of delivering details to policymakers.


Intelligence experts can likewise unload recurring and lengthy jobs to devices to focus on the most fulfilling work: generating original and deeper analysis, increasing the intelligence community's overall insights and productivity. A fine example of this is foreign language translation. U.S. intelligence companies invested early in AI-powered abilities, and the bet has actually paid off. The abilities of language models have actually grown progressively advanced and accurate-OpenAI's just recently launched o1 and o3 designs demonstrated significant development in precision and reasoning ability-and can be used to much more rapidly equate and sum up text, audio, and video files.


Although obstacles remain, future systems trained on greater quantities of non-English information might be capable of discerning subtle differences in between dialects and understanding the significance and cultural context of slang or Internet memes. By relying on these tools, the intelligence community could focus on training a cadre of highly specialized linguists, who can be hard to discover, often struggle to get through the clearance process, and take a long time to train. And naturally, by making more foreign language materials available throughout the best agencies, U.S. intelligence services would have the ability to quicker triage the mountain of foreign intelligence they get to choose out the needles in the haystack that actually matter.


The value of such speed to policymakers can not be undervalued. Models can swiftly sort through intelligence data sets, open-source details, and traditional human intelligence and produce draft summaries or initial analytical reports that experts can then verify and improve, guaranteeing the end products are both detailed and precise. Analysts could team up with an advanced AI assistant to overcome analytical issues, test ideas, and brainstorm in a collective style, improving each iteration of their analyses and providing ended up intelligence more rapidly.


Consider Israel's experience in January 2018, when its intelligence service, the Mossad, covertly burglarized a secret Iranian facility and took about 20 percent of the archives that detailed Iran's nuclear activities between 1999 and 2003. According to Israeli authorities, the Mossad gathered some 55,000 pages of documents and an additional 55,000 files stored on CDs, including images and videos-nearly all in Farsi. Once the archive was obtained, senior officials put tremendous pressure on intelligence experts to produce detailed evaluations of its content and whether it pointed to an ongoing effort to develop an Iranian bomb. But it took these specialists several months-and hundreds of hours of labor-to translate each page, examine it by hand for appropriate content, and incorporate that details into evaluations. With today's AI abilities, the very first 2 actions in that procedure could have been achieved within days, maybe even hours, permitting analysts to comprehend and contextualize the intelligence rapidly.


Among the most interesting applications is the way AI might transform how intelligence is consumed by policymakers, allowing them to communicate straight with intelligence reports through ChatGPT-like platforms. Such abilities would permit users to ask specific questions and get summed up, pertinent details from countless reports with source citations, assisting them make informed decisions rapidly.


BRAVE NEW WORLD


Although AI offers various benefits, it also postures significant new risks, particularly as foes establish similar technologies. China's developments in AI, especially in computer system vision and surveillance, threaten U.S. intelligence operations. Because the nation is ruled by an authoritarian routine, it does not have privacy constraints and civil liberty defenses. That deficit makes it possible for massive information collection practices that have actually yielded information sets of immense size. Government-sanctioned AI designs are trained on huge quantities of individual and behavioral information that can then be utilized for various functions, such as security and social control. The presence of Chinese companies, such as Huawei, in telecommunications systems and software application worldwide might supply China with prepared access to bulk information, setiathome.berkeley.edu especially bulk images that can be utilized to train facial acknowledgment designs, a particular concern in countries with big U.S. military bases. The U.S. nationwide security neighborhood must think about how Chinese models constructed on such comprehensive information sets can give China a strategic benefit.


And it is not simply China. The expansion of "open source" AI models, such as Meta's Llama and those produced by the French company Mistral AI and the Chinese company DeepSeek, is putting effective AI capabilities into the hands of users throughout the world at fairly economical expenses. Many of these users are benign, but some are not-including authoritarian regimes, cyber-hackers, and criminal gangs. These malign stars are utilizing big language designs to quickly generate and spread incorrect and destructive content or to conduct cyberattacks. As experienced with other intelligence-related technologies, such as signals intercept abilities and unmanned drones, China, Iran, and Russia will have every incentive to share some of their AI developments with client states and subnational groups, such as Hezbollah, Hamas, and the Wagner paramilitary business, thereby increasing the threat to the United States and its allies.


The U.S. military and intelligence neighborhood's AI designs will become attractive targets for enemies. As they grow more powerful and main to U.S. nationwide security decision-making, intelligence AIs will become vital national assets that need to be protected against enemies seeking to compromise or manipulate them. The intelligence neighborhood must buy developing safe AI models and in developing standards for "red teaming" and continuous assessment to safeguard against possible hazards. These groups can utilize AI to imitate attacks, uncovering prospective weaknesses and establishing strategies to alleviate them. Proactive steps, consisting of collaboration with allies on and investment in counter-AI technologies, will be vital.


THE NEW NORMAL


These obstacles can not be wanted away. Waiting too wish for AI innovations to completely mature carries its own threats; U.S. intelligence capacities will fall behind those of China, Russia, and other powers that are going full steam ahead in developing AI. To guarantee that intelligence-whether time-sensitive warnings or longer-term strategic insight-continues to be a benefit for the United States and its allies, the nation's intelligence neighborhood requires to adjust and innovate. The intelligence services should rapidly master the use of AI technologies and make AI a foundational component in their work. This is the only sure way to ensure that future U.S. presidents get the best possible intelligence support, remain ahead of their adversaries, and protect the United States' delicate abilities and operations. Implementing these changes will need a cultural shift within the intelligence community. Today, intelligence experts mainly build products from raw intelligence and data, with some assistance from existing AI designs for voice and images analysis. Moving on, intelligence authorities must explore consisting of a hybrid technique, in line with existing laws, using AI designs trained on available information and improved with categorized details. This amalgam of technology and conventional intelligence event might lead to an AI entity supplying instructions to imagery, signals, open source, and measurement systems on the basis of an incorporated view of normal and anomalous activity, automated imagery analysis, and automated voice translation.


To speed up the transition, intelligence leaders need to promote the advantages of AI integration, emphasizing the improved abilities and efficiency it uses. The cadre of newly selected chief AI officers has actually been developed in U.S. intelligence and defense to serve as leads within their agencies for promoting AI development and getting rid of barriers to the technology's application. Pilot projects and early wins can build momentum and confidence in AI's abilities, motivating broader adoption. These officers can leverage the knowledge of national laboratories and other partners to check and fine-tune AI models, ensuring their effectiveness and security. To institutionalize change, leaders must develop other organizational incentives, consisting of promotions and training opportunities, to reward inventive approaches and those employees and units that show efficient usage of AI.


The White House has actually developed the policy required for the use of AI in nationwide security companies. President Joe Biden's 2023 executive order relating to safe, safe and secure, and trustworthy AI detailed the guidance required to fairly and safely utilize the technology, and National Security Memorandum 25, provided in October 2024, is the nation's fundamental technique for utilizing the power and handling the dangers of AI to advance national security. Now, Congress will require to do its part. Appropriations are needed for departments and agencies to create the facilities needed for development and experimentation, conduct and scale pilot activities and evaluations, and continue to invest in assessment abilities to guarantee that the United States is building dependable and high-performing AI innovations.


Intelligence and military neighborhoods are dedicated to keeping humans at the heart of AI-assisted decision-making and have developed the frameworks and tools to do so. Agencies will require guidelines for how their experts need to use AI designs to make certain that intelligence items satisfy the intelligence community's standards for reliability. The government will likewise require to maintain clear assistance for managing the information of U.S. citizens when it pertains to the training and usage of large language designs. It will be very important to stabilize the usage of emerging innovations with securing the personal privacy and civil liberties of citizens. This indicates enhancing oversight mechanisms, updating relevant frameworks to show the abilities and dangers of AI, and fostering a culture of AI advancement within the national security apparatus that utilizes the potential of the innovation while securing the rights and flexibilities that are fundamental to American society.


Unlike the 1950s, when U.S. intelligence raced to the forefront of overhead and satellite images by establishing much of the essential innovations itself, winning the AI race will require that community to reimagine how it partners with personal industry. The economic sector, which is the main means through which the government can recognize AI development at scale, is investing billions of dollars in AI-related research study, data centers, and calculating power. Given those business' developments, intelligence companies should prioritize leveraging commercially available AI models and fine-tuning them with classified data. This method allows the intelligence neighborhood to rapidly broaden its capabilities without needing to begin from scratch, permitting it to remain competitive with foes. A current cooperation between NASA and IBM to produce the world's largest geospatial foundation model-and the subsequent release of the design to the AI community as an open-source project-is an exemplary presentation of how this kind of public-private partnership can work in practice.


As the nationwide security neighborhood incorporates AI into its work, it needs to ensure the security and durability of its designs. Establishing requirements to release generative AI securely is essential for maintaining the stability of AI-driven intelligence operations. This is a core focus of the National Security Agency's new AI Security Center and its partnership with the Department of Commerce's AI Safety Institute.


As the United States deals with growing rivalry to shape the future of the global order, it is immediate that its intelligence agencies and military profit from the country's innovation and leadership in AI, focusing particularly on big language models, to provide faster and more pertinent details to policymakers. Only then will they gain the speed, breadth, and depth of insight needed to browse a more complex, competitive, and content-rich world.