Spy Vs. AI

U.S. Diplomacy


Since its founding in 1922, Foreign Affairs has been the leading online forum for severe conversation of American foreign policy and international affairs. The magazine has actually included contributions from many leading global affairs professionals.


More Resources


- Feedback

- Institutional Subscriptions

- Gift a Subscription

- About Us

- Events

- Issue Archive

- Advertise

- Audio Content

- Account Management

- FAQs


Spy vs. AI


ANNE NEUBERGER is Deputy Assistant to the President and Deputy National Security Adviser for Cyber and Emerging Technology on the U.S. National Security Council. From 2009 to 2021, she served in senior functional roles in intelligence and cybersecurity at the National Security Agency, consisting of as its very first Chief Risk Officer.


- More by Anne Neuberger


Spy vs. AI


How Artificial Intelligence Will Remake Espionage


Anne Neuberger


-.

Copy Link Copied.
Article link: https://www.foreignaffairs.com/united-states/spy-vs-aihttps://www.foreignaffairs.com/united-states/spy-vs-ai.
Copy



Gift Link Copied.
This is a subscriber-only function. Subscribe now or Sign in.



Create Citation Copied.
Chicago MLA APSA APA.
Chicago Cite not available at the minute.
MLA Cite not available at the minute.
APSA Cite not available at the minute.
APA Cite not available at the moment



Download PDF.
This is a subscriber-only feature. Subscribe now or Check in.



Request Reprint.
Request reprint authorizations here.






In the early 1950s, the United States dealt with a critical intelligence challenge in its blossoming competitors with the Soviet Union. Outdated German reconnaissance images from World War II could no longer offer adequate intelligence about Soviet military capabilities, and existing U.S. security capabilities were no longer able to penetrate the Soviet Union's closed airspace. This shortage stimulated an adventurous moonshot effort: the development of the U-2 reconnaissance aircraft. In only a few years, U-2 missions were delivering crucial intelligence, catching pictures of Soviet rocket setups in Cuba and bringing near-real-time insights from behind the Iron Curtain to the Oval Office.


Today, the United States stands at a comparable juncture. Competition in between Washington and its rivals over the future of the global order is intensifying, and now, much as in the early 1950s, the United States should make the most of its world-class economic sector and adequate capacity for development to outcompete its foes. The U.S. intelligence neighborhood need to harness the country's sources of strength to deliver insights to policymakers at the speed of today's world. The integration of expert system, especially through big language designs, offers groundbreaking chances to enhance intelligence operations and analysis, enabling the shipment of faster and more pertinent assistance to decisionmakers. This technological transformation includes significant downsides, however, particularly as enemies make use of similar improvements to uncover and counter U.S. intelligence operations. With an AI race underway, the United States should challenge itself to be first-first to gain from AI, initially to safeguard itself from enemies who might utilize the technology for ill, and initially to use AI in line with the laws and worths of a democracy.


For the U.S. nationwide security community, satisfying the promise and handling the peril of AI will need deep technological and cultural changes and a willingness to alter the way firms work. The U.S. intelligence and military neighborhoods can harness the potential of AI while alleviating its inherent dangers, ensuring that the United States maintains its competitive edge in a quickly developing worldwide landscape. Even as it does so, the United States must transparently convey to the American public, and to populations and partners all over the world, how the country means to fairly and safely utilize AI, in compliance with its laws and values.


MORE, BETTER, FASTER


AI's capacity to change the intelligence community depends on its capability to process and examine large amounts of information at extraordinary speeds. It can be challenging to analyze large amounts of collected data to generate time-sensitive cautions. U.S. intelligence services might leverage AI systems' pattern recognition capabilities to recognize and alert human analysts to prospective dangers, such as rocket launches or military motions, or essential international advancements that analysts know senior U.S. decisionmakers have an interest in. This ability would make sure that critical cautions are prompt, actionable, and pertinent, enabling more efficient reactions to both rapidly emerging dangers and emerging policy opportunities. Multimodal designs, which integrate text, images, and audio, boost this analysis. For circumstances, utilizing AI to cross-reference satellite imagery with signals intelligence might provide a detailed view of military motions, allowing quicker and more accurate risk evaluations and potentially new methods of providing details to policymakers.


Intelligence analysts can likewise unload recurring and lengthy tasks to devices to focus on the most fulfilling work: producing original and much deeper analysis, increasing the intelligence neighborhood's overall insights and productivity. A good example of this is foreign language translation. U.S. intelligence companies invested early in AI-powered abilities, and the bet has actually paid off. The capabilities of language designs have actually grown progressively advanced and accurate-OpenAI's just recently launched o1 and o3 models showed considerable progress in accuracy and thinking ability-and can be utilized to much more quickly translate and sum up text, audio, and video files.


Although challenges remain, future systems trained on greater amounts of non-English data might be efficient in discerning subtle distinctions between dialects and understanding the significance and cultural context of slang or Internet memes. By relying on these tools, the intelligence neighborhood could focus on training a cadre of highly specialized linguists, who can be tough to discover, frequently struggle to survive the clearance process, and take a long period of time to train. And obviously, by making more foreign language materials available across the ideal agencies, U.S. intelligence services would be able to more quickly triage the mountain of foreign intelligence they get to choose out the needles in the haystack that really matter.


The worth of such speed to policymakers can not be underestimated. Models can swiftly sort through intelligence data sets, open-source details, and conventional human intelligence and produce draft summaries or preliminary analytical reports that analysts can then confirm and fine-tune, ensuring the last items are both detailed and accurate. Analysts might coordinate with an advanced AI assistant to work through analytical issues, test concepts, and brainstorm in a collective fashion, improving each version of their analyses and delivering ended up intelligence more rapidly.


Consider Israel's experience in January 2018, speedrunwiki.com when its intelligence service, the Mossad, discreetly burglarized a secret Iranian center and stole about 20 percent of the archives that detailed Iran's nuclear activities in between 1999 and 2003. According to Israeli officials, the Mossad collected some 55,000 pages of files and a more 55,000 files stored on CDs, consisting of pictures and videos-nearly all in Farsi. Once the archive was obtained, senior authorities put immense pressure on intelligence experts to produce detailed evaluations of its content and whether it pointed to an ongoing effort to develop an Iranian bomb. But it took these professionals a number of months-and hundreds of hours of labor-to translate each page, evaluate it by hand for relevant material, and integrate that details into evaluations. With today's AI abilities, the very first two steps in that process might have been achieved within days, perhaps even hours, allowing analysts to comprehend and contextualize the intelligence quickly.


One of the most fascinating applications is the method AI might change how intelligence is taken in by policymakers, allowing them to interact straight with intelligence reports through ChatGPT-like platforms. Such capabilities would enable users to ask particular concerns and get summarized, relevant details from countless reports with source citations, assisting them make notified decisions rapidly.


BRAVE NEW WORLD


Although AI offers numerous benefits, it also poses substantial new dangers, particularly as enemies develop similar technologies. China's improvements in AI, particularly in computer system vision and surveillance, threaten U.S. intelligence operations. Because the country is ruled by an authoritarian routine, it lacks privacy constraints and civil liberty defenses. That deficit enables large-scale data collection practices that have yielded information sets of tremendous size. Government-sanctioned AI designs are trained on huge amounts of personal and behavioral data that can then be used for numerous purposes, such as security and social control. The existence of Chinese business, such as Huawei, in telecoms systems and software application around the globe could offer China with ready access to bulk data, significantly bulk images that can be utilized to train facial acknowledgment designs, a specific issue in countries with big U.S. military bases. The U.S. national security neighborhood must consider how Chinese designs constructed on such substantial data sets can offer China a tactical advantage.


And it is not just China. The proliferation of "open source" AI models, such as Meta's Llama and those produced by the French business Mistral AI and the Chinese company DeepSeek, is putting powerful AI abilities into the hands of users around the world at fairly inexpensive costs. A number of these users are benign, however some are not-including authoritarian routines, cyber-hackers, and criminal gangs. These malign stars are utilizing big language models to rapidly create and spread false and destructive material or to carry out cyberattacks. As witnessed with other intelligence-related innovations, such as signals obstruct abilities and unmanned drones, China, Iran, and Russia will have every incentive to share a few of their AI advancements with client states and subnational groups, such as Hezbollah, Hamas, and the Wagner paramilitary company, consequently increasing the danger to the United States and its allies.


The U.S. military and intelligence neighborhood's AI designs will become appealing targets for foes. As they grow more effective and main to U.S. national security decision-making, intelligence AIs will become crucial nationwide properties that should be protected against enemies looking for to compromise or control them. The intelligence neighborhood need to purchase establishing secure AI designs and in developing requirements for "red teaming" and continuous assessment to secure against potential risks. These teams can utilize AI to replicate attacks, uncovering possible weaknesses and establishing methods to alleviate them. Proactive measures, including cooperation with allies on and financial investment in counter-AI technologies, will be important.


THE NEW NORMAL


These challenges can not be wanted away. Waiting too long for AI technologies to completely mature brings its own risks; U.S. intelligence capacities will fall behind those of China, Russia, and other powers that are going complete steam ahead in developing AI. To make sure that intelligence-whether time-sensitive cautions or longer-term tactical insight-continues to be a benefit for the United States and its allies, the nation's intelligence community needs to adjust and innovate. The intelligence services must quickly master making use of AI innovations and make AI a fundamental component in their work. This is the only sure method to ensure that future U.S. presidents receive the very best possible intelligence support, remain ahead of their enemies, and safeguard the United States' delicate abilities and operations. Implementing these changes will require a cultural shift within the intelligence neighborhood. Today, intelligence analysts mainly build products from raw intelligence and data, with some assistance from existing AI models for voice and imagery analysis. Moving forward, intelligence authorities should check out including a hybrid method, in line with existing laws, using AI designs trained on unclassified commercially available data and refined with categorized details. This amalgam of technology and conventional intelligence gathering might result in an AI entity offering instructions to imagery, signals, open source, and measurement systems on the basis of an integrated view of normal and anomalous activity, automated imagery analysis, and automated voice translation.


To speed up the shift, intelligence leaders need to champion the advantages of AI integration, highlighting the improved capabilities and efficiency it offers. The cadre of freshly appointed chief AI officers has actually been established in U.S. intelligence and defense to act as leads within their companies for promoting AI development and eliminating barriers to the innovation's implementation. Pilot projects and early wins can build momentum and self-confidence in AI's capabilities, motivating wider adoption. These officers can take advantage of the knowledge of nationwide laboratories and other partners to test and improve AI models, guaranteeing their efficiency and security. To institutionalize change, leaders must develop other organizational rewards, consisting of promos and training opportunities, to reward innovative techniques and those employees and systems that show efficient use of AI.


The White House has actually produced the policy needed for using AI in national security firms. President Joe Biden's 2023 executive order regarding safe, secure, and trustworthy AI detailed the guidance needed to fairly and securely use the innovation, and National Security Memorandum 25, released in October 2024, is the country's foundational technique for utilizing the power and handling the risks of AI to advance nationwide security. Now, Congress will require to do its part. Appropriations are required for departments and companies to the facilities needed for development and experimentation, conduct and scale pilot activities and assessments, and continue to invest in assessment capabilities to guarantee that the United States is constructing trustworthy and high-performing AI innovations.


Intelligence and military communities are dedicated to keeping people at the heart of AI-assisted decision-making and have actually created the structures and tools to do so. Agencies will require guidelines for how their analysts need to utilize AI designs to make certain that intelligence items fulfill the intelligence community's requirements for reliability. The federal government will also require to maintain clear assistance for managing the data of U.S. residents when it pertains to the training and usage of big language models. It will be essential to stabilize using emerging innovations with safeguarding the privacy and civil liberties of residents. This means augmenting oversight mechanisms, updating appropriate structures to show the capabilities and dangers of AI, and promoting a culture of AI advancement within the nationwide security device that harnesses the capacity of the innovation while safeguarding the rights and flexibilities that are fundamental to American society.


Unlike the 1950s, when U.S. intelligence raced to the leading edge of overhead and satellite images by establishing a lot of the crucial innovations itself, winning the AI race will need that community to reimagine how it partners with personal market. The personal sector, which is the main ways through which the federal government can recognize AI development at scale, is investing billions of dollars in AI-related research, data centers, and computing power. Given those business' developments, intelligence agencies should prioritize leveraging commercially available AI designs and fine-tuning them with categorized data. This approach enables the intelligence community to quickly broaden its abilities without needing to start from scratch, allowing it to remain competitive with enemies. A current partnership in between NASA and IBM to develop the world's largest geospatial foundation model-and the subsequent release of the model to the AI community as an open-source project-is an excellent demonstration of how this kind of public-private partnership can operate in practice.


As the national security community incorporates AI into its work, it must ensure the security and resilience of its models. Establishing standards to deploy generative AI firmly is important for maintaining the integrity of AI-driven intelligence operations. This is a core focus of the National Security Agency's brand-new AI Security Center and its partnership with the Department of Commerce's AI Safety Institute.


As the United States deals with growing competition to shape the future of the international order, it is immediate that its intelligence companies and military take advantage of the nation's development and management in AI, focusing especially on big language models, to offer faster and more relevant details to policymakers. Only then will they gain the speed, breadth, and depth of insight needed to browse a more intricate, competitive, and content-rich world.