Spy Vs. AI
U.S. Diplomacy
Since its founding in 1922, Foreign Affairs has been the leading online forum for severe conversation of American diplomacy and worldwide affairs. The publication has actually included contributions from many prominent worldwide affairs experts.
More Resources
- Feedback
- Institutional Subscriptions
- Gift a Membership
- About Us
- Events
- Issue Archive
- Advertise
- Audio Content
- Account Management
- FAQs
Spy vs. AI
ANNE NEUBERGER is Deputy Assistant to the President and Deputy National Security Adviser for Cyber and Emerging Technology on the U.S. National Security Council. From 2009 to 2021, she served in senior operational roles in intelligence and cybersecurity at the National Security Agency, including as its first Chief Risk Officer.
- More by Anne Neuberger
Spy vs. AI
How Artificial Intelligence Will Remake Espionage
Anne Neuberger
-.
Copy Link Copied.
Article link: https://www.foreignaffairs.com/united-states/spy-vs-aihttps://www.foreignaffairs.com/united-states/spy-vs-[ai](https://desmethenkokcomputers.nl).
Copy
Gift Link Copied.
This is a subscriber-only function. Subscribe now or Check in.
Create Citation Copied.
Chicago MLA APSA APA.
Chicago Cite not available at the minute.
MLA Cite not available at the minute.
APSA Cite not available at the moment.
APA Cite not available at the minute
Download PDF.
This is a subscriber-only function. Subscribe now or Check in.
Request Reprint.
Request reprint approvals here.
In the early 1950s, the United States faced a critical intelligence challenge in its burgeoning competitors with the Soviet Union. Outdated German reconnaissance images from The second world war might no longer provide sufficient intelligence about Soviet military capabilities, and existing U.S. surveillance abilities were no longer able to penetrate the Soviet Union's closed airspace. This shortage spurred an adventurous moonshot effort: the advancement of the U-2 reconnaissance aircraft. In just a few years, U-2 objectives were providing vital intelligence, capturing images of Soviet missile installations in Cuba and bringing near-real-time insights from behind the Iron Curtain to the Oval Office.
Today, the United States stands at a similar point. Competition between Washington and its competitors over the future of the international order is intensifying, and now, much as in the early 1950s, the United States should take advantage of its world-class private sector and adequate capacity for development to outcompete its foes. The U.S. intelligence neighborhood need to harness the nation's sources of strength to provide insights to policymakers at the speed of today's world. The combination of artificial intelligence, especially through large language models, offers groundbreaking chances to improve intelligence operations and analysis, allowing the shipment of faster and more relevant support to decisionmakers. This technological revolution comes with substantial disadvantages, nevertheless, especially as adversaries exploit similar improvements to discover and counter U.S. intelligence operations. With an AI race underway, the United States need to challenge itself to be first-first to gain from AI, initially to safeguard itself from opponents who might use the technology for ill, and initially to use AI in line with the laws and values of a democracy.
For the U.S. nationwide security community, satisfying the guarantee and handling the hazard of AI will need deep technological and cultural changes and a willingness to alter the way agencies work. The U.S. intelligence and wiki.rrtn.org military neighborhoods can harness the capacity of AI while mitigating its inherent threats, ensuring that the United States maintains its one-upmanship in a quickly developing global landscape. Even as it does so, the United States must transparently convey to the American public, and to populations and partners worldwide, how the nation plans to fairly and safely utilize AI, in compliance with its laws and worths.
MORE, BETTER, FASTER
AI's potential to reinvent the intelligence neighborhood depends on its ability to procedure and evaluate vast amounts of data at extraordinary speeds. It can be challenging to analyze large quantities of collected information to create time-sensitive warnings. U.S. intelligence services could leverage AI systems' pattern recognition abilities to identify and alert human experts to potential hazards, such as missile launches or military movements, or important worldwide advancements that analysts understand senior U.S. decisionmakers are interested in. This ability would guarantee that critical cautions are prompt, actionable, and relevant, permitting more reliable reactions to both quickly emerging dangers and emerging policy chances. Multimodal models, which incorporate text, images, and audio, boost this analysis. For example, using AI to cross-reference satellite images with signals intelligence could offer a detailed view of military motions, enabling quicker and more precise risk evaluations and potentially new methods of providing details to policymakers.
Intelligence experts can also offload repetitive and lengthy tasks to devices to concentrate on the most satisfying work: producing initial and deeper analysis, increasing the intelligence community's total insights and efficiency. A great example of this is foreign language translation. U.S. intelligence agencies invested early in AI-powered abilities, and the bet has paid off. The capabilities of language models have grown progressively sophisticated and accurate-OpenAI's just recently released o1 and o3 models showed considerable development in accuracy and reasoning ability-and can be used to even more quickly equate and summarize text, audio, and video files.
Although obstacles remain, future systems trained on greater amounts of non-English information might be capable of discerning subtle differences between dialects and comprehending the meaning and cultural context of slang or Internet memes. By counting on these tools, the intelligence community could focus on training a cadre of extremely specialized linguists, who can be difficult to discover, often struggle to make it through the clearance procedure, and take a long period of time to train. And obviously, by making more foreign language materials available across the right agencies, U.S. intelligence services would have the ability to quicker triage the mountain of foreign intelligence they get to choose the needles in the haystack that truly matter.
The value of such speed to policymakers can not be underestimated. Models can quickly sort through intelligence information sets, open-source details, and conventional human intelligence and produce draft summaries or initial analytical reports that analysts can then confirm and improve, making sure the last products are both detailed and accurate. Analysts could partner with an advanced AI assistant to work through analytical issues, test concepts, and brainstorm in a collective fashion, improving each model of their analyses and providing finished intelligence more rapidly.
Consider Israel's experience in January 2018, when its intelligence service, the Mossad, discreetly got into a secret Iranian facility and took about 20 percent of the archives that detailed Iran's nuclear activities in between 1999 and 2003. According to Israeli authorities, the Mossad gathered some 55,000 pages of files and a further 55,000 files stored on CDs, including pictures and videos-nearly all in Farsi. Once the archive was obtained, senior officials put immense pressure on intelligence specialists to produce detailed assessments of its material and whether it pointed to an ongoing effort to develop an Iranian bomb. But it took these specialists several months-and hundreds of hours of labor-to translate each page, evaluate it by hand for relevant material, and integrate that details into assessments. With today's AI abilities, the first two steps in that process could have been accomplished within days, perhaps even hours, permitting experts to comprehend and contextualize the intelligence quickly.
Among the most intriguing applications is the way AI could transform how intelligence is consumed by policymakers, allowing them to communicate straight with intelligence reports through ChatGPT-like platforms. Such abilities would allow users to ask specific concerns and receive summarized, pertinent details from thousands of reports with source citations, assisting them make informed decisions rapidly.
BRAVE NEW WORLD
Although AI offers numerous advantages, it also poses considerable brand-new dangers, especially as foes develop similar technologies. China's improvements in AI, particularly in computer vision and security, threaten U.S. intelligence operations. Because the nation is ruled by an authoritarian regime, it lacks personal privacy constraints and civil liberty defenses. That deficit makes it possible for large-scale data collection practices that have actually yielded information sets of tremendous size. Government-sanctioned AI models are trained on huge amounts of personal and behavioral data that can then be utilized for numerous functions, such as surveillance and social control. The presence of Chinese business, such as Huawei, in telecommunications systems and software around the world could supply China with ready access to bulk information, notably bulk images that can be utilized to train facial recognition designs, a particular issue in nations with large U.S. military bases. The U.S. nationwide security neighborhood must consider how Chinese models built on such extensive information sets can provide China a strategic benefit.
And it is not simply China. The expansion of "open source" AI designs, such as Meta's Llama and those produced by the French company Mistral AI and the Chinese business DeepSeek, is putting effective AI capabilities into the hands of users around the world at fairly budget-friendly costs. Many of these users are benign, but some are not-including authoritarian programs, cyber-hackers, and criminal gangs. These malign actors are utilizing large language models to rapidly create and spread false and malicious material or to carry out cyberattacks. As experienced with other intelligence-related innovations, such as signals obstruct capabilities and unmanned drones, China, Iran, and Russia will have every incentive to share a few of their AI breakthroughs with client states and subnational groups, such as Hezbollah, Hamas, and the Wagner paramilitary company, therefore increasing the threat to the United States and its allies.
The U.S. military and intelligence neighborhood's AI designs will become appealing targets for enemies. As they grow more effective and main to U.S. national security decision-making, intelligence AIs will end up being vital nationwide possessions that need to be protected against foes looking for to jeopardize or manipulate them. The intelligence neighborhood should invest in establishing protected AI models and in developing standards for "red teaming" and constant evaluation to secure against possible dangers. These groups can use AI to mimic attacks, uncovering prospective weak points and establishing strategies to mitigate them. Proactive steps, including partnership with allies on and investment in counter-AI innovations, will be vital.
THE NEW NORMAL
These difficulties can not be wished away. Waiting too wish for AI technologies to totally mature carries its own risks; U.S. intelligence capabilities will fall behind those of China, Russia, and other powers that are going full steam ahead in establishing AI. To make sure that intelligence-whether time-sensitive warnings or longer-term strategic insight-continues to be a benefit for the United States and its allies, the country's intelligence neighborhood needs to adjust and innovate. The intelligence services must quickly master using AI innovations and make AI a fundamental element in their work. This is the only sure method to ensure that future U.S. presidents get the best possible intelligence support, remain ahead of their foes, and secure the United States' delicate abilities and operations. Implementing these changes will need a cultural shift within the intelligence neighborhood. Today, intelligence analysts mainly build items from raw intelligence and information, with some support from existing AI models for voice and images analysis. Moving forward, intelligence officials must explore including a hybrid method, in line with existing laws, using AI designs trained on unclassified commercially available data and refined with classified details. This amalgam of technology and standard intelligence gathering might result in an AI entity providing instructions to images, signals, open source, and measurement systems on the basis of an incorporated view of regular and anomalous activity, automated images analysis, and automatic voice translation.
To accelerate the shift, intelligence leaders need to promote the advantages of AI integration, emphasizing the enhanced abilities and effectiveness it provides. The cadre of recently appointed chief AI officers has been developed in U.S. intelligence and defense to function as leads within their companies for promoting AI innovation and getting rid of barriers to the innovation's implementation. Pilot jobs and early wins can build momentum and self-confidence in AI's capabilities, motivating wider adoption. These officers can utilize the competence of nationwide labs and other partners to check and refine AI designs, guaranteeing their effectiveness and security. To institutionalise change, leaders should create other organizational incentives, including promotions and training opportunities, to reward inventive methods and those employees and units that demonstrate reliable usage of AI.
The White House has produced the policy needed for the usage of AI in nationwide security agencies. President Joe Biden's 2023 executive order concerning safe, protected, and reliable AI detailed the guidance required to fairly and securely utilize the innovation, and National Security Memorandum 25, issued in October 2024, is the country's foundational method for the power and managing the risks of AI to advance nationwide security. Now, Congress will need to do its part. Appropriations are needed for departments and firms to develop the infrastructure needed for development and experimentation, conduct and scale pilot activities and assessments, and continue to invest in examination capabilities to ensure that the United States is constructing trusted and high-performing AI technologies.
Intelligence and military communities are dedicated to keeping humans at the heart of AI-assisted decision-making and have produced the structures and tools to do so. Agencies will need standards for how their experts should use AI designs to make certain that intelligence products meet the intelligence community's requirements for dependability. The government will likewise need to maintain clear assistance for dealing with the information of U.S. residents when it pertains to the training and use of big language designs. It will be very important to stabilize the use of emerging innovations with safeguarding the privacy and civil liberties of people. This implies augmenting oversight mechanisms, upgrading appropriate frameworks to reflect the capabilities and risks of AI, and cultivating a culture of AI development within the national security device that harnesses the capacity of the technology while safeguarding the rights and liberties that are fundamental to American society.
Unlike the 1950s, when U.S. intelligence raced to the leading edge of overhead and satellite imagery by establishing a number of the crucial technologies itself, winning the AI race will require that neighborhood to reimagine how it partners with private industry. The economic sector, which is the main ways through which the government can recognize AI development at scale, is investing billions of dollars in AI-related research study, information centers, and computing power. Given those companies' developments, intelligence companies should prioritize leveraging commercially available AI models and refining them with categorized data. This technique allows the intelligence neighborhood to rapidly expand its abilities without having to go back to square one, enabling it to remain competitive with adversaries. A recent cooperation in between NASA and IBM to produce the world's biggest geospatial structure model-and the subsequent release of the design to the AI community as an open-source project-is an exemplary presentation of how this kind of public-private collaboration can operate in practice.
As the national security neighborhood incorporates AI into its work, it should guarantee the security and resilience of its designs. Establishing standards to release generative AI firmly is vital for maintaining the integrity of AI-driven intelligence operations. This is a core focus of the National Security Agency's brand-new AI Security Center and its partnership with the Department of Commerce's AI Safety Institute.
As the United States deals with growing rivalry to form the future of the global order, it is urgent that its intelligence agencies and military profit from the country's innovation and management in AI, focusing especially on big language designs, to provide faster and more appropriate details to policymakers. Only then will they gain the speed, breadth, and depth of insight required to browse a more complicated, competitive, and content-rich world.