Spy Vs. AI
U.S. Foreign Policy
Since its starting in 1922, Foreign Affairs has been the leading forum for major conversation of American foreign policy and global affairs. The magazine has actually featured contributions from numerous prominent global affairs professionals.
More Resources
- Feedback
- Institutional Subscriptions
- Gift a Subscription
- About Us
- Events
- Issue Archive
- Advertise
- Audio Content
- Account Management
- FAQs
Spy vs. AI
ANNE NEUBERGER is Deputy Assistant to the President and Deputy National Security Adviser for Cyber and Emerging Technology on the U.S. National Security Council. From 2009 to 2021, she served in senior operational roles in intelligence and cybersecurity at the National Security Agency, including as its first Chief Risk Officer.
- More by Anne Neuberger
Spy vs. AI
How Artificial Intelligence Will Remake Espionage
Anne Neuberger
-.
Copy Link Copied.
Article link: https://www.foreignaffairs.com/united-states/spy-vs-aihttps://www.foreignaffairs.com/united-states/spy-vs-[ai](https://karindolman.nl).
Copy
Gift Link Copied.
This is a subscriber-only feature. Subscribe now or Check in.
Create Citation Copied.
Chicago MLA APSA APA.
Chicago Cite not available at the moment.
MLA Cite not available at the moment.
APSA Cite not available at the minute.
APA Cite not available at the moment
Download PDF.
This is a subscriber-only function. Subscribe now or valetinowiki.racing Check in.
Request Reprint.
Request reprint consents here.
In the early 1950s, the United States faced a critical intelligence difficulty in its burgeoning competition with the Soviet Union. Outdated German reconnaissance images from The second world war might no longer offer enough intelligence about Soviet military abilities, and existing U.S. surveillance abilities were no longer able to penetrate the Soviet Union's closed airspace. This shortage spurred an audacious moonshot initiative: the advancement of the U-2 reconnaissance aircraft. In just a few years, U-2 objectives were providing vital intelligence, recording pictures of Soviet rocket setups in Cuba and bringing near-real-time insights from behind the Iron Curtain to the Oval Office.
Today, the United States stands at a similar point. Competition in between Washington and its rivals over the future of the international order is magnifying, and now, much as in the early 1950s, the United States must benefit from its world-class economic sector and sufficient capacity for innovation to outcompete its adversaries. The U.S. intelligence neighborhood must harness the nation's sources of strength to deliver insights to policymakers at the speed these days's world. The combination of expert system, especially through large language designs, uses groundbreaking opportunities to improve intelligence operations and analysis, enabling the shipment of faster and more pertinent support to decisionmakers. This technological revolution includes significant disadvantages, nevertheless, particularly as foes make use of similar improvements to uncover and counter U.S. intelligence operations. With an AI race underway, the United States should challenge itself to be first-first to gain from AI, initially to protect itself from opponents who might use the technology for ill, and initially to utilize AI in line with the laws and values of a democracy.
For the U.S. national security neighborhood, fulfilling the promise and managing the hazard of AI will need deep technological and cultural changes and a desire to change the way agencies work. The U.S. intelligence and military communities can harness the potential of AI while alleviating its intrinsic threats, ensuring that the United States maintains its one-upmanship in a quickly progressing worldwide landscape. Even as it does so, the United States must transparently convey to the American public, and to populations and partners around the globe, how the country means to fairly and safely use AI, in compliance with its laws and values.
MORE, BETTER, FASTER
AI's potential to revolutionize the intelligence community lies in its ability to process and evaluate large amounts of information at unmatched speeds. It can be challenging to evaluate big amounts of collected information to generate time-sensitive cautions. U.S. intelligence services might take advantage of AI systems' pattern recognition abilities to identify and alert human experts to prospective hazards, such as missile launches or military movements, or important global developments that analysts understand senior U.S. decisionmakers are interested in. This ability would ensure that vital cautions are timely, actionable, and appropriate, enabling for more effective responses to both rapidly emerging threats and emerging policy opportunities. Multimodal designs, which integrate text, images, and audio, improve this analysis. For example, using AI to cross-reference satellite imagery with signals intelligence might supply a detailed view of military movements, making it possible for much faster and more precise risk evaluations and possibly brand-new means of delivering details to policymakers.
Intelligence experts can also unload repeated and lengthy tasks to makers to focus on the most fulfilling work: creating original and deeper analysis, increasing the intelligence community's general insights and efficiency. An excellent example of this is foreign language translation. U.S. intelligence firms invested early in AI-powered capabilities, and the bet has actually paid off. The capabilities of language models have actually grown significantly advanced and accurate-OpenAI's recently launched o1 and o3 designs demonstrated considerable development in accuracy and reasoning ability-and can be used to much more quickly equate and sum up text, audio, and video files.
Although obstacles remain, future systems trained on greater quantities of non-English data might be efficient in critical subtle distinctions in between dialects and comprehending the significance and cultural context of slang or Internet memes. By relying on these tools, the intelligence community could focus on training a cadre of highly specialized linguists, who can be hard to find, often struggle to get through the clearance procedure, and take a long period of time to train. And obviously, by making more foreign language products available throughout the right companies, U.S. intelligence services would be able to faster triage the mountain of foreign intelligence they receive to select the needles in the haystack that actually matter.
The value of such speed to policymakers can not be ignored. Models can quickly sift through intelligence data sets, open-source details, and standard human intelligence and produce draft summaries or initial analytical reports that experts can then validate and improve, guaranteeing the end products are both detailed and accurate. Analysts might partner with an advanced AI assistant to overcome analytical problems, test ideas, and brainstorm in a collective fashion, enhancing each iteration of their analyses and providing ended up intelligence more quickly.
Consider Israel's experience in January 2018, when its intelligence service, the Mossad, covertly got into a secret Iranian center and took about 20 percent of the archives that detailed Iran's nuclear activities in between 1999 and 2003. According to Israeli authorities, the Mossad gathered some 55,000 pages of documents and a more 55,000 files kept on CDs, including pictures and videos-nearly all in Farsi. Once the archive was obtained, senior authorities positioned immense pressure on intelligence experts to produce detailed assessments of its content and whether it pointed to an ongoing effort to construct an Iranian bomb. But it took these professionals a number of months-and numerous hours of labor-to translate each page, evaluate it by hand for appropriate material, and integrate that details into assessments. With today's AI abilities, the very first two actions in that process might have been achieved within days, perhaps even hours, enabling analysts to understand and contextualize the intelligence rapidly.
Among the most intriguing applications is the method AI might change how intelligence is consumed by policymakers, allowing them to connect straight with intelligence reports through ChatGPT-like platforms. Such abilities would permit users to ask particular questions and get summed up, relevant details from thousands of reports with source citations, assisting them make notified decisions quickly.
BRAVE NEW WORLD
Although AI uses numerous advantages, it also presents considerable brand-new threats, particularly as foes develop similar technologies. China's developments in AI, particularly in computer vision and surveillance, threaten U.S. intelligence operations. Because the nation is ruled by an authoritarian regime, it does not have personal privacy constraints and civil liberty protections. That deficit makes it possible for large-scale data collection practices that have actually yielded information sets of immense size. Government-sanctioned AI designs are trained on vast quantities of personal and behavioral information that can then be utilized for various purposes, such as monitoring and social control. The presence of Chinese companies, such as Huawei, in telecoms systems and software application all over the world might supply China with prepared access to bulk data, significantly bulk images that can be utilized to train facial acknowledgment models, a specific issue in nations with large U.S. military bases. The U.S. national security neighborhood must think about how developed on such comprehensive data sets can offer China a tactical benefit.
And it is not simply China. The expansion of "open source" AI designs, such as Meta's Llama and those produced by the French company Mistral AI and the Chinese business DeepSeek, is putting powerful AI capabilities into the hands of users across the globe at fairly budget friendly costs. A lot of these users are benign, however some are not-including authoritarian regimes, cyber-hackers, and criminal gangs. These malign stars are utilizing big language models to quickly produce and spread out false and destructive content or to perform cyberattacks. As seen with other intelligence-related technologies, such as signals intercept abilities and unmanned drones, China, Iran, and Russia will have every incentive to share a few of their AI breakthroughs with customer states and subnational groups, such as Hezbollah, Hamas, and the Wagner paramilitary company, thereby increasing the threat to the United States and its allies.
The U.S. military and intelligence neighborhood's AI designs will become appealing targets for foes. As they grow more powerful and main to U.S. nationwide security decision-making, intelligence AIs will become critical nationwide assets that need to be protected against enemies looking for to compromise or manipulate them. The intelligence neighborhood should purchase developing protected AI designs and in establishing requirements for "red teaming" and constant evaluation to safeguard against potential risks. These teams can utilize AI to replicate attacks, revealing prospective weaknesses and developing techniques to reduce them. Proactive procedures, consisting of partnership with allies on and financial investment in counter-AI innovations, will be necessary.
THE NEW NORMAL
These difficulties can not be wished away. Waiting too long for AI innovations to totally mature carries its own threats; U.S. intelligence capabilities will fall back those of China, Russia, and other powers that are going full steam ahead in establishing AI. To ensure that intelligence-whether time-sensitive cautions or longer-term strategic insight-continues to be a benefit for the United States and its allies, the nation's intelligence community needs to adapt and innovate. The intelligence services must rapidly master using AI innovations and make AI a fundamental aspect in their work. This is the only sure way to guarantee that future U.S. presidents receive the very best possible intelligence support, remain ahead of their foes, and protect the United States' delicate abilities and operations. Implementing these changes will need a cultural shift within the intelligence neighborhood. Today, intelligence experts mainly develop products from raw intelligence and data, with some assistance from existing AI models for voice and imagery analysis. Moving on, intelligence officials must explore including a hybrid technique, in line with existing laws, using AI designs trained on unclassified commercially available data and improved with categorized details. This amalgam of innovation and traditional intelligence event might lead to an AI entity offering direction to imagery, signals, open source, and measurement systems on the basis of an incorporated view of regular and anomalous activity, automated imagery analysis, and automatic voice translation.
To accelerate the shift, intelligence leaders should champion the advantages of AI combination, stressing the enhanced capabilities and efficiency it uses. The cadre of newly appointed chief AI officers has actually been established in U.S. intelligence and defense to act as leads within their firms for promoting AI development and eliminating barriers to the technology's execution. Pilot jobs and early wins can construct momentum and self-confidence in AI's capabilities, motivating more comprehensive adoption. These officers can utilize the competence of nationwide labs and other partners to check and improve AI models, ensuring their effectiveness and security. To institutionalize modification, leaders need to create other organizational rewards, including promotions and training opportunities, to reward inventive approaches and those employees and units that demonstrate efficient usage of AI.
The White House has developed the policy required for making use of AI in nationwide security firms. President Joe Biden's 2023 executive order concerning safe, secure, and reliable AI detailed the assistance required to fairly and safely utilize the technology, and National Security Memorandum 25, released in October 2024, is the country's fundamental technique for harnessing the power and handling the dangers of AI to advance national security. Now, Congress will require to do its part. Appropriations are required for departments and agencies to produce the facilities needed for innovation and experimentation, conduct and scale pilot activities and evaluations, and continue to buy assessment capabilities to ensure that the United States is building trustworthy and high-performing AI innovations.
Intelligence and military neighborhoods are dedicated to keeping human beings at the heart of AI-assisted decision-making and have actually created the structures and tools to do so. Agencies will need standards for how their experts should utilize AI designs to make certain that intelligence products fulfill the intelligence community's standards for reliability. The government will also need to maintain clear assistance for managing the information of U.S. citizens when it pertains to the training and use of big language designs. It will be essential to balance making use of emerging innovations with safeguarding the personal privacy and civil liberties of people. This implies augmenting oversight systems, updating appropriate structures to reflect the abilities and threats of AI, and fostering a culture of AI development within the national security apparatus that utilizes the capacity of the technology while protecting the rights and freedoms that are fundamental to American society.
Unlike the 1950s, when U.S. intelligence raced to the leading edge of overhead and satellite images by establishing a lot of the essential technologies itself, winning the AI race will need that neighborhood to reimagine how it partners with personal market. The private sector, which is the main methods through which the government can recognize AI progress at scale, is investing billions of dollars in AI-related research study, information centers, and calculating power. Given those business' advancements, intelligence firms must prioritize leveraging commercially available AI models and improving them with classified data. This approach allows the intelligence neighborhood to rapidly expand its abilities without needing to begin from scratch, permitting it to remain competitive with enemies. A recent cooperation between NASA and IBM to create the world's biggest geospatial structure model-and the subsequent release of the model to the AI neighborhood as an open-source project-is an excellent presentation of how this type of public-private collaboration can operate in practice.
As the nationwide security neighborhood integrates AI into its work, it needs to ensure the security and strength of its models. Establishing standards to release generative AI firmly is crucial for maintaining the stability of AI-driven intelligence operations. This is a core focus of the National Security Agency's brand-new AI Security Center and its partnership with the Department of Commerce's AI Safety Institute.
As the United States deals with growing rivalry to shape the future of the international order, it is immediate that its intelligence agencies and military capitalize on the country's development and management in AI, focusing especially on large language designs, to offer faster and more appropriate details to policymakers. Only then will they gain the speed, breadth, and depth of insight needed to browse a more complicated, competitive, and content-rich world.