GitLab

U.S. Foreign Policy
Since its founding in 1922, Foreign Affairs has actually been the leading forum for serious discussion of American foreign policy and international affairs. The magazine has featured contributions from numerous prominent global affairs professionals.

More Resources

- Feedback
- Institutional Subscriptions
- Gift a Subscription
- About Us
- Events
- Issue Archive
- Advertise
- Audio Content
- Account Management
- FAQs
Spy vs. AI

ANNE NEUBERGER is Deputy Assistant to the President and Deputy National Security Adviser for Cyber and Emerging Technology on the U.S. National Security Council. From 2009 to 2021, she served in senior functional functions in intelligence and cybersecurity at the National Security Agency, including as its first Chief Risk Officer.

- More by Anne Neuberger
Spy vs. AI

How Artificial Intelligence Will Remake Espionage

Anne Neuberger

-.
Copy Link Copied. Article link: https://www.foreignaffairs.com/united-states/spy-vs-aihttps://www.foreignaffairs.com/united-states/spy-vs-[ai](http://praktikum2021.thomasmichl.de). Copy


Gift Link Copied. This is a subscriber-only function. Subscribe now or Sign in.


Create Citation Copied. Chicago MLA APSA APA. Chicago Cite not available at the moment. MLA Cite not available at the moment. APSA Cite not available at the minute. APA Cite not available at the minute


Download PDF. This is a subscriber-only feature. Subscribe now or Sign in.


Request Reprint. Request reprint permissions here.




In the early 1950s, the United States dealt with a critical intelligence difficulty in its burgeoning competition with the Soviet Union. Outdated German reconnaissance images from The second world war could no longer supply enough intelligence about Soviet military capabilities, and existing U.S. security abilities were no longer able to permeate the Soviet Union's closed airspace. This shortage stimulated an audacious moonshot initiative: the development of the U-2 reconnaissance aircraft. In just a couple of years, U-2 objectives were delivering crucial intelligence, recording pictures of Soviet rocket installations in Cuba and bringing near-real-time insights from behind the Iron Curtain to the Oval Office.

Today, the United States stands at a comparable point. Competition between Washington and its competitors over the future of the international order is magnifying, and now, much as in the early 1950s, the United States should take advantage of its first-rate economic sector and ample capacity for development to outcompete its adversaries. The U.S. intelligence community must harness the nation's sources of strength to provide insights to policymakers at the speed these days's world. The integration of expert system, especially through large language designs, provides groundbreaking opportunities to improve intelligence operations and analysis, making it possible for the delivery of faster and more relevant assistance to decisionmakers. This technological transformation features significant downsides, nevertheless, specifically as adversaries exploit similar advancements to discover and counter U.S. intelligence operations. With an AI race underway, the United States need to challenge itself to be first-first to gain from AI, initially to safeguard itself from opponents who might use the technology for ill, and first to utilize AI in line with the laws and values of a democracy.

For the U.S. national security neighborhood, fulfilling the promise and handling the danger of AI will require deep technological and cultural modifications and a determination to change the method companies work. The U.S. intelligence and military neighborhoods can harness the capacity of AI while alleviating its intrinsic threats, guaranteeing that the United States maintains its competitive edge in a rapidly developing international landscape. Even as it does so, the United States must transparently convey to the American public, and to populations and partners around the globe, how the country means to fairly and securely use AI, in compliance with its laws and values.

MORE, BETTER, FASTER

AI's capacity to change the intelligence neighborhood lies in its ability to process and examine huge quantities of data at extraordinary speeds. It can be challenging to evaluate large amounts of gathered data to create time-sensitive warnings. U.S. intelligence services could AI systems' pattern acknowledgment capabilities to identify and alert human experts to potential risks, such as rocket launches or military motions, or oke.zone essential global advancements that analysts know senior U.S. decisionmakers are interested in. This capability would make sure that critical cautions are prompt, actionable, and relevant, allowing for more reliable responses to both rapidly emerging risks and emerging policy chances. Multimodal designs, which incorporate text, images, and audio, boost this analysis. For example, utilizing AI to cross-reference satellite imagery with signals intelligence could supply a detailed view of military movements, enabling quicker and more accurate threat assessments and potentially brand-new methods of delivering details to policymakers.

Intelligence analysts can likewise unload recurring and time-consuming tasks to machines to focus on the most satisfying work: creating initial and much deeper analysis, increasing the intelligence neighborhood's total insights and efficiency. A fine example of this is foreign language translation. U.S. intelligence agencies invested early in AI-powered abilities, and the bet has actually paid off. The capabilities of language models have grown significantly sophisticated and accurate-OpenAI's recently released o1 and o3 models showed substantial development in accuracy and thinking ability-and can be used to much more quickly translate and summarize text, audio, and video files.

Although obstacles remain, future systems trained on greater quantities of non-English information might be capable of critical subtle differences between dialects and understanding the significance and cultural context of slang or Internet memes. By depending on these tools, the intelligence community might concentrate on training a cadre of extremely specialized linguists, who can be difficult to discover, typically battle to make it through the clearance process, and take a long period of time to train. And of course, by making more foreign language products available across the right companies, U.S. intelligence services would have the ability to faster triage the mountain of foreign intelligence they receive to choose the needles in the haystack that truly matter.

The worth of such speed to policymakers can not be underestimated. Models can swiftly sort through intelligence information sets, open-source details, and conventional human intelligence and produce draft summaries or initial analytical reports that experts can then confirm and improve, making sure the last items are both detailed and accurate. Analysts could partner with an advanced AI assistant to resolve analytical problems, test ideas, and brainstorm in a collaborative style, improving each model of their analyses and providing completed intelligence quicker.

Consider Israel's experience in January 2018, when its intelligence service, the Mossad, discreetly broke into a secret Iranian facility and took about 20 percent of the archives that detailed Iran's nuclear activities in between 1999 and 2003. According to Israeli authorities, the Mossad collected some 55,000 pages of documents and a further 55,000 files kept on CDs, consisting of photos and videos-nearly all in Farsi. Once the archive was obtained, senior authorities placed tremendous pressure on intelligence specialists to produce detailed evaluations of its material and whether it pointed to a continuous effort to develop an Iranian bomb. But it took these experts numerous months-and numerous hours of labor-to translate each page, evaluate it by hand for appropriate content, and incorporate that details into assessments. With today's AI abilities, the very first 2 steps in that process might have been accomplished within days, possibly even hours, permitting analysts to comprehend and contextualize the intelligence rapidly.

One of the most fascinating applications is the way AI could change how intelligence is taken in by policymakers, enabling them to connect straight with intelligence reports through ChatGPT-like platforms. Such capabilities would enable users to ask specific concerns and get summarized, pertinent details from thousands of reports with source citations, assisting them make informed decisions rapidly.

BRAVE NEW WORLD

Although AI provides various benefits, it also positions significant brand-new threats, specifically as enemies develop comparable technologies. China's improvements in AI, especially in computer vision and monitoring, threaten U.S. intelligence operations. Because the country is ruled by an authoritarian routine, it lacks personal privacy constraints and civil liberty defenses. That deficit makes it possible for massive information collection practices that have actually yielded information sets of tremendous size. Government-sanctioned AI models are trained on vast quantities of personal and behavioral information that can then be used for various purposes, such as security and social control. The existence of Chinese companies, such as Huawei, in telecommunications systems and software around the globe could offer China with all set access to bulk data, significantly bulk images that can be used to train facial recognition designs, a specific concern in countries with large U.S. military bases. The U.S. national security community must think about how Chinese models constructed on such extensive data sets can provide China a strategic advantage.

And it is not just China. The proliferation of "open source" AI designs, such as Meta's Llama and those produced by the French company Mistral AI and the Chinese company DeepSeek, is putting effective AI capabilities into the hands of users around the world at fairly economical costs. Many of these users are benign, but some are not-including authoritarian programs, cyber-hackers, and criminal gangs. These malign stars are utilizing big language designs to quickly create and spread false and harmful content or to carry out cyberattacks. As witnessed with other intelligence-related innovations, such as signals intercept abilities and unmanned drones, China, Iran, and Russia will have every incentive to share some of their AI breakthroughs with client states and subnational groups, such as Hezbollah, Hamas, and the Wagner paramilitary business, thereby increasing the threat to the United States and its allies.

The U.S. military and intelligence community's AI designs will become attractive targets for adversaries. As they grow more effective and main to U.S. national security decision-making, intelligence AIs will become vital national assets that need to be protected against enemies looking for to compromise or manipulate them. The intelligence neighborhood must buy developing protected AI models and in developing standards for "red teaming" and continuous evaluation to secure against potential hazards. These teams can utilize AI to imitate attacks, uncovering possible weak points and establishing strategies to mitigate them. Proactive steps, consisting of partnership with allies on and financial investment in counter-AI innovations, will be vital.

THE NEW NORMAL

These difficulties can not be wanted away. Waiting too wish for AI innovations to fully mature brings its own risks; U.S. intelligence capacities will fall back those of China, Russia, and other powers that are going complete steam ahead in establishing AI. To make sure that intelligence-whether time-sensitive warnings or longer-term tactical insight-continues to be an advantage for the United States and its allies, the nation's intelligence neighborhood needs to adapt and innovate. The intelligence services should quickly master using AI innovations and make AI a fundamental component in their work. This is the only sure method to ensure that future U.S. presidents get the finest possible intelligence assistance, remain ahead of their adversaries, and safeguard the United States' sensitive capabilities and operations. Implementing these changes will require a cultural shift within the intelligence community. Today, intelligence experts mainly construct items from raw intelligence and information, with some assistance from existing AI designs for voice and images analysis. Moving on, intelligence authorities need to check out consisting of a hybrid technique, in line with existing laws, utilizing AI models trained on unclassified commercially available data and improved with classified details. This amalgam of innovation and conventional intelligence gathering could result in an AI entity providing instructions to imagery, signals, open source, and measurement systems on the basis of an incorporated view of normal and anomalous activity, automated images analysis, and automated voice translation.

To speed up the shift, intelligence leaders need to promote the benefits of AI combination, highlighting the improved abilities and effectiveness it offers. The cadre of newly selected chief AI officers has actually been developed in U.S. intelligence and defense to act as leads within their companies for promoting AI innovation and removing barriers to the innovation's application. Pilot tasks and early wins can develop momentum and self-confidence in AI's capabilities, motivating more comprehensive adoption. These officers can utilize the knowledge of nationwide labs and other partners to check and fine-tune AI models, guaranteeing their effectiveness and security. To institutionalize change, leaders ought to produce other organizational incentives, consisting of promotions and training opportunities, to reward innovative approaches and those staff members and systems that show reliable use of AI.

The White House has actually developed the policy required for making use of AI in national security firms. President Joe Biden's 2023 executive order relating to safe, safe and secure, and reliable AI detailed the guidance required to fairly and securely use the technology, and National Security Memorandum 25, issued in October 2024, is the country's fundamental technique for utilizing the power and handling the dangers of AI to advance nationwide security. Now, Congress will need to do its part. Appropriations are required for departments and agencies to create the facilities required for development and experimentation, conduct and scale pilot activities and evaluations, and continue to purchase evaluation abilities to ensure that the United States is constructing trustworthy and high-performing AI technologies.

Intelligence and military communities are dedicated to keeping humans at the heart of AI-assisted decision-making and have actually produced the structures and tools to do so. Agencies will need standards for how their analysts need to utilize AI designs to make certain that intelligence items satisfy the intelligence neighborhood's requirements for reliability. The federal government will also require to maintain clear assistance for dealing with the information of U.S. people when it pertains to the training and use of big language models. It will be necessary to stabilize using emerging technologies with safeguarding the privacy and civil liberties of citizens. This means enhancing oversight systems, upgrading pertinent structures to show the capabilities and dangers of AI, and promoting a culture of AI advancement within the nationwide security apparatus that harnesses the capacity of the innovation while protecting the rights and liberties that are fundamental to American society.

Unlike the 1950s, when U.S. intelligence raced to the forefront of overhead and satellite images by developing much of the crucial innovations itself, winning the AI race will require that neighborhood to reimagine how it partners with personal market. The personal sector, which is the main ways through which the federal government can recognize AI development at scale, is investing billions of dollars in AI-related research, information centers, and computing power. Given those companies' developments, intelligence agencies ought to prioritize leveraging commercially available AI designs and refining them with categorized data. This method makes it possible for the intelligence neighborhood to quickly expand its capabilities without needing to start from scratch, enabling it to remain competitive with foes. A recent cooperation between NASA and IBM to create the world's biggest geospatial foundation model-and the subsequent release of the design to the AI neighborhood as an open-source project-is an exemplary demonstration of how this kind of public-private collaboration can work in practice.

As the national security neighborhood incorporates AI into its work, it must guarantee the security and strength of its designs. Establishing requirements to release generative AI securely is important for maintaining the stability of AI-driven intelligence operations. This is a core focus of the National Security Agency's brand-new AI Security Center and its collaboration with the Department of Commerce's AI Safety Institute.

As the United States faces growing rivalry to form the future of the international order, it is urgent that its intelligence agencies and military capitalize on the country's development and management in AI, focusing particularly on big language models, to provide faster and more appropriate details to policymakers. Only then will they gain the speed, breadth, and depth of insight needed to navigate a more complicated, competitive, and content-rich world.