February 21, 2024
Comments on the Advanced Computing/Supercomputing IFR: Export Control Strategy & Enforcement for AI Chips
This comment represents the views of the authors alone and not those of their employers.1 The authors commend the Bureau of Industry and Security (BIS) for the Advanced Computing/Supercomputing interim final rule (AC/S IFR). The AC/S IFR takes essential steps to continue to improve export controls in this domain. The authors welcome the opportunity to comment on the AC/S IFR, with the hope of informing further refinements of BIS’ approach to export controls on AI-related technologies. Comments focus specifically on the following three areas, and include text and findings from previous research by the authors:2
- Strategy: The need for an explicit strategy for export controls on AI-related technologies, such that controls on semiconductor manufacturing equipment, AI chips, supercomputers, infrastructure-as-a-service, and AI models can be aligned toward the same goals.
- Enforcement for AI chips: Highlighting promising interventions for addressing controlled AI chip diversion: creating new country groups that reflect AI chip diversion risk, and implementing a chip registry and random chip inspection program to effectively address diversion.
- The definition of “data center” AI chips: Evaluating BIS’s proposed high-level definition of data center AI chips, used to distinguish such chips from consumer-grade variants, and emphasizing that the problem of distinguishing the two is to some extent intractable. This is a response to Section D, question 5 within the AC/S IFR.
Export controls on AI-related technologies will benefit from a more explicit strategy
How difficult is the enforcement challenge facing BIS, given the AI capabilities it seeks to restrict the PRC from accessing? The AC/S IFR, building on the October 7th, 2022 IFR, lists the following capabilities as those the export controls aim to restrict:3
- China’s military modernization, e.g. planning, logistics
- High-tech surveillance applications
- Weapons of mass destruction (WMD) design and execution
- Advanced weapons design and execution, such as autonomous combat systems, enhanced battlefield situational awareness, target recognition, and cyber attacks.
This list of capabilities implies that export controls should seek to restrict access to a wide range of AI systems, with varying development requirements in terms of export-controlled hardware. This is summarized in Figure A below. As noted by BIS, large dual-use AI foundation models (the first category in Figure A below), with a wide variety of potential capabilities of concern, are particularly problematic.4 To cost-effectively train a cutting-edge model of this kind requires thousands to tens of thousands of export-controlled chips, making enforcement relatively tractable. However, cutting-edge application-specific AI models used in areas such as code generation, protein sequence prediction, image classification, and robotic navigation currently require many fewer export-controlled chips to train (tens to hundreds). These models are likely to increasingly possess capabilities highly relevant to the kinds of capabilities BIS seeks to restrict. Preventing actors in the PRC from acquiring the relatively small number of export-controlled chips required to train these models poses a highly difficult problem for enforcement. In a recent paper, the authors estimate that by 2025, assuming no significant changes in BIS’ enforcement approach, PRC-linked actors may be able to smuggle on the order of thousands to tens of thousands of chips per year if they aim to do so.5 Further, given their relatively small computational requirements, application-specific models in BIS’ domains of concern can be fairly cost-effectively developed with non-controlled hardware, such as consumer GPUs used for gaming.
Download the Full Text.
- As a research and policy institution committed to the highest standards of organizational, intellectual, and personal integrity, CNAS maintains strict intellectual independence and sole editorial direction and control over its ideas, projects, publications, events, and other research activities. CNAS does not take institutional positions on policy issues and the content of CNAS publications reflects the views of their authors alone. In keeping with its mission and values, CNAS does not engage in lobbying activity and complies fully with all applicable federal, state, and local laws. CNAS will not engage in any representational activities or advocacy on behalf of any entities or interests and, to the extent that the Center accepts funding from non-U.S. sources, its activities will be limited to bona fide scholastic, academic, and research-related activities, consistent with applicable federal law. The Center publicly acknowledges on its website annually all donors who contribute. ↩
- Tim Fist and Erich Grunewald, “Preventing AI Chip Smuggling to China”, Center for a New American Security (October 2023), https://www.cnas.org/publications/reports/preventing-ai-chip-smuggling-to-china; Erich Grunewald and Michael Aird, “AI Chip Smuggling into China: Potential Paths, Quantities, and Countermeasures”, Institute for AI Policy and Strategy (October 2023), https://www.iaps.ai/research/ai-chip-smuggling-into-china. ↩
- See Sections A & C within “Implementation of Additional Export Controls: Certain Advanced Computing Items; Supercomputer and Semiconductor End Use; Updates and Corrections”, Supplementary Information, 88 Fed. Reg. 73458, October 25, 2023, https://www.federalregister.gov/d/2023-23055/p-12. ↩
- “Implementation of Additional Export Controls: Certain Advanced Computing Items; Supercomputer and Semiconductor End Use; Updates and Corrections”, Supplementary Information Section C, 88 Fed. Reg. 73458, October 25, 2023, https://www.federalregister.gov/d/2023-23055/p-182. ↩
- See Tim Fist and Erich Grunewald, “Preventing AI Chip Smuggling to China”, Center for a New American Security (October 2023), https://www.cnas.org/publications/reports/preventing-ai-chip-smuggling-to-china, which builds on Erich Grunewald and Michael Aird, “AI Chip Smuggling into China: Potential Paths, Quantities, and Countermeasures”, Institute for AI Policy and Strategy (October 2023), https://www.iaps.ai/research/ai-chip-smuggling-into-china. ↩
More from CNAS
-
Trump Must Rebalance America’s AI Strategy
The disagreements about AI progress are so fundamental and held with such conviction that they have evoked comparisons to a “religious schism” among technologists....
By Bill Drexel & Ruby Scanlon
-
Response to Request For Comment: “Bolstering Data Center Growth, Resilience, and Security”
CNAS experts emphasize the importance of data centers for artificial intelligence...
By Janet Egan, Geoffrey Gertz, Caleb Withers & Grace Park
-
Sovereign AI in a Hybrid World: National Strategies and Policy Responses
Going forward, the U.S. government will need to ensure that it continues to work with allies and partners as it attempts to mitigate the risks of international AI diffusion, e...
By Pablo Chavez
-
What Is ‘Sovereign AI’ Anyway?
Pablo Chavez, Adjunct Senior Fellow with CNAS's Technology and National Security Program, joins POLITICO Tech to discuss how the term “sovereign AI” gets thrown around a lot i...
By Pablo Chavez
In October, 2023, the Bureau of Industry and Security issued a request for information as part of the latest round of updates to U.S. export controls on advanced semiconductors. CNAS experts co-authored the following response.