IMG_20220512_145341

Chemical and biological weapons (CBWs) have been tools of warfare for a long time. They have borne disastrous results in both World Wars and several conflicts worldwide. Due to their lethality, they are considered a Weapon of Mass Destruction (WMD) by the United Nations. Despite a ban imposed on their use, this threat is far from over. In fact, emerging technologies have added new dimensions to this type of warfare.

Recently the use of AI in drug discovery has sparked a new debate regarding its role in chemical and biological warfare. The phenomena was discussed at the Spiez Convergence conference organised by the Swiss Federal Institute for Nuclear, Biological and Chemical Protection, Spiez Laboratory. The conference aims to bring together the scientific and disarmament group of global experts to evaluate the status of chemical and biological fields, assess potential challenges and devise measures to effectively manage existing threats. Among other companies, Collaborations Pharmaceuticals, a drug discovery company, was invited to present its findings regarding misuse of drug-discovery technology. The company employs various Machine Learning (ML) models to assess the role of AI in virtually designing new compounds for drug development. By doing so, they assess the toxicity level of the newly discovered compounds and filter out the more dangerous ones. To explore the potential misuse of AI in drug discovery, ML models were reversed to find toxic molecules instead of filtering them out. A software by the name of ‘MegaSyn’ was tasked to design toxic molecules using the available datasets. After experimenting, experts published a paper titled ‘Dual use of artificial-intelligence-powered drug discovery’ in Nature Machine Intelligence. The authors’ findings manifest the level of surprise and concern which prevailed afterwards. In less than six hours, approximately 40,000 new compounds were designed in the process. These compounds fell well within the perimeters of being a chemical weapon. What was shocking was their level of toxicity. The discovered molecules were not only new but also more detrimental than existing warfare agents. Many compounds were found to be even more harmful than VX, which remains one of the most potent nerve agents whose small amount is enough to cause death in minutes.

This highlights the relative ease with which such dangerous dual nature of AI can be accessed and exploited. The same ML models that can be used to assess the toxicity of chemical agents can also be used to design more lethal compounds that can act as CBWs. Advancement in these ML systems will inadvertently increase corresponding risks. The experiment implies that toxic datasets available in open source, coupled with coding and ML capabilities, can open pathways for designing such weapons.

To be fair, AI-driven chemical/biological warfare is not an immediate threat. The mentioned experiment remained confined to the virtual setup and did not include the actual synthesis of the toxic compounds themselves which remains a demanding task. Most of the chemical building blocks of such substances are also regulated. However, this is something that can become a reality in the future.

Given the vast number of commercial companies with the requisite capabilities and insufficient regulations, synthesis can become a possibility. It is equally worrisome that new retrosynthesis software tools are also improving simultaneously, making it easier to synthesise chemical/biological warfare agents by taking novel routes. Resultantly, national and international observing bodies can be circumvented to achieve such ends.

If this idea shapes turns into reality, it will become a critical challenge, particularly vis-Ă -vis non-state actors. The higher toxicity of such new ‘weapons’ also calls into question existing legal conventions regarding chemical/biological warfare and contests whether current frameworks are well-equipped to address this threat.

Hence, there is a need to closely look into this matter at the global level. The experts who conducted this experiment have acknowledged that it will be a challenging task to come up with a viable solution to counter such threats. The scientific community, experts, academia and policymakers need to engage in dialogue regarding the implications of such technologies. More resources need to be invested in enhancing cooperation between governments and biochemical industries for effective legal frameworks. It is also the responsibility of private industries to have stringent compliance standards. Moreover, concerned institutions should continue to convene more conferences similar to the Spiez Convergence to create awareness about such possible developments. It is likely that emerging technologies will continue to pose novel challenges for chemical and biological warfare. Hence, timely measures must be taken to mitigate the risks from dual use technologies.

Shaza Arif is a Researcher at the Centre for Aerospace & Security Studies (CASS), Islamabad, Pakistan. She can be reached at [email protected]

Image Source:  Sohn, Rebecca .2022, “AI Drug Discovery Systems Might Be Repurposed to Make Chemical Weapons, Researchers Warn”, Scientific American, April 2021,https://www.scientificamerican.com/article/ai-drug-discovery-systems-might-be-repurposed-to-make-chemical-weapons-researchers-warn/


Share this article

Facebook
Twitter
LinkedIn

Recent Publications

Browse through the list of recent publications.

The Cover-up: IAF Narrative of the May 2025 Air Battle

Even after one year since the India-Pakistan May war of 2025, the Indian discourse regarding Operation Sindoor remains uncertain under its pretence of restraint. The Pahalgam attack on 22 April, which killed 26 people, triggered an escalatory spiral. New Delhi quickly accused Pakistan-linked elements, while Islamabad refuted the allegation and demanded an independent investigation. On 7 May, India launched attacks deep inside Pakistan under what it later termed as Operation Sindoor. The political motive was intended to turn the crisis into coercive signalling by shifting the blame onto the enemy and projecting a sense of military superiority.
This episode, however, began to fray immediately as war seldom follows the intended script. Within minutes PAF shot down 7 IAF aircraft including 4 Rafales. On 8 May, Reuters reported that at least two Indian aircraft were shot down by a Pakistani J-10C, while the local government sources reported other aircraft crashes in Indian-occupied Jammu and Kashmir

Read More »

Why the IAF’s Post-Sindoor Spending Surge is a Sign of Panic

After Operation Sindoor, India is spending billions of dollars on new weapons. This is being taken by many people as an indication of military prowess. It is not. This rush to procure weapons is in fact an acknowledgement that the Air Force in India had failed to do what it was meant to do. The costly jets and missiles that India had purchased over the years failed to yield the promised results.

Sindoor was soon followed by India in sealing the gaps which the operation had exposed. It was reported that Indian Air Force (IAF) is looking to speed up its purchases of more than 7 billion USD. This will involve other Rafale fighter jets with India already ordering 26 more Rafales to the Navy in 2024 at an estimated cost of about 3.9 billion USD. India is also seeking long-range standoff missiles, Israeli loitering munitions and increased drone capabilities. Special financial powers of the Indian military were activated to issue emergency procurement orders. The magnitude and rate of these purchases speak volumes.

Indian media and defence analysts have over the years considered the Rafale as a game changer. When India purchased 36 Rafales aircrafts at an approximate cost of 8.7 billion USD, analysts vowed that the aircraft would provide India with air superiority over Pakistan. Operation Sindoor disproved all those allegations. Indian aircraft did not even fly in Pakistani airspace when the fighting started. India solely depended on standoff weapons that were launched at a safe distance. The air defence system of Pakistan, comprising of the HQ-9 surface-to-air missile system and its own fighters, stood its ground.

Read More »

May 2025: Mosaic Warfare and the Myth of Centralised Air Power

Visualise a modern-day Air Force commander sitting in the operations room, miles away from the combat zone, overseeing every friendly and enemy aircraft and all assets involved in the campaign. In a split second, he can task a fighter, reposition a drone, and authorise a strike. In today’s promising technological era, he does not even need an operations room; a laptop on his desktop will suffice. The situation looks promising as it offers efficiency, precision, and control. The term used for such operational control is ‘centralisation’, which has been made possible with advanced networking, integrating space, cyber, surveillance, artificial intelligence, and seamless communication, enabling a single commander to manage an entire campaign from a single node. Centralised command and control, championed by the Western air forces and then adopted by many others, has thus been seen as a pinnacle of modern military power.
The concept of centralisation, enabled by state-of-the-art networking, may seem promising, but it is nothing more than a myth.

Read More »