Propaganda images reveal how terrorists think

Researchers have used artificial intelligence to analyse over 30,000 propaganda images produced by the Islamic State (IS) between 2014 and 2022. 

A group of IS soldiers with weapon and an IS flag.
From Diyala, Iraq, in the spring of 2022: a group of IS soldiers swears Bay’ah – an oath of allegiance to the new IS caliph. This is one of the 30,000 IS images that have now been analysed. 

Propaganda is an important part of the operation of a terrorist organisation. They use text, video, audio, and images to not only spread fear, but also to recruit and build their image internationally. By using the internet and social media, even terrorist groups with limited resources can reach a global audience.

For researchers studying terrorist groups, propaganda material is an important source in understanding who the actors are, what they want, and how they operate. The challenge for researchers is the sheer amount of propaganda that is being produced, which makes it almost impossible to get an overview through manual means. 

Because IS controlled a large area in Syria and Iraq for several years, they gained more resources and more members who could work as ‘journalists’ or content producers. Propaganda was clearly a prioritised area in the organisation, and the battles they were involved in provided them with plenty of raw material. 

‘IS stood out because their propaganda was better than the content of earlier terrorist groups. They managed to create a “brand” and a linguistic and visual expression that appealed to the youth, combined with extremely brutal content where close-ups of killings were almost a given,’ explains Skretting. 

Although the group is now marginalised in its original core areas in Syria and Iraq, its branches in other parts of the world have made significant progress – especially in Africa. IS still maintains a unified and substantial propaganda apparatus. 

IS – a pioneer in terrorist propaganda 

The researchers have based their work on the extensive image material published on IS’s official channels over the years. The dataset, consisting of 30,000 images, was fetched from an IS bot on Telegram. 

‘IS has revolutionised how non-state actors and terrorist groups conduct propaganda. This is considered one of the keys to the group’s success,’ says researcher Vidar Skretting. He co-authored the report with colleagues and AI researchers Mathias Bynke and Bernt Ivar Nødland.

The rise and fall of IS 

In 2013, a group called the Islamic State in Iraq and the Levant (ISIL), managed to occupy large parts of Syria and Iraq. In 2014, they seized Mosul, Iraq’s second-largest city. Shortly thereafter, ISIL declared that they had established a new caliphate, to which all Muslims were obliged to submit. At the same time, they removed the geographical reference from their name and adopted ‘the Islamic State’ as their designation, or IS for short. 

From 2014 to 2018, IS gained international notoriety for its brutal conduct. They implemented a reactionary form of Islamic law and carried out executions and amputations of prisoners, genocides against minorities, public slave trading, and numerous terrorist attacks on civilian targets in the Middle East, Asia, Africa, and Europe. 

At the same time, they wanted to show that they had established a true Islamic ‘state’. The group emphasised creating a civil state apparatus and established institutions for law and order, tax collection, education, and healthcare. In addition to violence and brutality, the ‘civil’ side of IS became a recurring theme in the group’s propaganda production. 

IS reached its territorial peak in 2015, when the group controlled about one-third of both Iraq and Syria. After this, IS was gradually pushed back by an international coalition. The last IS-controlled area was captured by Kurdish forces in early 2019. Thus, IS went from being a state-like entity back to an underground organisation.

A dedicated IS social media 

Initially, IS used established social media platforms like Twitter (X), Facebook, YouTube, and, later, the Telegram app to spread their content. 

‘The spread of propaganda on social media is one of the reasons so many foreign fighters from around the world joined IS,’ says Skretting. 

‘Today, it’s much more difficult for IS to reach out. Major social media platforms remove such content almost immediately after it’s posted. However, IS still manages to disseminate its content effectively through other channels, and it’s relatively easy for sympathisers to find them,’ Skretting adds. 

IS spreads its propaganda through three main channels: ‘private’ social media platforms that they run on their own servers, bots on Telegram, and regular indexed websites. 

‘The private social media platforms IS runs have been active for years. Telegram bots and the indexed websites are regularly taken down by administrators and authorities but are usually reopened by IS under different names shortly thereafter,’ says Skretting. 

Two researchers present at an FFI event.
Mathias Bynke (to the left) and Vidar Skretting (to the right) present their report during an FFI event on 12th of December 2023. Photo: FFI / Anders Halvorsen Fehn.

Sorting 30,000 images 

In their work, the researchers used a machine learning model from OpenAI called Contrastive Language-Image Pre-training (CLIP). The model is trained to compare images with text. 

CLIP has been trained by collecting enormous amounts of images and corresponding captions from the web. By comparing millions of images and captions, the model has gradually learned how images can be described in words and, conversely, how an image might look based on the text describing it. 

By running the 30,000 images through CLIP, the researchers could, for example, ask the model to find all images showing a ‘person praying’ or ‘combat action.’ However, instead of manually defining the categories in which the images should be sorted, the researchers used a clustering algorithm to group the images by theme. 

‘We didn’t know in advance which descriptions would suit various themes. When you provide the CLIP model with a limited number of categories, an image of a man diving into a river could easily end up in the category “image of someone praying”,’ explains Mathias Bynke.

Illustration of the Clip model.
The Clip model.

The CLIP model translates an image into an embedding vector, that is, a sequence of numbers. It also translates the image captions into a sequence of numbers. If you have an image of apples, the number sequence for the image should be approximately the same as the number sequence for the text ‘image of apples.’ 

The number sequence that CLIP generates for each image can be converted into coordinates in a coordinate system. This gives each image a position on a map. Then, an algorithm can cluster these points into groups. You can choose how many clusters you want, and the algorithm organises the images for you. 

When the researchers asked the algorithm to create two clusters, one group was dominated by military images, and the other by civilian images. 

In the end, they settled on 14 different named clusters: combat scenes, soldiers outside combat, enemy bodies, executions and killings, close-ups of individual fighters, weapons, civilian crowds, peaceful scenes, collapsed buildings, civilian casualties, food, public works, crafts and industrial production, and burning cigarette packets.

What have we learnt about IS from the images? 

Once the images were sorted, the researchers wanted to answer the following question: How has IS’s image propaganda evolved from 2014 to 2022, and what does this development tell us about IS as a group? 

‘The images IS publishes, the number of images published, and where they are published give us an indication of what IS is doing, how active they are, and in which areas they’re active,’ says Skretting. 

He believes that insight into the development of terrorist organisations can be important in predicting their direction and strategies: By looking at the images from the African provinces where IS is on the rise, we might gain insight into where IS is heading in the future. 

The analysis shows that in the early years (2014–2018), IS presented itself as both a military organisation and a civil state apparatus. This is linked to their attempt to build a ‘real’ Islamic state. 

Since 2019, the focus has shifted. IS now presents itself almost exclusively as a military movement and insurgent group. 

Two men working.
An example of one of the ‘civil’ images of IS’s Iraq and Syria branch, in the ‘public works’ cluster.

2015 was the year IS was most active in terms of propaganda. Nearly half of all the images in the dataset are from this year, which coincides with the time when IS was at the height of its power in Syria and Iraq. Thus, most of the images in the material are from Syria and Iraq. 

‘The group has been defeated in their previous primary areas but is rebuilding in Africa. We also see this trend in the image material,’ says Skretting. 

Activity was at a low point in 2020 but has since increased. The majority of images are now published in West and Central Africa. These differ from those produced in the Middle East in several ways. 

‘There is much less focus on individual jihadists and martyrs. At the same time, the propaganda images are generally more brutal. They’re dominated by military content, reflecting the fact that they are most active as a military organisation,’ says Skretting. 

Further development of the methods is needed 

The researchers conclude that the combination of CLIP and clustering algorithms is an effective method for quickly analysing large amounts of propaganda images. 

‘The division into clusters was not perfect. A certain proportion of the images appeared misclassified, and we had to implement mechanisms to filter these out. But the method helps to speed up the analysis,’ says Skretting. 

He emphasises that the combination of CLIP and clustering algorithms can be used for more than analysing terrorist images. 

‘The method is relatively simple and scalable. You can easily use it to sort image collections far larger than 30,000 images into thematic clusters. The method is particularly useful if you don’t know a lot about the content of the image material in advance.’ 

The researchers believe we should further develop machine learning methods to map propaganda from state and non-state actors. 

‘This type of method is not only relevant for image analysis but also for getting an overview of large text, audio, and video materials,’ stresses Mathias Bynke. 

FFI-Report 2026

Development of off-road autonomy for unmanned ground vehicles

Unmanned ground vehicles (UGVs) are increasingly recognized as assets that can benefit military operations, offering the potential to reduce risk to personnel. Having autonomous capabilities on board UGVs can further enhance their utility by reducing operator workload and enabling more mission capabilities. This report describes the development of a modular autonomy stack for UGVs and its evaluation through experiments in off-road terrain. The autonomy stack integrates three core capabilities – perception, motion planning, and trajectory tracking – implemented on our Milrem Themis UGV platform, Tor. This autonomy system relies on onboard sensors and local mapping to navigate without predefined paths or precise satellite positioning, aiming to address the fundamental challenge of autonomous terrain traversability. To measure performance, we defined a set of benchmark routes representing diverse terrain types, from open fields and dirt roads to narrow trails and forests. These routes serve as structured test cases for assessing autonomy requirements and identifying limitations of our system. We have conducted experiments to assess our autonomy system at FFI’s LandX demonstrations and in long-range trials. The experiments revealed that Tor with our autonomy stack can successfully navigate simple environments such as open terrain and wide vehicle trails, but struggles in complex scenarios involving dense vegetation and narrow passages. Key limitations include the lack of semantic terrain classification and robust decision making in challenging scenarios. Predictability and reliability remain major challenges, with decisions influenced by randomness rather than consistent reasoning. While our current autonomy stack is not yet ready for operational use, it provides a solid foundation for continued research and experimentation. The benchmark routes and evaluation methodology offer a repeatable framework for measuring progress, ensuring that future iterations move closer to the ultimate goal: UGVs capable of operating effectively and autonomously in demanding environments.
FFI-Report 2026

Forsvarssektorens miljø- og klimaregnskap for 2025

The reports in the series ‘Environmental reporting in the Norwegian defence sector’ are published annually by the Norwegian Defence Research Establishment (FFI). These present data reported by the defence sector and associated partners to the Norwegian Defence Environmental Database (NDED). The reports provide an overview of results and trends for environmental aspects of the defence sector’s operations, including waste production, energy expenditure, fuel consumption, use of ammunition, water consumption, consumption of chemicals, and acute pollution. Greenhouse gas emissions are presented in a greenhouse gas inventory. Waste generation is reported to the NDED by associated waste management companies contracted within the various regions of the Norwegian Defence Estate Agency (NDEA). The total amount of waste produced in 2025 was 18 320 tons, which represents an 8 % increase compared to 2024. The degree of waste sorting was 64,8 %, a reduction of 0,3 percentage points compared to the previous year. 31.4 % of the waste was recycled, while 59.3 % was processed with energy recovery. Energy consumption associated with the defence sector’s buildings and properties in Norway is reported by the NDEA through statistics from suppliers. The total energy consumption in buildings and other properties is estimated to 702.5 GWh in 2025. This represents a marginal reduction compared to 2024. Of the energy used in 2025, 96 % came from renewable sources, which is about the same as the previous year. Fuel consumption connected to the use of vehicles, aircraft, vessels, and auxiliary power units was 100 066 m3 in 2025. This is an increase by approximately 2.4 % compared to 2024. Fuel consumption on aircraft and vessels represents 90.1 % of the total fuel consumption in the defence sector. The use of ammunition is reported and specified on a digital form (DBL-750) by organizational unit, shooting range, and ammunition type. A total of 22 223 554 units of ammunition were reported used in 2025, which is 8.4 % more than in 2024. The degree of reporting is the relationship between ammunition provided to the Armed Forces and the proportion reported being used. The degree of reporting in 2024 was 87 % (excluding blank ammunition), which is an increase of 2 percentage points compared to 2024. The reported use of lead-based small arms ammunition has decreased with 163 000 units, or 12 %, from 2024 to 2025. The estimated emission of lead is 5.5 tons in 2025, compared to 6.1 tons in 2024, a decrease of 11 %. Water consumption is reported by the NDEA based on measured and estimated volumes. The total water consumption in 2025 was 2.27 million m3, an increase of 4 % compared to 2024. The use of chemicals is reported from establishments within the sector where chemicals are used on a regular basis. However, with the exception of de-icing fluids, it is insufficiently reported. 40 517 kg of aircraft deicing and 292 700 kg of runway deicing fluids were reported in 2025. The relative usage of urea to the total usage of runway deicing fluids was 96 % in 2025, an increase of 34 percentage points compared to 2024. The greenhouse gas inventory consists of reported fuel and energy use and emission factors associated with the various materials. Emissions from the defence sector’s activities were estimated to 264 512 tons of CO2-equivalents in 2025 inscope 1 and 2, and 2 095 522 tons of CO2-equivalents when including indirect emissions not mandatory to reporting (scope 3). Emissions in scope 1 and 2 have increased by 2.4 % compared to 2024. There is a close relation between the demands and prerequisites which dictate the sector’s volume and pattern of activity and its total impact on the environment. It is therefore relevant to assess this impact in light of the tasks assigned to the defence sector within a dynamic political framework.
FFI-Report 2026

Producing an urban-wind field database with OpenFOAM – Work Package 6 of the CHIMERA project

The CHIMERA project (Comprehensive Hazard Identification and Monitoring systEm for uRban Areas) is based on developments in earlier research and innovation projects, i.e. EU-SENSE and EU-RADION, and aims to provide a technological improvement in the chemical, biological, radiological and nuclear (CBRN) hazard domain. Specifically, the goal is to develop software that can combine data from various sensor inputs with results from dispersion/backtracking models in a flexible manner, presented in a coherent graphical user interface. Part of the project, Work Package 6, involves the continued development of software for fast and reliable numerical predictions of CBRN dispersion and deposition, based on precomputed local-wind simulations. This report describes the meshing and simulation protocol developed in Task 6.2 of CHIMERA, presents the reasoning behind the most important modeling decisions, gives recommendations for usage, and shows a few examples of the application of the CHIMERA meshing and simulation protocol. A publicly available open-source software, OpenFOAM®, is the main component for meshing and simulation. Relevant literature for further insight into urban-wind modeling is also given in the report.
FFI-Report 2026

Hvordan forbedre Forsvarets evne til multidomeneoperasjoner? – utfordringer og kunnskapsbehov

Multidomeneoperasjoner (MDO) er en videreutvikling av fellesoperasjoner. Forsvaret skal omstilles fra å drive fellesoperasjoner til å drive multidomeneoperasjoner for å forbedre evnen til å møte fremtidige trusler og øke evnen til å ta i bruk og utnytte nye og eksisterende teknologier. Denne rapporten dokumenterer en problemstruktureringsprosess som tar utgangspunkt i egenskaper som kjennetegner multidomeneoperasjoner, analyserer hvordan disse kan påvirke Forsvarets operative evne, og peker på utfordringer og kunnskapsbehov som bør prioriteres for å støtte utviklingen av MDO i Forsvaret. En datasentrisk tilnærming til operasjoner trekkes frem som grunnleggende for å realisere MDO. Høykvalitetsdata og digitale, interoperable systemer er avgjørende for å støtte tidsriktige og informerte plan- og beslutningsprosesser, og effektiv gjennomføring av operasjoner. Overgangen fra fellesoperasjoner til MDO vil kreve endringer innen teknologi, prosesser, organisasjon og kompetanse. Utviklingen av evne til å gjennomføre MDO er avhengig av en samordnet utvikling innen disse områdene. I rapporten presenteres en systemanalyse som vurderer hvordan de ulike funksjonelle områdene (fellesfunksjonene) påvirkes av identifiserte MDO-egenskaper. Analysen viser at alle de funksjonelle områdene påvirkes, men at behovene for endringer er størst innen funksjonene kommando og kontroll (K2) og etterretning, overvåkning og rekognosering (ISR). På bakgrunn av denne analysen trekker vi frem en del utfordringsområder hvor vi mener det er et stort behov for kunnskapsutvikling for å støtte utviklingen av MDO, både nasjonalt og i alliansesammenheng. Eksempler på sentrale områder er utvikling av datasentriske plan- og beslutningsprosesser, økt interoperabilitet, videreutvikling av desentralisert ledelse i lys av MDO og effektiv målbekjempelse på tvers av domener. Det er også behov for kunnskap om hvordan vi bedre kan integrere og utnytte rom- og cyberdomenene, elektronisk krigføring og informasjonsomgivelsene. Andre eksempler på utfordringsområder er hvordan vi bedre kan tilrettelegge for innovasjon og økt samarbeid med sivile aktører. Disse, sammen med flere andre utfordringsområder som beskrives i rapporten, vil påvirke blant annet trenings- og kompetansebehov og utviklingen av kapabiliteter og kapasiteter for MDO. Utviklingen av evne til MDO bør skje gradvis, helhetlig og kunnskapsbasert ved blant annet å benytte scenariobaserte analyser, eksperimentering, erfaringslæring, simuleringer og krigsspill for å vurdere operative konsekvenser av ulike tiltak for å øke evnen til MDO.
FFI-Report 2026

Ekstern kvalitetssikring av Forsvarets investeringsprosjekter – hva kan vi lære?

Forsvarsløftet forutsetter omfattende investeringer i materiell og i eiendom, bygg og anlegg (EBA). Store investeringsprosjekter i forsvarssektoren følger statens prosjektmodell, noe som fører til at både konseptvalg og forprosjekt gjennomgår ekstern kvalitetssikring før prosjektene gjennom-føres. Denne studien undersøker hva forsvarssektoren kan lære av eksterne kvalitetssikringer av forsvarssektorens investeringer. Målet er å ta fram kunnskap og innsikt som kan benyttes i arbeidet med å videreutvikle metode og maler for investeringsprosjekter. Studien bygger på analyser av kvalitetssikringsrapportene fra forsvarssektorens materiell- og EBA-prosjekter i perioden fra 2019 til 2025. Studien viser at eksterne kvalitetssikrere systematisk legger til grunn høyere usikkerhet i kostnadsestimatene enn prosjektet selv, noe som indikerer at kvalitetssikringsprosessen i større grad fanger opp og tar høyde for usikkerhet. I sine vurderinger av konseptvalgutredninger peker de eksterne kvalitetssikrerne gjennomgående på at det er et forbedringspotensial i målformuleringer, mulighetsstudier og alternativanalyser. Målene er gjerne for generelle og beskrevet på en måte som gjør det vanskelig å verifisere oppnåelse. Mulighetsstudiene har gjerne en mangelfull beskrivelse av hvordan mulighetsrommet er utledet og redusert, mens alternativanalysene har mangelfulle samfunnsøkonomiske analyser. Studien finner også at eksterne kvalitetssikrere vurderer at konseptvalgutredningene dokumenterer og forklarer forutsetninger og mellomregninger for dårlig. Dette gjelder særlig mulighets- og alternativanalyse, og gjør det krevende å ettergå analysene som er gjort. I tillegg er grensesnitt mot andre prosjekter og aktører, ifølge kvalitetssikrerne, ofte for dårlig behandlet og beskrevet i konseptvalgutredningene. De fleste merknadene i kvalitetssikringen av forprosjekter omhandler sentrale styrings- og gjennomføringsforhold. Eksterne kvalitetssikrere peker særlig på mangler knyttet til endringslogg, kontraktsstrategi, gevinstrealiseringsplan, gjennomføringsstrategi, organisering og ansvars-deling, og dessuten oppfølging av konseptvalg og forventet nytte. Basert på de identifiserte forbedringspunktene, anbefaler vi at forsvarssektoren tar grep for å forbedre etterprøvbarheten og kvaliteten i kostnadsestimater gjennom å enda tydeligere dokumentere forutsetninger. Videre anbefaler vi at det tas grep for å bedre målformuleringer i prosjektene, at gevinstrealiseringsplaner forbedres i henhold til gjeldende veiledere, og at bruken av endringslogg systematiseres og benyttes mer aktivt.
FFI-Report 2026

Anskaffelsen av 212CD-ubåtene i lys av forsvarssektorens klima- og bærekraftsambisjoner

De senere årene har forsvarssektoren vært tydelig på at den skal ta større klima- og miljøansvar og bidra til at Norge når FNs bærekraftsmål og Norges klima- og miljømål. I 2022 lanserte sektoren en egen klima- og miljøstrategi for å redusere klimaavtrykk og negativ miljøpåvirkning og for å tilpasse sektoren til kommende klimaendringer. Strategien ble konkretisert i Handlingsplan 2023–2030. I 2021 signerte Norge en anskaffelseskontrakt om nye 212CD-ubåter fra det tyske verftet TKMS, for å erstatte Ula-klassen. Anskaffelsen gjennomføres i samarbeid med Tyskland. Forsvarsmateriell Maritime kapasiteter (FMA MARKAP) ga i 2025 Forsvarets forskningsinstitutt (FFI) i oppdrag å vurdere hvordan denne anskaffelsen og tilhørende kai- og vedlikeholdsanlegg i Skværvika samsvarer med sektorens klima- og miljøstrategi. FFI har analysert anskaffelsen i alle faser av materiellets levetid og vurdert både ubåtanskaffelsen og den nye infrastrukturen opp mot eksisterende løsninger for Ula-klassen. Utslipp ved produksjon av 212CD-ubåtene er beregnet av FFI til ca. 9000–10 000 tonn CO₂-ekvivalenter (CO2e) per ubåt. Dette er omtrent tre ganger mer enn for Ula-klassen. I drift er utslippene fra den norske 212CD-flåten beregnet til ca. 4700 tonn CO2e per år, hvor 86 % av utslippene skyldes forbrenning av drivstoff i dieselgeneratorene. De mest effektive klimatiltakene vil være å unngå høyere seilingshastighet enn nødvendig og på sikt erstatte dagens drivstoff med alternativer som har lavere utslipp. Lokal produksjon av hydrogen til luftuavhengig fremdrift kan ytterligere redusere utslippene med rundt 600 tonn CO2e per år. I tillegg vil nye teknologiske muligheter i form av planlegging av de mest energieffektive seilingsrutene bidra til lavere utslipp og styrke den operative evnen. Det er ikke stilt spesifikke krav i 212CD-kontrakten om å unngå stoffer regulert gjennom REACH-forordningen eller om å levere en fortegnelse over farlige materialer (Inventory of Hazardous Materials – IHM). Vi forventer likevel at dette kommer. For Ula-klassen finnes det få ombruks- og avhendingsplaner. Vi mener tilgang til IHM er viktig for forsvarlig avhending. I Skværvika bygges kai- og vedlikeholdsanlegget av Forsvarsbygg etter byggteknisk forskrift TEK17. Klimagassutslippene knyttet til byggingen av de fire kaiplassene er beregnet til ca. 9000-10 500 tonn CO2e. Tilsvarende beregninger vil bli gjennomført for vedlikeholdsanlegget når dette er ferdigstilt. Anlegget skal driftes ved bruk av egenprodusert energi fra sjøvannsbasert fjernvarme og vil bli tilrettelagt for etablering av solcelleanlegg. Forsvarsbygg følger i stor grad sektorens klima- og miljøkrav. Sprengningsarbeidet ved bygging av kaianlegget har imidlertid overskredet kravene til bruk av eksplosivmengde og støynivå.