The expressions arms race and ARM architecture may look similar in written English, but they belong to very different subject areas. In American English, capitalization, surrounding words, and subject context help distinguish the two.
An arms race generally describes a competitive process in which governments, organizations, or other opposing parties attempt to increase or improve weapons, military capabilities, or comparable strategic capabilities in response to one another.
The Central Intelligence Agency's historical records use the expression literally when discussing military competition, including a 1963 intelligence memorandum titled The Israeli-Egyptian Arms Race.
The expression may also be used figuratively. The Federal Bureau of Investigation has described competition between cybercriminals and law enforcement as a "cyber arms race." The U.S. Department of Justice has also used the phrase "AI arms race for cybersecurity" in describing competition involving emerging cyber capabilities.
In ordinary American English, arms race is normally written in lowercase because it is a common noun rather than a proper name.
Examples:
ARM architecture is a computing expression. It refers to a family of processor instruction-set architectures used in computers, mobile devices, embedded systems, and other electronic equipment.
The National Institute of Standards and Technology identifies ARM as an example of an instruction set architecture (ISA). NIST technical material discussing ARM Cortex-M4 describes it as a 32-bit ARM architecture and characterizes the Cortex-M family as a reduced instruction set computer, or RISC, architecture.
In this context, the word architecture does not refer to military organization or weaponry. It describes the design rules and instruction model that determine how software communicates with a processor.
CISA also uses the term architecture extensively in cybersecurity to describe the organization and design of computing systems, such as enterprise, solution, cloud, and zero-trust architectures.
When referring to the processor family, ARM is conventionally capitalized in technical material. The surrounding computing terminology normally makes its meaning clear.
Examples:
| Characteristic | Arms Race | ARM Architecture |
|---|---|---|
| Primary field | Military affairs, international relations, security, or figurative competition | Computer engineering and computer architecture |
| Meaning of "arms/ARM" | Weapons or strategic capabilities | A processor instruction-set architecture/family |
| Typical capitalization | arms race |
ARM architecture |
| Literal warfare connection | Yes, when describing competition involving weapons or military capability | No. It is a computing term. |
| Cybersecurity connection | May be used metaphorically to describe escalating competition between attackers and defenders | ARM-based processors may run systems that require cybersecurity protections |
| Example | "The nations entered an arms race." | "The program was compiled for an ARM architecture." |
The similarity between the words arms and ARM does not establish a technical relationship between the expressions.
In an arms race, the word arms refers to weapons or competitive strategic capabilities. In ARM architecture, ARM identifies a computing architecture.
Cybersecurity can contain both kinds of terminology at the same time. A security system could physically operate on an ARM-based processor while its developers figuratively describe competition with attackers as a cyber arms race.
For example:
"Engineers improved defensive software running on an ARM architecture as part of an ongoing cyber arms race with increasingly capable attackers."
In that sentence, ARM architecture describes the computer platform, while cyber arms race describes competitive escalation.
Under ordinary American English and U.S. technical usage, the terms should remain separate. Arms race concerns competition and escalation, traditionally involving weapons but sometimes used metaphorically. ARM architecture concerns computer processor design and instruction sets. Capitalization and context provide the clearest distinction.
Central Intelligence Agency. (1963, December 6). The Israeli-Egyptian arms race. CIA Freedom of Information Act Electronic Reading Room. https://www.cia.gov/readingroom/document/cia-rdp79t00429a001200060004-7
Cybersecurity and Infrastructure Security Agency. (n.d.). Executive Order on improving the nation's cybersecurity. https://www.cisa.gov/topics/cybersecurity-best-practices/executive-order-improving-nations-cybersecurity
Federal Bureau of Investigation. (2009, October 7). Operation "Phish Phry": Major cyber fraud takedown. https://archives.fbi.gov/archives/news/stories/2009/october/phishphry_100709
National Institute of Standards and Technology. (2020). Quantities and units for software product measurements (NISTIR 8289). https://nvlpubs.nist.gov/nistpubs/ir/2020/NIST.IR.8289.pdf
National Institute of Standards and Technology. (n.d.). Instruction set architecture. Computer Security Resource Center Glossary. https://csrc.nist.gov/glossary/term/instruction_set_architecture
National Institute of Standards and Technology. (2019). SIKE Round 2 speed record on embedded processors. https://csrc.nist.gov/CSRC/media/Events/second-pqc-standardization-conference/documents/accepted-papers/seo-sike-paper.pdf
U.S. Department of Justice. (n.d.). Justice Management Division program. https://www.justice.gov/jmd/program