§7408 National Academy of Sciences Study on Computer and Network Security in Critical Infrastructures

Summary

The Director of the National Institute of Standards and Technology must arrange with the National Research Council to study weaknesses in the Nation’s computer and network infrastructure and recommend fixes. The study must review existing work on design, hardware, and software weaknesses and how systems depend on each other, identify gaps in technical ability and recommend research priorities and needed resources, and examine other key security topics, including industrial process controls. The study must start within 3 months after November 27, 2002, and the Director must send a report to the Senate Committee on Commerce, Science, and Transportation and the House of Representatives Committee on Science no later than 21 months after November 27, 2002. The public report must not include classified information. Up to $700,000 is authorized for this work.