Sec. 1632. Report on enhancement of software security for critical systems
285 words·~1 min read·
/bill/115/s/2987/pcs/section-1632·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Not later than March 1, 2019, the Principal Cyber Adviser to the Secretary of Defense and the Chief Information Officer of the Department of Defense shall jointly submit to the congressional defense committees a report on a study, based on the authorities specified in subsection (b), on the costs, benefits, technical merits, and other merits of applying the technology described in subsection
(c)to the vulnerability assessment and remediation of the following: Nuclear systems and nuclear command and control. A critical subset of conventional power projection capabilities. Cyber command and control. Other defense critical infrastructure The study required for purposes of subsection
(a)shall be conducted pursuant to the following: Section 1640 of the National Defense Authorization Act for Fiscal Year 2018 ( Public Law 115–91 ). Section 1650 of the National Defense Authorization Act for Fiscal Year 2017 ( 10 U.S.C. 2224 note). Section 1647 of the National Defense Authorization Act for Fiscal Year 2016 ( Public Law 114–92 ; 129 Stat. 1118). The technologies described in this subsection are the following: Technology developed and used by Combat Support Agencies of the Department of Defense to discover flaws and weaknesses in software code by inputting immense quantities of pseudo-random data (commonly referred to as fuzz ) to identify inputs that cause the software to fail. Cloud-based software fuzzing-as-a-service to continuously test the security of Department of Defense software repositories at large scale. Formal programming and protocol language for software code development and other methods and tools developed under the High Assurance Cyber Military Systems program of the Defense Advanced Research Projects Agency. The binary analysis and symbolic execution software security tools developed under the Cyber Grand Challenge of the Defense Advanced Research Projects Agency.
Connectionstraces to 3
Traces to 3 documents
1 reference not yet in our index
- 129 Stat. 1118
Citation graph
cites case law
Sec. 1632
Report on enhancement of software security for critical systems
Stat.129 Stat. 1118
Cites 4Cited by 0 across 0 sources