Sec. 1643. Study on cyberexploitation of members of the Armed Forces and their families
391 words·~2 min read·
/bill/116/hr/6395/eas/section-1643·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Not later than 150 days after the date of the enactment of this Act, the Secretary of Defense shall complete a study on the cyberexploitation of the personal information and accounts of members of the Armed Forces and their families. The study required by subsection
(a)shall include the following: An intelligence assessment of the threat currently posed by foreign government and non-state actor cyberexploitation of members of the Armed Forces and their families, including generalized assessments as to whether cyberexploitation of members of the Armed Forces and their families is a substantial threat as compared to other means of information warfare and as to whether cyberexploitation of members of the Armed Forces and their families is an increasing threat. Case-study analysis of three known occurrences of attempted cyberexploitation against members of the Armed Forces and their families, including assessments of the vulnerability and the ultimate consequences of the attempted cyberexploitation. A description of the actions taken by the Department of Defense to educate members of the Armed Forces and their families, including particularly vulnerable subpopulations, about any actions that can be taken to reduce these threats. An intelligence assessment of the threat posed by foreign government and non-state actor creation and use of deep fakes featuring members of the Armed Forces or their families, including generalized assessments of the maturity of the technology used in the creation of deep fakes and as to how deep fakes have been used or might be used to conduct information warfare. Development of recommendations for policy changes to reduce the vulnerability of members of the Armed Forces and their families to cyberexploitation, including recommendations for legislative or administrative action. The Secretary shall submit to the congressional defense committees a report on the findings of the Secretary with respect to the study required by subsection (a). The report required by paragraph
(1)shall be submitted in unclassified form, but may include a classified annex. In this section: The term cyberexploitation means the use of digital means to knowingly access, or conspire to access, without authorization, an individual’s personal information to be employed (or to be used) with malicious intent. The term deep fake means the digital insertion of a person’s likeness into or digital alteration of a person’s likeness in visual media, such as photographs and videos, without the person’s permission and with malicious intent.