Sec. 932. NEXT-GENERATION HOST-BASED CYBER SECURITY SYSTEM FOR THE DEPARTMENT OF DEFENSE

336 words·~2 min read·/statute-compilations/comps-10359/sec-932

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

## SEC. 932 NEXT-GENERATION HOST-BASED CYBER SECURITY SYSTEM FOR THE DEPARTMENT OF DEFENSE ###

(a)Strategy for Acquisition of System Required The Chief Information Officer of the Department of Defense shall, in consultation with the Under Secretary of Defense for Acquisition, Technology, and Logistics and the Commander of the United States Cyber Command, develop a strategy to acquire next-generation host-based cyber security tools and capabilities (in this section referred to as a “next-generation system”) for the Department of Defense. ###

(b)Elements of System It is the sense of Congress that any next-generation system acquired under the strategy required by subsection

(a)should meet the following requirements: ####

(1)To overcome problems and limitations in current capabilities, the system should not rely on techniques that— #####

(A)cannot address new or rapidly morphing threats; #####

(B)consume substantial amounts of communications capacity to remain current with known threats and to report current status; or #####

(C)consume substantial amounts of resources to store rapidly growing threat libraries. ####

(2)The system should provide an open architecture-based framework for so-called “plug-and-play” integration of a variety of types of deployable tools, including appropriate commercially available applications, in addition to cyber intrusion detection tools, including tools for— #####

(A)insider threat detection; #####

(B)continuous monitoring and configuration management; #####

(C)remediation following infections; and #####

(D)protection techniques that do not rely on detection of the attack. ####

(3)The system should be designed for ease of deployment to potentially millions of host devices of tailored security solutions depending on need and risk, and to be compatible with cloud-based, thin-client, and virtualized environments as well as battlefield devices and weapons systems. ###

(c)Submittal to Congress The Chief Information Officer shall submit to Congress a report setting forth the strategy required by subsection

(a)together with the budget justification materials of the Department of Defense submitted to Congress with the budget of the President for fiscal year 2015 pursuant to section 1105(a) of title 31, United States Code.