15 U.S.C. § 7402 — Definitions

Page 2348 TITLE 15—COMMERCE AND TRADE § 7402 searchers, in the United States workforce; and (C) better coordinate information sharing and collaboration among industry, govern- ment, and academic research projects. (6) While African-Americans, Hispanics, and Native Americans constitute 25 percent of the total United States workforce and 30 percent of the college-age population, members of these minorities comprise less than 7 percent of the United States computer and informa- tion science workforce. (Pub. L. 107–305, § 2, Nov. 27, 2002, 116 Stat. 2367.) Statutory Notes and Related Subsidiaries SHORT TITLE Pub. L. 107–305, § 1, Nov. 27, 2002, 116 Stat. 2367, pro- vided that: ‘‘This Act [enacting this chapter and sec- tion 278h of this title, amending sections 278g–3, 1511e, and 7301 of this title and section 1862 of Title 42, The Public Health and Welfare, and redesignating section 278h of this title as 278q of this title] may be cited as the ‘Cyber Security Research and Development Act’.’’ § 7402. Definitions In this chapter: (1) Director The term ‘‘Director’’ means the Director of the National Science Foundation. (2) Institution of higher education The term ‘‘institution of higher education’’ has the meaning given that term in section 1001(a) of title 20. (Pub. L. 107–305, § 3, Nov. 27, 2002, 116 Stat. 2368.) Editorial Notes REFERENCES IN TEXT This chapter, referred to in text, was in the original ‘‘this Act’’, meaning Pub. L. 107–305, Nov. 27, 2002, 116 Stat. 2367, known as the Cyber Security Research and Development Act, which is classified principally to this chapter. For complete classification of this Act to the Code, see Short Title note set out under section 7401 of this title and Tables. § 7403. National Science Foundation research (a) Computer and network security research grants (1) In general The Director shall award grants for basic re- search on innovative approaches to the struc- ture of computer and network hardware and software that are aimed at enhancing com- puter security. Research areas may include— (A) authentication, cryptography, and other secure data communications tech- nology; (B) computer forensics and intrusion de- tection; (C) reliability of computer and network applications, middleware, operating sys- tems, control systems, and communications infrastructure; (D) privacy and confidentiality; (E) network security architecture, includ- ing tools for security administration and analysis; (F) emerging threats; (G) vulnerability assessments and tech- niques for quantifying risk; (H) remote access and wireless security; (I) enhancement of law enforcement abil- ity to detect, investigate, and prosecute cyber-crimes, including those that involve piracy of intellectual property; (J) secure fundamental protocols that are integral to inter-network communications and data exchange; (K) secure software engineering and soft- ware assurance, including— (i) programming languages and systems that include fundamental security fea- tures; (ii) portable or reusable code that re- mains secure when deployed in various en- vironments; (iii) verification and validation tech- nologies to ensure that requirements and specifications have been implemented; and (iv) models for comparison and metrics to assure that required standards have been met; (L) holistic system security that— (i) addresses the building of secure sys- tems from trusted and untrusted compo- nents; (ii) proactively reduces vulnerabilities; (iii) addresses insider threats; and (iv) supports privacy in conjunction with improved security; (M) monitoring and detection; (N) mitigation and rapid recovery meth- ods; (O) security of wireless networks and mo- bile devices; (P) security of cloud infrastructure and services; (Q) security of election-dedicated voting system software and hardware; and (R) role of the human factor in cybersecurity and the interplay of com- puters and humans and the physical world. (2) Merit review; competition Grants shall be awarded under this section on a merit-reviewed competitive basis. (3) Authorization of appropriations There are authorized to be appropriated to the National Science Foundation to carry out this subsection— (A) $35,000,000 for fiscal year 2003; (B) $40,000,000 for fiscal year 2004; (C) $46,000,000 for fiscal year 2005; (D) $52,000,000 for fiscal year 2006; and (E) $60,000,000 for fiscal year 2007. (b) Computer and network security research centers (1) In general The Director shall award multiyear grants, subject to the availability of appropriations, to institutions of higher education, nonprofit research institutions, or consortia thereof to establish multidisciplinary Centers for Com- puter and Network Security Research. Institu- tions of higher education, nonprofit research institutions, or consortia thereof receiving