§ 7403. National Science Foundation research

Legislative history

Reconstructed from this section’s Code source credit and amendment notes, resolved against the local Statutes at Large. Editorial notes are evidence, not the law that made the change.

1. 2002

   Cyber Security Research and Development Act

   Pub. L. 107–305 § 4 · 116 Stat. 2367

   Enacted · 15 U.S.C. § 7403

   Pub. L. 107–305, § 4, Nov. 27, 2002, 116 Stat. 2368

   Source evidence

   Code source credit
   Pub. L. 107–305, § 4, Nov. 27, 2002, 116 Stat. 2368

   Enacted provision · exact public law section
   SEC. 4. NATIONAL SCIENCE FOUNDATION RESEARCH. (a) Computer and Network Security Research Grants.— (1) In general.— The Director shall award grants for basic research on innovative approaches to the structure of computer and network hardware and software that are aimed at enhancing computer security. Research areas may include— (A) authentication, cryptography, and other secure data communications technology; (B) computer forensics and intrusion detection; (C) reliability of computer and network applications, middleware, operating systems, control systems, and communications infrastructure; (D) privacy and confidentiality; (E) network security architecture, including tools for security administration and analysis; (F) emerging threats; (G) vulnerability assessments and techniques for quantifying risk; (H) remote access and wireless security; and (I) enhancement of law enforcement ability to detect, investigate, and prosecute cyber-crimes, including those that involve piracy of intellectual property. (2) Merit review; competition.— Grants shall be awarded under this section on a merit-reviewed competitive basis. (3) Authorization of appropriations.— There are authorized to be appropriated to the National Science Foundation to carry out this subsection— (A) $35,000,000 for fiscal year 2003; (B) $40,000,000 for fiscal year 2004; (C) $46,000,000 for fiscal year 2005; (D) $52,000,000 for fiscal year 2006; and (E) $60,000,000 for fiscal year 2007. (b) Computer and Network Security Research Centers.— (1) In general.— The Director shall award multiyear grants, subject to the availability of appropriations, to institutions of higher education, nonprofit research institutions, or consortia thereof to establish multidisciplinary Centers for Computer and Network Security Research. Institutions of higher education, nonprofit research institutions, or consortia thereof receiving such grants may partner with 1 or more government laboratories or for-profit institutions, or other institutions of higher education or nonprofit research institutions. (2) Merit review; competition.— Grants shall be awarded under this subsection on a merit-reviewed competitive basis. (3) Purpose.— The purpose of the Centers shall be to generate innovative approaches to computer and network security by conducting cutting-edge, multidisciplinary research in computer and network security, including the research areas described in subsection (a)(1). (4) Applications.— An institution of higher education, nonprofit research institution, or consortia thereof seeking funding under this subsection shall submit an application to the Director at such time, in such manner, and containing such information as the Director may require. The application shall include, at a minimum, a description of— (A) the research projects that will be undertaken by the Center and the contributions of each of the participating entities; (B) how the Center will promote active collaboration among scientists and engineers from different disciplines, such as computer scientists, engineers, mathematicians, and social science researchers; (C) how the Center will contribute to increasing the number and quality of computer and network security researchers and other professionals, including individuals from groups historically underrepresented in these fields; and (D) how the center will disseminate research results quickly and widely to improve cyber security in information technology networks, products, and services. (5) Criteria.— In evaluating the applications submitted under paragraph (4), the Director shall consider, at a minimum— (A) the ability of the applicant to generate innovative approaches to computer and network security and effectively carry out the research program; (B) the experience of the applicant in conducting research on computer and network security and the capacity of the applicant to foster new multidisciplinary collaborations; (C) the capacity of the applicant to attract and provide adequate support for a diverse group of undergraduate and graduate students and postdoctoral fellows to pursue computer and network security research; and (D) the extent to which the applicant will partner with government laboratories, for-profit entities, other institutions of higher education, or nonprofit research institutions, and the role the partners will play in the research undertaken by the Center. (6) Annual meeting.— The Director shall convene an annual meeting of the Centers in order to foster collaboration and communication between Center participants. (7) Authorization of appropriations.— There are authorized to be appropriated for the National Science Foundation to carry out this subsection— (A) $12,000,000 for fiscal year 2003; (B) $24,000,000 for fiscal year 2004; (C) $36,000,000 for fiscal year 2005; (D) $36,000,000 for fiscal year 2006; and (E) $36,000,000 for fiscal year 2007.

2. 2014

   Cybersecurity Enhancement Act of 2014

   Pub. L. 113–274 § 201(e) · 128 Stat. 2971

   Added · 15 U.S.C. § 7403(a)(1)(J)(P)

   Pub. L. 113–274, § 201(e), added subpars. (J) to (P)

   Source evidence

   Code amendment note
   Subsec. (a)(1)(J) to (P). Pub. L. 113–274, § 201(e), added subpars. (J) to (P).

   Enacted provision · exact public law section
   (e) National Science Foundation Computer and Network Security Research Grant Areas.— Section 4(a)(1) of the Cyber Security Research and Development Act (15 U.S.C. 7403(a)(1)) is amended— (1) in subparagraph (H), by striking “and” at the end; (2) in subparagraph (I), by striking the period at the end and inserting a semicolon; and (3) by adding at the end the following: “(J) secure fundamental protocols that are integral to inter-network communications and data exchange; “(K) secure software engineering and software assurance, including— “(i) programming languages and systems that include fundamental security features; “(ii) portable or reusable code that remains secure when deployed in various environments; “(iii) verification and validation technologies to ensure that requirements and specifications have been implemented; and “(iv) models for comparison and metrics to assure that required standards have been met; “(L) holistic system security that— “(i) addresses the building of secure systems from trusted and untrusted components; “(ii) proactively reduces vulnerabilities; “(iii) addresses insider threats; and “(iv) supports privacy in conjunction with improved security; “(M) monitoring and detection; “(N) mitigation and rapid recovery methods; “(O) security of wireless networks and mobile devices; and “(P) security of cloud infrastructure and services.” .

3. 2014

   Cybersecurity Enhancement Act of 2014

   Pub. L. 113–274 § 202(1) · 128 Stat. 2971

   Substituted · 15 U.S.C. § 7403(b)(3)

   Pub. L. 113–274, § 202(1), substituted “improving the security and resiliency of information technology, reducing cyber vulnerabilities, and anticipating and mitigating consequences of cyber attacks on critical infrastructure, by conducting research in the areas” for “the research areas”

   Source evidence

   Code amendment note
   Subsec. (b)(3). Pub. L. 113–274, § 202(1), substituted “improving the security and resiliency of information technology, reducing cyber vulnerabilities, and anticipating and mitigating consequences of cyber attacks on critical infrastructure, by conducting research in the areas” for “the research areas”.

   Enacted provision · exact public law section
   (1) in paragraph (3), by striking “the research areas” and inserting the following: “improving the security and resiliency of information technology, reducing cyber vulnerabilities, and anticipating and mitigating consequences of cyber attacks on critical infrastructure, by conducting research in the areas”;

4. 2014

   Cybersecurity Enhancement Act of 2014

   Pub. L. 113–274 § 202(2) · 128 Stat. 2971

   Substituted · 15 U.S.C. § 7403(b)(4)(D)

   Pub. L. 113–274, § 202(2), substituted “the Center” for “the center”

   Source evidence

   Code amendment note
   Subsec. (b)(4)(D). Pub. L. 113–274, § 202(2), substituted “the Center” for “the center”.

   Enacted provision · exact public law section
   (2) by striking “the center” in paragraph (4)(D) and inserting “the Center”; and

5. 2014

   Cybersecurity Enhancement Act of 2014

   Pub. L. 113–274 § 202(3) · 128 Stat. 2971

   Added · 15 U.S.C. § 7403(b)(5)(E)(K)

   Pub. L. 113–274, § 202(3), added subpars. (E) to (K)

   Source evidence

   Code amendment note
   Subsec. (b)(5)(E) to (K). Pub. L. 113–274, § 202(3), added subpars. (E) to (K).

   Enacted provision · exact public law section
   (3) in paragraph (5)— (A) by striking “and” at the end of subparagraph (C); (B) by striking the period at the end of subparagraph (D) and inserting a semicolon; and (C) by adding at the end the following: “(E) the demonstrated capability of the applicant to conduct high performance computation integral to complex computer and network security research, through on-site or off-site computing; “(F) the applicant’s affiliation with private sector entities involved with industrial research described in subsection (a)(1); “(G) the capability of the applicant to conduct research in a secure environment; “(H) the applicant’s affiliation with existing research programs of the Federal Government; “(I) the applicant’s experience managing public-private partnerships to transition new technologies into a commercial setting or the government user community; “(J) the capability of the applicant to conduct interdisciplinary cybersecurity research, basic and applied, such as in law, economics, or behavioral sciences; and “(K) the capability of the applicant to conduct research in areas such as systems security, wireless security, networking and protocols, formal methods and high-performance computing, nanotechnology, or industrial control systems.” .

6. 2017

   American Innovation and Competitiveness Act

   Pub. L. 114–329 § 104(a) · 130 Stat. 2969

   Added · 15 U.S.C. § 7403(a)(1)(Q); 15 U.S.C. § 7403(a)(1)(R)

   Pub. L. 114–329, § 104(a), added subpars. (Q) and (R)

   Source evidence

   Code amendment note
   Subsec. (a)(1)(Q), (R). Pub. L. 114–329, § 104(a), added subpars. (Q) and (R).

   Enacted provision · exact public law section
   (a) Foundation Cybersecurity Research.— Section 4(a)(1) of the Cyber Security Research and Development Act, as amended (15 U.S.C. 7403(a)(1)) is amended— (1) in subparagraph (O), by striking “and” at the end; (2) in subparagraph (P), by striking the period at the end and inserting a semicolon; and (3) by adding at the end the following: “(Q) security of election-dedicated voting system software and hardware; and “(R) role of the human factor in cybersecurity and the interplay of computers and humans and the physical world.” .

7. 2017

   Networking and Information Technology Research and Development Modernization Act of 2016

   Pub. L. 114–329 § 105(r) · 130 Stat. 2969

   Substituted · 15 U.S.C. § 7403(b)(5)(K)

   Pub. L. 114–329, § 105(r), substituted “networking and information technology” for “high-performance computing”

   Source evidence

   Code amendment note
   Subsec. (b)(5)(K). Pub. L. 114–329, § 105(r), substituted “networking and information technology” for “high-performance computing”.

   Enacted provision · exact public law section
   (r) National Science Foundation Research.— Section 4(b)(5)(K) of the Cyber Security Research and Development Act (15 U.S.C. 7403(b)(5)(K)) is amended by striking “high-performance computing” and inserting “networking and information technology”.

7 of 7 references resolved to an enrolled provision