Secure A.I. Act of 2024

house

senate

president

Legislation Details

Aims to enhance tracking and processing of security and safety incidents related to artificial intelligence (AI).
Defines key terms related to AI safety and security incidents, including vulnerabilities and counter-AI techniques.
Mandates the Director of the National Institute of Standards and Technology (NIST) to update processes for managing AI security vulnerabilities within 180 days of enactment.
Requires the establishment of a voluntary database to track AI security and safety incidents within one year, allowing various stakeholders to report incidents while ensuring confidentiality.
Prioritizes the inclusion of incidents involving critical infrastructure or those with high-severity impacts.
Protects whistleblowers from retaliation for reporting incidents and ensures confidentiality of their identities.
Directs the Cybersecurity and Infrastructure Security Agency (CISA) to update its Common Vulnerabilities and Exposures Program to include AI vulnerabilities.
Calls for a multi-stakeholder evaluation of existing standards for AI vulnerability reporting and a report to Congress on their effectiveness.
Encourages the development of best practices for managing supply chain risks associated with AI model training and maintenance.
Establishes an Artificial Intelligence Security Center within the National Security Agency (NSA) to facilitate AI security research and promote secure AI practices.
Provides for a research test-bed for private sector and academic researchers to conduct AI security research, with access to proprietary models under certain conditions.

Aims to enhance tracking and processing of security and safety incidents related to artificial intelligence (AI).
Defines key terms related to AI safety and security incidents, including vulnerabilities and counter-AI techniques.
Mandates the Director of the National Institute of Standards and Technology (NIST) to update processes for managing AI security vulnerabilities within 180 days of enactment.
Requires the establishment of a voluntary database to track AI security and safety incidents within one year, allowing various stakeholders to report incidents while ensuring confidentiality.
Prioritizes the inclusion of incidents involving critical infrastructure or those with high-severity impacts.
Protects whistleblowers from retaliation for reporting incidents and ensures confidentiality of their identities.
Directs the Cybersecurity and Infrastructure Security Agency (CISA) to update its Common Vulnerabilities and Exposures Program to include AI vulnerabilities.
Calls for a multi-stakeholder evaluation of existing standards for AI vulnerability reporting and a report to Congress on their effectiveness.
Encourages the development of best practices for managing supply chain risks associated with AI model training and maintenance.
Establishes an Artificial Intelligence Security Center within the National Security Agency (NSA) to facilitate AI security research and promote secure AI practices.
Provides for a research test-bed for private sector and academic researchers to conduct AI security research, with access to proprietary models under certain conditions.

Cosponsors