Bill > S4230

This bill, the Secure Artificial Intelligence Act of 2024 or Secure A.I. Act of 2024, aims to improve the tracking and processing of security and safety incidents and risks associated with artificial intelligence (AI). Key provisions of the bill include: 1. Requiring the National Institute of Standards and Technology (NIST) to update the National Vulnerability Database and develop processes to manage AI security vulnerabilities. 2. Directing NIST, in coordination with the Cybersecurity and Infrastructure Security Agency (CISA), to establish a voluntary database to track AI security and safety incidents, with a focus on high-impact or widely used AI systems. 3. Directing CISA to update the Common Vulnerabilities and Exposures (CVE) Program to better identify and enumerate AI security vulnerabilities. 4. Requiring NIST to evaluate the sufficiency of existing voluntary consensus standards for vulnerability reporting to accommodate AI security vulnerabilities, and initiate a process to update relevant vulnerability reporting processes if needed. 5. Directing CISA, in collaboration with the National Security Agency and NIST, to convene a multi-stakeholder process to develop best practices for addressing supply chain risks associated with AI model training and maintenance. 6. Establishing an Artificial Intelligence Security Center within the National Security Agency's Cybersecurity Collaboration Center to facilitate AI security research, develop guidance to mitigate counter-AI techniques, and promote secure AI adoption.

Transportation and Infrastructure

https://www.congress.gov/bill/118th-congress/senate-bill/4230/all-info