[Congressional Record Volume 165, Number 106 (Monday, June 24, 2019)]
[Senate]
[Page S4466]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]

  SA 855. Mr. McCONNELL (for Mr. Sasse (for himself, Mr. King, and Mrs. 
Gillibrand)) submitted an amendment intended to be proposed to 
amendment SA 764 proposed by Mr. Inhofe to the bill S. 1790, to 
authorize appropriations for fiscal year 2020 for military activities 
of the Department of Defense, for military construction, and for 
defense activities of the Department of Energy, to prescribe military 
personnel strengths for such fiscal year, and for other purposes; which 
was ordered to lie on the table; as follows:

       At the end of subtitle C of title XVI, add the following:

     SEC. ___. STUDY ON CYBEREXPLOITATION OF MEMBERS OF THE ARMED 
                   FORCES AND THEIR FAMILIES.

       (a) Study Required.--Not later than 150 days after the date 
     of the enactment of this Act, the Secretary of Defense shall 
     complete a study on the cyberexploitation of the personal 
     information and accounts of members of the Armed Forces and 
     their families.
       (b) Elements.--The study required by subsection (a) shall 
     include the following:
       (1) An intelligence assessment of the threat currently 
     posed by foreign government and non-state actor 
     cyberexploitation of members of the Armed Forces and their 
     families, including generalized assessments as to whether 
     cyberexploitation of members of the Armed Forces and their 
     families is a substantial threat as compared to other means 
     of information warfare and as to whether cyberexploitation of 
     members of the Armed Forces and their families is an 
     increasing threat.
       (2) Case-study analysis of three known occurrences of 
     attempted cyberexploitation against members of the Armed 
     Forces and their families, including assessments of the 
     vulnerability and the ultimate consequences of the attempted 
     cyberexploitation.
       (3) A description of the actions taken by the Department of 
     Defense to educate members of the Armed Forces and their 
     families, including particularly vulnerable subpopulations, 
     about any actions that can be taken to reduce these threats.
       (4) An intelligence assessment of the threat posed by 
     foreign government and non-state actor creation and use of 
     deep fakes featuring members of the Armed Forces or their 
     families, including generalized assessments of the maturity 
     of the technology used in the creation of deep fakes and as 
     to how deep fakes have been used or might be used to conduct 
     information warfare.
       (5) Development of recommendations for policy changes to 
     reduce the vulnerability of members of the Armed Forces and 
     their families to cyberexploitation, including 
     recommendations for legislative or administrative action.
       (c) Report.--
       (1) In general.--The Secretary shall submit to the 
     congressional defense committees a report on the findings of 
     the Secretary with respect to the study required by 
     subsection (a).
       (2) Form.--The report required by paragraph (1) shall be 
     submitted in unclassified form, but may include a classified 
     annex.
       (d) Definitions.--In this section:
       (1) The term ``cyberexploitation'' means the use of digital 
     means to knowingly access, or conspire to access, without 
     authorization, an individual's personal information to be 
     employed (or to be used) with malicious intent.
       (2) The term ``deep fake'' means the digital insertion of a 
     person's likeness into or digital alteration of a person's 
     likeness in visual media, such as photographs and videos, 
     without the person's permission and with malicious intent.
                                 ______