[Congressional Record Volume 166, Number 117 (Thursday, June 25, 2020)]
[Senate]
[Page S3408]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]

  SA 1911. Mr. WARNER submitted an amendment intended to be proposed by 
him to the bill S. 4049, to authorize appropriations for fiscal year 
2021 for military activities of the Department of Defense, for military 
construction, and for defense activities of the Department of Energy, 
to prescribe military personnel strengths for such fiscal year, and for 
other purposes; which was ordered to lie on the table; as follows:

       At the appropriate place in subtitle B of title XVI, insert 
     the following:

     SEC. ___. POLICIES FOR CYBERSECURITY AND RESILIENCE FOR 
                   CERTAIN PROGRAMS DEVELOPING APPLICATIONS USING 
                   ARTIFICIAL INTELLIGENCE OR MACHINE LEARNING.

       (a) Policies Required.--The Secretary of Defense shall 
     issue policies for programs developing applications and 
     systems using artificial intelligence or machine learning and 
     resulting in autonomous control, decisionmaking, or other 
     safety-critical functions not under control or observation by 
     a human operator to ensure that autonomous systems and 
     decisionmaking algorithms are resilient to deception or other 
     cyber attacks.
       (b) Risk Mitigation.--The policies issued under subsection 
     (a) shall cover risk mitigation that considers that cyber-
     attacks against systems described in subsection (a) can occur 
     at the following levels:
       (1) Adversarial inputs to recognition algorithms, such as 
     visual image manipulation to fool recognition.
       (2) Adversarial inputs to planning or decisionmaking 
     algorithms.
       (3) More conventional attacks against the software 
     implementations of the system, such as common software 
     weaknesses.
                                 ______