To require the Secretary of Defense to conduct a study on cyberexploitation of members of the Armed Forces and their families.

SA 2287. Mr. SASSE submitted an amendment intended to be proposed by
him to the bill S. 4049, to authorize appropriations for fiscal year
2021 for military activities of the Department of Defense, for military
construction, and for defense activities of the Department of Energy,
to prescribe military personnel strengths for such fiscal year, and for
other purposes; which was ordered to lie on the table; as follows:

At the end of subtitle B of title XVI, add the following:

SEC. ___. STUDY ON CYBEREXPLOITATION OF MEMBERS OF THE ARMED
FORCES AND THEIR FAMILIES.

(a) Study Required.--Not later than 150 days after the date
of the enactment of this Act, the Secretary of Defense shall
complete a study on the cyberexploitation of the personal
information and accounts of members of the Armed Forces and
their families.
(b) Elements.--The study required by subsection (a) shall
include the following:
(1) An intelligence assessment of the threat currently
posed by foreign government and non-state actor
cyberexploitation of members of the Armed Forces and their
families, including generalized assessments as to whether
cyberexploitation of members of the Armed Forces and their
families is a substantial threat as compared to other means
of information warfare and as to whether cyberexploitation of
members of the Armed Forces and their families is an
increasing threat.
(2) Case-study analysis of three known occurrences of
attempted cyberexploitation against members of the Armed
Forces and their families, including assessments of the
vulnerability and the ultimate consequences of the attempted
cyberexploitation.
(3) A description of the actions taken by the Department of
Defense to educate members of the Armed Forces and their
families, including particularly vulnerable subpopulations,
about any actions that can be taken to reduce these threats.
(4) An intelligence assessment of the threat posed by
foreign government and non-state actor creation and use of
deep fakes featuring members of the Armed Forces or their
families, including generalized assessments of the maturity
of the technology used in the creation of deep fakes and as
to how deep fakes have been used or might be used to conduct
information warfare.
(5) Development of recommendations for policy changes to
reduce the vulnerability of members of the Armed Forces and
their families to cyberexploitation, including
recommendations for legislative or administrative action.
(c) Report.--
(1) In general.--The Secretary shall submit to the
congressional defense committees a report on the findings of
the Secretary with respect to the study required by
subsection (a).
(2) Form.--The report required by paragraph (1) shall be
submitted in unclassified form, but may include a classified
annex.
(d) Definitions.--In this section:
(1) The term ``cyberexploitation'' means the use of digital
means to knowingly access, or conspire to access, without
authorization, an individual's personal information to be
employed (or to be used) with malicious intent.
(2) The term ``deep fake'' means the digital insertion of a
person's likeness into or digital alteration of a person's
likeness in visual media, such as photographs and videos,
without the person's permission and with malicious intent.
______