†
HR 3394 EAS
(B) the experience of the applicant in con-
ducting research on computer and network secu-
rity and the capacity of the applicant to foster
new multidisciplinary collaborations;
(C) the capacity of the applicant to attract
and provide adequate support for a diverse
group of undergraduate and graduate students
and postdoctoral fellows to pursue computer and
network security research; and
(D) the extent to which the applicant will
partner with government laboratories, for-profit
entities, other institutions of higher education, or
nonprofit research institutions, and the role the
partners will play in the research undertaken by
the Center.
(6) ANNUAL MEETING.—The Director shall con-
vene an annual meeting of the Centers in order to fos-
ter collaboration and communication between Center
participants.
(7) AUTHORIZATION
OF
APPROPRIATIONS.—
There are authorized to be appropriated for the Na-
tional 
Science 
Foundation 
to 
carry 
out 
this
subsection—
(A) $12,000,000 for fiscal year 2003;
(B) $24,000,000 for fiscal year 2004;
†
HR 3394 EAS
(C) $36,000,000 for fiscal year 2005;
(D) $36,000,000 for fiscal year 2006; and
(E) $36,000,000 for fiscal year 2007.
SEC. 5. NATIONAL SCIENCE FOUNDATION COMPUTER AND
NETWORK SECURITY PROGRAMS.
(a) COMPUTER AND NETWORK SECURITY CAPACITY
BUILDING GRANTS.—
(1) IN GENERAL.—The Director shall establish a
program to award grants to institutions of higher
education (or consortia thereof) to establish or im-
prove undergraduate and master’s degree programs in
computer and network security, to increase the num-
ber of students, including the number of students from
groups historically underrepresented in these fields,
who pursue undergraduate or master’s degrees in
fields related to computer and network security, and
to provide students with experience in government or
industry related to their computer and network secu-
rity studies.
(2) MERIT REVIEW.—Grants shall be awarded
under this subsection on a merit-reviewed competitive
basis.
(3) USE OF FUNDS.—Grants awarded under this
subsection shall be used for activities that enhance the
ability of an institution of higher education (or con-
†
HR 3394 EAS
sortium thereof) to provide high-quality under-
graduate and master’s degree programs in computer
and network security and to recruit and retain in-
creased numbers of students to such programs. Activi-
ties may include—
(A) revising curriculum to better prepare
undergraduate and master’s degree students for
careers in computer and network security;
(B) establishing degree and certificate pro-
grams in computer and network security;
(C) 
creating 
opportunities 
for 
under-
graduate students to participate in computer
and network security research projects;
(D) acquiring equipment necessary for stu-
dent instruction in computer and network secu-
rity, including the installation of testbed net-
works for student use;
(E) providing opportunities for faculty to
work with local or Federal Government agencies,
private industry, nonprofit research institutions,
or other academic institutions to develop new ex-
pertise or to formulate new research directions in
computer and network security;
(F) establishing collaborations with other
academic institutions or academic departments
†
HR 3394 EAS
that seek to establish, expand, or enhance pro-
grams in computer and network security;
(G) establishing student internships in com-
puter and network security at government agen-
cies or in private industry;
(H) establishing collaborations with other
academic institutions to establish or enhance a
web-based collection of computer and network se-
curity courseware and laboratory exercises for
sharing with other institutions of higher edu-
cation, including community colleges;
(I) establishing or enhancing bridge pro-
grams in computer and network security between
community colleges and universities; and
(J) any other activities the Director deter-
mines will accomplish the goals of this sub-
section.
(4) SELECTION PROCESS.—
(A) APPLICATION.—An institution of higher
education (or a consortium thereof) seeking fund-
ing under this subsection shall submit an appli-
cation to the Director at such time, in such man-
ner, and containing such information as the Di-
rector may require. The application shall in-
clude, at a minimum—
†
HR 3394 EAS
(i) a description of the applicant’s
computer and network security research and
instructional capacity, and in the case of
an application from a consortium of insti-
tutions of higher education, a description of
the role that each member will play in im-
plementing the proposal;
(ii) a comprehensive plan by which the
institution or consortium will build instruc-
tional capacity in computer and informa-
tion security;
(iii) a description of relevant collabo-
rations with government agencies or private
industry that inform the instructional pro-
gram in computer and network security;
(iv) a survey of the applicant’s historic
student enrollment and placement data in
fields related to computer and network secu-
rity and a study of potential enrollment
and placement for students enrolled in the
proposed computer and network security
program; and
(v) a plan to evaluate the success of the
proposed computer and network security
program, including post-graduation assess-
†
HR 3394 EAS
ment of graduate school and job placement
and retention rates as well as the relevance
of the instructional program to graduate
study and to the workplace.
(B) AWARDS.—(i) The Director shall en-
sure, to the extent practicable, that grants are
awarded under this subsection in a wide range
of geographic areas and categories of institutions
of higher education, including minority serving
institutions.
(ii) The Director shall award grants under
this subsection for a period not to exceed 5 years.
(5) ASSESSMENT REQUIRED.—The Director shall
evaluate the program established under this subsection
no later than 6 years after the establishment of the
program. At a minimum, the Director shall evaluate
the extent to which the program achieved its objectives
of increasing the quality and quantity of students, in-
cluding students from groups historically underrep-
resented in computer and network security related
disciplines, pursuing undergraduate or master’s de-
grees in computer and network security.
(6) AUTHORIZATION
OF
APPROPRIATIONS.—
There are authorized to be appropriated to the Na-
†
HR 3394 EAS
tional 
Science 
Foundation 
to 
carry 
out 
this
subsection—
(A) $15,000,000 for fiscal year 2003;
(B) $20,000,000 for fiscal year 2004;
(C) $20,000,000 for fiscal year 2005;
(D) $20,000,000 for fiscal year 2006; and
(E) $20,000,000 for fiscal year 2007.
(b) SCIENTIFIC AND ADVANCED TECHNOLOGY ACT OF
1992.—
(1) GRANTS.—The Director shall provide grants
under the Scientific and Advanced Technology Act of
1992 (42 U.S.C. 1862i) for the purposes of section
3(a) and (b) of that Act, except that the activities
supported pursuant to this subsection shall be limited
to improving education in fields related to computer
and network security.
(2) AUTHORIZATION
OF
APPROPRIATIONS.—
There are authorized to be appropriated to the Na-
tional 
Science 
Foundation 
to 
carry 
out 
this
subsection—
(A) $1,000,000 for fiscal year 2003;
(B) $1,250,000 for fiscal year 2004;
(C) $1,250,000 for fiscal year 2005;
(D) $1,250,000 for fiscal year 2006; and
(E) $1,250,000 for fiscal year 2007.
†
HR 3394 EAS
(c) GRADUATE TRAINEESHIPS
IN COMPUTER
AND
NETWORK SECURITY RESEARCH.—
(1) IN GENERAL.—The Director shall establish a
program to award grants to institutions of higher
education to establish traineeship programs for grad-
uate students who pursue computer and network secu-
rity research leading to a doctorate degree by pro-
viding funding and other assistance, and by pro-
viding graduate students with research experience in
government or industry related to the students’ com-
puter and network security studies.
(2) MERIT REVIEW.—Grants shall be provided
under this subsection on a merit-reviewed competitive
basis.
(3) USE OF FUNDS.—An institution of higher
education shall use grant funds for the purposes of—
(A) providing traineeships to students who
are citizens, nationals, or lawfully admitted per-
manent resident aliens of the United States and
are pursuing research in computer or network
security leading to a doctorate degree;
(B) paying tuition and fees for students re-
ceiving traineeships under subparagraph (A);
(C) establishing scientific internship pro-
grams for students receiving traineeships under
†
HR 3394 EAS
subparagraph (A) in computer and network se-
curity at for-profit institutions, nonprofit re-
search institutions, or government laboratories;
and
(D) other costs associated with the adminis-
tration of the program.
(4) TRAINEESHIP
AMOUNT.—Traineeships pro-
vided under paragraph (3)(A) shall be in the amount
of $25,000 per year, or the level of the National
Science Foundation Graduate Research Fellowships,
whichever is greater, for up to 3 years.
(5) SELECTION
PROCESS.—An institution of
higher education seeking funding under this sub-
section shall submit an application to the Director at
such time, in such manner, and containing such in-
formation as the Director may require. The applica-
tion shall include, at a minimum, a description of—
(A) the instructional program and research
opportunities in computer and network security
available to graduate students at the applicant’s
institution; and
(B) the internship program to be estab-
lished, including the opportunities that will be
made available to students for internships at for-
†
HR 3394 EAS
profit institutions, nonprofit research institu-
tions, and government laboratories.
(6) REVIEW
OF
APPLICATIONS.—In evaluating
the applications submitted under paragraph (5), the
Director shall consider—
(A) the ability of the applicant to effectively
carry out the proposed program;
(B) the quality of the applicant’s existing
research and education programs;
(C) the likelihood that the program will re-
cruit increased numbers of students, including
students from groups historically underrep-
resented in computer and network security re-
lated disciplines, to pursue and earn doctorate
degrees in computer and network security;
(D) the nature and quality of the internship
program established through collaborations with
government laboratories, nonprofit research in-
stitutions, and for-profit institutions;
(E) the integration of internship opportuni-
ties into graduate students’ research; and
(F) the relevance of the proposed program to
current and future computer and network secu-
rity needs.
†
HR 3394 EAS
(7) AUTHORIZATION
OF
APPROPRIATIONS.—
There are authorized to be appropriated to the Na-
tional 
Science 
Foundation 
to 
carry 
out 
this
subsection—
(A) $10,000,000 for fiscal year 2003;
(B) $20,000,000 for fiscal year 2004;
(C) $20,000,000 for fiscal year 2005;
(D) $20,000,000 for fiscal year 2006; and
(E) $20,000,000 for fiscal year 2007.
(d) GRADUATE RESEARCH FELLOWSHIPS PROGRAM
SUPPORT.—Computer and network security shall be in-
cluded among the fields of specialization supported by the
National Science Foundation’s Graduate Research Fellow-
ships program under section 10 of the National Science
Foundation Act of 1950 (42 U.S.C. 1869).
(e) 
CYBER
SECURITY
FACULTY
DEVELOPMENT
TRAINEESHIP PROGRAM.—
(1) IN GENERAL.—The Director shall establish a
program to award grants to institutions of higher
education to establish traineeship programs to enable
graduate students to pursue academic careers in cyber
security upon completion of doctoral degrees.
(2) MERIT REVIEW; COMPETITION.—Grants shall
be awarded under this section on a merit-reviewed
competitive basis.
†
HR 3394 EAS
(3) APPLICATION.—Each institution of higher
education desiring to receive a grant under this sub-
section shall submit an application to the Director at
such time, in such manner, and containing such in-
formation as the Director shall require.
(4) USE OF FUNDS.—Funds received by an insti-
tution of higher education under this paragraph
shall—
(A) be made available to individuals on a
merit-reviewed competitive basis and in accord-
ance with the requirements established in para-
graph (7);
(B) be in an amount that is sufficient to
cover annual tuition and fees for doctoral study
at an institution of higher education for the du-
ration of the graduate traineeship, and shall in-
clude, in addition, an annual living stipend of
$25,000; and
(C) be provided to individuals for a dura-
tion of no more than 5 years, the specific dura-
tion of each graduate traineeship to be deter-
mined by the institution of higher education, on
a case-by-case basis.
(5) REPAYMENT.—Each graduate traineeship
shall—
†
HR 3394 EAS
(A) subject to paragraph (5)(B), be subject
to full repayment upon completion of the doc-
toral degree according to a repayment schedule
established and administered by the institution
of higher education;
(B) be forgiven at the rate of 20 percent of
the total amount of the graduate traineeship as-
sistance received under this section for each aca-
demic year that a recipient is employed as a
full-time faculty member at an institution of
higher education for a period not to exceed 5
years; and
(C) be monitored by the institution of high-
er education receiving a grant under this sub-
section to ensure compliance with this subsection.
(6) EXCEPTIONS.—The Director may provide for
the partial or total waiver or suspension of any serv-
ice obligation or payment by an individual under
this section whenever compliance by the individual is
impossible or would involve extreme hardship to the
individual, or if enforcement of such obligation with
respect to the individual would be unconscionable.
(7) ELIGIBILITY.—To be eligible to receive a
graduate traineeship under this section, an indi-
vidual shall—
†
HR 3394 EAS
(A) be a citizen, national, or lawfully ad-
mitted permanent resident alien of the United
States;
(B) demonstrate a commitment to a career
in higher education.
(8) CONSIDERATION.—In making selections for
graduate traineeships under this paragraph, an insti-
tution receiving a grant under this subsection shall
consider, to the extent possible, a diverse pool of ap-
plicants whose interests are of an interdisciplinary
nature, encompassing the social scientific as well as
the technical dimensions of cyber security.
(9) AUTHORIZATION
OF
APPROPRIATIONS.—
There are authorized to be appropriated to the Na-
tional Science Foundation to carry out this para-
graph $5,000,000 for each of fiscal years 2003
through 2007.
SEC. 6. CONSULTATION.
In carrying out sections 4 and 5, the Director shall
consult with other Federal agencies.
SEC. 7. FOSTERING RESEARCH AND EDUCATION IN COM-
PUTER AND NETWORK SECURITY.
Section 3(a) of the National Science Foundation Act
of 1950 (42 U.S.C. 1862(a)) is amended—
†
HR 3394 EAS
(1) by striking ‘‘and’’ at the end of paragraph
(6);
(2) by striking ‘‘Congress.’’ in paragraph (7)
and inserting ‘‘Congress ; and’’; and
(3) by adding at the end the following:
‘‘(8) to take a leading role in fostering and sup-
porting research and education activities to improve
the security of networked information systems.’’.
SEC. 8. NATIONAL INSTITUTE OF STANDARDS AND TECH-
NOLOGY PROGRAMS.
(a) RESEARCH PROGRAM.—The National Institute of
Standards and Technology Act (15 U.S.C. 271 et seq.) is
amended—
(1) by moving section 22 to the end of the Act
and redesignating it as section 32;
(2) by inserting after section 21 the following
new section:
‘‘SEC. 22. RESEARCH PROGRAM ON SECURITY OF
COMPUTER SYSTEMS
‘‘(a) ESTABLISHMENT.—The Director shall establish a
program of assistance to institutions of higher education
that enter into partnerships with for-profit entities to sup-
port research to improve the security of computer systems.
The partnerships may also include government laboratories
and nonprofit research institutions. The program shall—
†
HR 3394 EAS
‘‘(1) include multidisciplinary, long-term re-
search;
‘‘(2) include research directed toward addressing
needs identified through the activities of the Computer
System Security and Privacy Advisory Board under
section 20(f); and
‘‘(3) promote the development of a robust re-
search community working at the leading edge of
knowledge in subject areas relevant to the security of
computer systems by providing support for graduate
students, post-doctoral researchers, and senior re-
searchers.
‘‘(b) FELLOWSHIPS.—
‘‘(1) 
POST-DOCTORAL
RESEARCH
FELLOW-
SHIPS.—The Director is authorized to establish a pro-
gram to award post-doctoral research fellowships to
individuals who are citizens, nationals, or lawfully
admitted permanent resident aliens of the United
States and are seeking research positions at institu-
tions, including the Institute, engaged in research ac-
tivities related to the security of computer systems,
including the research areas described in section
4(a)(1) of the Cyber Security Research and Develop-
ment Act.
†
HR 3394 EAS
‘‘(2) SENIOR RESEARCH FELLOWSHIPS.—The Di-
rector is authorized to establish a program to award
senior research fellowships to individuals seeking re-
search positions at institutions, including the Insti-
tute, engaged in research activities related to the secu-
rity of computer systems, including the research areas
described in section 4(a)(1) of the Cyber Security Re-
search and Development Act. Senior research fellow-
ships shall be made available for established research-
ers at institutions of higher education who seek to
change research fields and pursue studies related to
the security of computer systems.
‘‘(3) ELIGIBILITY.—
‘‘(A) IN GENERAL.—To be eligible for an
award under this subsection, an individual shall
submit an application to the Director at such
time, in such manner, and containing such in-
formation as the Director may require.
‘‘(B) STIPENDS.—Under this subsection, the
Director is authorized to provide stipends for
post-doctoral research fellowships at the level of
the Institute’s Post Doctoral Research Fellowship
Program and senior research fellowships at levels
consistent with support for a faculty member in
a sabbatical position.
†
HR 3394 EAS
‘‘(c) AWARDS; APPLICATIONS.—
‘‘(1) IN GENERAL.—The Director is authorized to
award grants or cooperative agreements to institu-
tions of higher education to carry out the program es-
tablished under subsection (a). No funds made avail-
able under this section shall be made available di-
rectly to any for-profit partners.
‘‘(2) ELIGIBILITY.—To be eligible for an award
under this section, an institution of higher education
shall submit an application to the Director at such
time, in such manner, and containing such informa-
tion as the Director may require. The application
shall include, at a minimum, a description of—
‘‘(A) the number of graduate students an-
ticipated to participate in the research project
and the level of support to be provided to each;
‘‘(B) the number of post-doctoral research
positions included under the research project and
the level of support to be provided to each;
‘‘(C) the number of individuals, if any, in-
tending to change research fields and pursue
studies related to the security of computer sys-
tems to be included under the research project
and the level of support to be provided to each;
and