H. R. 3394—13
(B) may treat the explanation as if it were a portion
of the agency’s annual performance plan properly classified
under criteria established by an Executive Order (within
the meaning of section 1115(d) of title 31, United States
Code).
(2) LIMITATION.—Paragraph (1) does not apply to any com-
puter hardware or software system for which the National
Institute of Standards and Technology does not have responsi-
bility under section 20(a)(3) of the National Institute of Stand-
ards and Technology Act (15 U.S.C.278g–3(a)(3)).
SEC. 9. COMPUTER SECURITY REVIEW, PUBLIC MEETINGS, AND
INFORMATION.
Section 20 of the National Institute of Standards and Tech-
nology Act (15 U.S.C. 278g–3) is amended by adding at the end
the following new subsection:
‘‘(e) AUTHORIZATION OF APPROPRIATIONS.—There are authorized
to be appropriated to the Secretary $1,060,000 for fiscal year 2003
and $1,090,000 for fiscal year 2004 to enable the Computer System
Security and Privacy Advisory Board, established by section 21,
to identify emerging issues, including research needs, related to
computer security, privacy, and cryptography and, as appropriate,
to convene public meetings on those subjects, receive presentations,
and publish reports, digests, and summaries for public distribution
on those subjects.’’.
SEC. 10. INTRAMURAL SECURITY RESEARCH.
Section 20 of the National Institute of Standards and Tech-
nology Act (15 U.S.C. 278g–3), as amended by this Act, is further
amended by redesignating subsection (e) as subsection (f), and
by inserting after subsection (d) the following:
‘‘(e) INTRAMURAL SECURITY RESEARCH.—As part of the research
activities conducted in accordance with subsection (b)(4), the
Institute shall—
‘‘(1) conduct a research program to address emerging tech-
nologies associated with assembling a networked computer
system from components while ensuring it maintains desired
security properties;
‘‘(2) carry out research associated with improving the secu-
rity of real-time computing and communications systems for
use in process control; and
‘‘(3) carry out multidisciplinary, long-term, high-risk
research on ways to improve the security of computer systems.’’.
SEC. 11. AUTHORIZATION OF APPROPRIATIONS.
There are authorized to be appropriated to the Secretary of
Commerce for the National Institute of Standards and Technology—
(1) for activities under section 22 of the National Institute
of Standards and Technology Act, as added by section 8 of
this Act—
(A) $25,000,000 for fiscal year 2003;
(B) $40,000,000 for fiscal year 2004;
(C) $55,000,000 for fiscal year 2005;
(D) $70,000,000 for fiscal year 2006;
(E) $85,000,000 for fiscal year 2007; and
(2) for activities under section 20(f) of the National Institute
of Standards and Technology Act, as added by section 10 of
this Act—
H. R. 3394—14
(A) $6,000,000 for fiscal year 2003;
(B) $6,200,000 for fiscal year 2004;
(C) $6,400,000 for fiscal year 2005;
(D) $6,600,000 for fiscal year 2006; and
(E) $6,800,000 for fiscal year 2007.
SEC. 12. NATIONAL ACADEMY OF SCIENCES STUDY ON COMPUTER
AND NETWORK SECURITY IN CRITICAL INFRASTRUC-
TURES.
(a) STUDY.—Not later than 3 months after the date of the
enactment of this Act, the Director of the National Institute of
Standards and Technology shall enter into an arrangement with
the National Research Council of the National Academy of Sciences
to conduct a study of the vulnerabilities of the Nation’s network
infrastructure and make recommendations for appropriate improve-
ments. The National Research Council shall—
(1) review existing studies and associated data on the
architectural, hardware, and software vulnerabilities and inter-
dependencies in United States critical infrastructure networks;
(2) identify and assess gaps in technical capability for
robust critical infrastructure network security and make rec-
ommendations for research priorities and resource require-
ments; and
(3) review any and all other essential elements of computer
and network security, including security of industrial process
controls, to be determined in the conduct of the study.
(b) REPORT.—The Director of the National Institute of Stand-
ards and Technology shall transmit a report containing the results
of the study and recommendations required by subsection (a) to
the Senate Committee on Commerce, Science, and Transportation
and the House of Representatives Committee on Science not later
than 21 months after the date of enactment of this Act.
(c) SECURITY.—The Director of the National Institute of Stand-
ards and Technology shall ensure that no information that is classi-
fied is included in any publicly released version of the report
required by this section.
(d) AUTHORIZATION OF APPROPRIATIONS.—There are authorized
to be appropriated to the Secretary of Commerce for the National
Institute of Standards and Technology for the purposes of carrying
out this section, $700,000.
SEC. 13. COORDINATION OF FEDERAL CYBER SECURITY RESEARCH
AND DEVELOPMENT
The Director of the National Science Foundation and the
Director of the National Institute of Standards and Technology
shall coordinate the research programs authorized by this Act or
pursuant to amendments made by this Act. The Director of the
Office of Science and Technology Policy shall work with the Director
of the National Science Foundation and the Director of the National
Institute of Standards and Technology to ensure that programs
authorized by this Act or pursuant to amendments made by this
Act are taken into account in any government-wide cyber security
research effort.
SEC. 14. OFFICE OF SPACE COMMERCIALIZATION.
Section 8(a) of the Technology Administration Act of 1998 (15
U.S.C. 1511e(a)) is amended by inserting ‘‘the Technology Adminis-
tration of’’ after ‘‘within’’.
H. R. 3394—15
SEC. 15. TECHNICAL CORRECTION OF NATIONAL CONSTRUCTION
SAFETY TEAM ACT.
Section 2(c)(1)(d) of the National Construction Safety Team
Act is amended by striking ‘‘section 8;’’ and inserting ‘‘section 7;’’.
SEC. 16. GRANT ELIGIBILITY REQUIREMENTS AND COMPLIANCE WITH
IMMIGRATION LAWS.
(a) IMMIGRATION STATUS.—No grant or fellowship may be
awarded under this Act, directly or indirectly, to any individual
who is in violation of the terms of his or her status as a non-
immigrant under section 101(a)(15)(F), (M), or (J) of the Immigra-
tion and Nationality Act (8 U.S.C. 1101(a)(15)(F), (M), or (J)).
(b) ALIENS FROM CERTAIN COUNTRIES.—No grant or fellowship
may be awarded under this Act, directly or indirectly, to any alien
from a country that is a state sponsor of international terrorism,
as defined under section 306(b) of the Enhanced Border Security
and VISA Entry Reform Act (8 U.S.C. 1735(b)), unless the Secretary
of State determines, in consultation with the Attorney General
and the heads of other appropriate agencies, that such alien does
not pose a threat to the safety or national security of the United
States.
(c) NON-COMPLYING INSTITUTIONS.—No grant or fellowship may
be awarded under this Act, directly or indirectly, to any institution
of higher education or non-profit institution (or consortia thereof)
that has—
(1) materially failed to comply with the recordkeeping and
reporting requirements to receive nonimmigrant students or
exchange 
visitor 
program 
participants 
under 
section
101(a)(15)(F), (M), or (J) of the Immigration and Nationality
Act (8 U.S.C. 1101(a)(15)(F), (M), or (J)), or section 641 of
the Illegal Immigration Reform and Responsibility Act of 1996
(8 U.S.C. 1372), as required by section 502 of the Enhanced
Border Security and VISA Entry Reform Act (8 U.S.C. 1762);
or
(2) been suspended or terminated pursuant to section 502(c)
of the Enhanced Border Security and VISA Entry Reform Act
(8 U.S.C 1762(c)).
SEC. 17. REPORT ON GRANT AND FELLOWSHIP PROGRAMS.
Within 24 months after the date of enactment of this Act,
the Director, in consultation with the Assistant to the President
for National Security Affairs, shall submit to Congress a report
reviewing this Act to ensure that the programs and fellowships
are being awarded under this Act to individuals and institutions
of higher education who are in compliance with the Immigration
H. R. 3394—16
and Nationality Act (8 U.S.C. 1101 et seq.) in order to protect
our national security.
Speaker of the House of Representatives.
Vice President of the United States and
President of the Senate.