,i #aaf? ,,congress #b;d ,session ,h4 ,r4 #gbjd ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,june #ae1 #bjbj,ms4 ,e%oo 7= h]self & ,mr4 ,k9z+]7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,en]gy & ,comm]ce ,a ,,bill ,to direct ! ,assi/ant ,secret>y ( ,comm]ce = ,communications & ,in=mation to submit to ,congress a report exam9+ ! cyb]security ( mobile s]vice networks1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,und]/&+ ,cyb]security ( ,mobile ,networks ,act4 #b4 ,report on cyb]security ( mobile s]vice networks 7a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,assi/ant ,secret>y1 9 consultation ) ! ,dep>tm5t ( ,homel& ,security1 %all submit to ,congress a report exam9+ ! cyb]security ( mobile s]vice networks & ! vuln]ability ( su* networks & mobile devices to cyb]attacks & surveillance conduct$ by adv]s>ies4 7b7 ,matt]s ,to be includ$ ,! report requir$ by subsection 7a7 %all include ! foll[+3 7#a7 ,an assessm5t ( ! degree to :i* provid]s ( mobile s]vice h address$1 are address+1 or h n address$ cyb]security vuln]abilities 7includ+ vuln]abilities ! exploitation ( :i* c\ld lead to surveillance conduct$ by adv]s>ies7 id5tifi$ by academic & indep5d5t rese>*]s1 multi/akehold] /&>ds & te*nical organizations1 indu/ry exp]ts1 & ,f$]al ag5cies1 includ+ 9 relevant reports (-- 7,a7 ! ,national ,telecommunications & ,in=mation ,adm9i/ration2 7,b7 ! ,national ,in/itute ( ,/&>ds & ,te*nology2 & 7,c7 ! ,dep>tm5t ( ,homel& ,security1 includ+-- 7i7 ! ,cyb]security & ,infra/ructure ,security ,ag5cy2 & 7ii7 ! ,sci5ce & ,te*nology ,directorate4 7#b7 ,a discussion (-- 7,a7 ! degree to :i* cu/om]s 7includ+ consum]s1 companies1 & gov]nm5t ag5cies7 consid] cyb]security z a factor :5 consid]+ ! pur*ase ( mobile s]vice2 & 7,b7 ! comm]cial availability ( tools1 frameworks1 be/ practices1 & o!r res\rces = enabl+ su* cu/om]s to evaluate risk & price trade(fs4 7#c7 ,a discussion ( ! degree to :i* provid]s ( mobile s]vice h implem5t$ cyb]security be/ practices & risk assessm5t frameworks4 7#d7 ,an e/imate & discussion ( ! preval5ce & efficacy ( encryption & au!ntication algori?ms & te*niques us$ 9 ea* ( ! foll[+3 7,a7 ,mobile s]vice4 7,b7 ,mobile communications equipm5t or s]vices4 7,c7 ,commonly us$ mobile phones & o!r mobile devices4 7,d7 ,commonly us$ mobile op]at+ sy/ems & communications s(tw>e & applications4 7#e7 ,b>ri]s = provid]s ( mobile s]vice to adopt m efficaci\s encryption & au!ntication algori?ms & te*niques & to prohibit ! use ( old] encryption & au!ntication algori?ms & te*niques ) e/abli%$ vuln]abilities 9 mobile s]vice1 mobile communications equipm5t or s]vices1 & mobile phones & o!r mobile devices4 7#f7 ,! preval5ce1 usage1 & availability ( te*nologies t au!nticate legitimate mobile s]vice & mobile communications equipm5t or s]vices to :i* mobile phones & o!r mobile devices are connect$4 7#g7 ,! preval5ce1 co/s1 comm]cial availability1 & usage by adv]s>ies 9 ! ,unit$ ,/ates ( cell site simulators 7(t5 kn[n z int]national mobile subscrib] id5tity-cat*]s7 & o!r mobile s]vice surveillance & int]ception te*nologies4 7c7 ,consultation ,9 prep>+ ! report requir$ by subsection 7a71 ! ,assi/ant ,secret>y %all1 to ! degree practicable1 consult )-- 7#a7 ! ,commission2 7#b7 ! ,national ,in/itute ( ,/&>ds & ,te*nology2 7#c7 ! intellig5ce community2 7#d7 ! ,cyb]security & ,infra/ructure ,security ,ag5cy ( ! ,dep>tm5t ( ,homel& ,security2 7#e7 ! ,sci5ce & ,te*nology ,directorate ( ! ,dep>tm5t ( ,homel& ,security2 7#f7 academic & indep5d5t rese>*]s ) exp]tise 9 privacy1 encryption1 cyb]security1 & network ?reats2 7#g7 p>ticipants 9 multi/akehold] /&>ds & te*nical organizations 7includ+ ! #crd ,g5]ation ,p>tn]%ip ,project & ! ,int]net ,eng9e]+ ,task ,=ce72 7#h7 int]national /akehold]s1 9 coord9ation ) ! ,dep>tm5t ( ,/ate z appropriate2 7#i7 provid]s ( mobile s]vice2 7#aj7 manufactur]s1 op]ators1 & provid]s ( mobile communications equipm5t or s]vices & mobile phones & o!r mobile devices2 7#aa7 develop]s ( mobile op]at+ sy/ems & communications s(tw>e & applications2 & 7#ab7 o!r exp]ts t ! ,assi/ant ,secret>y consid]s appropriate4 7d7 ,scope ( report ,! ,assi/ant ,secret>y %all-- 7#a7 limit ! report requir$ by subsection 7a7 to mobile s]vice networks2 7#b7 exclude consid]ation ( #e;,g protocols & networks 9 ! report requir$ by subsection 7a72 7#c7 limit ! assessm5t requir$ by subsection 7b77#a7 to vuln]abilities t h be5 %[n to be-- 7,a7 exploit$ 9 non-laboratory sett+s2 or 7,b7 feasibly & practicably exploitable 9 real-_w conditions2 & 7#d7 consid] 9 ! report requir$ by subsection 7a7 vuln]abilities t h be5 effectively mitigat$ by manufactur]s ( mobile phones & o!r mobile devices4 7e7 ,=m ( report ,! report requir$ by subsection 7a7 %all be produc$ 9 unclassifi$ =m b may conta9 a classifi$ annex4 7f7 ,au?orization ( appropriations ,!re is au?oriz$ to be appropriat$ to c>ry out ?is section #ejj1jjj = fiscal ye> #bjbj4 ,su* am\nt is au?oriz$ to rema9 available ?r\gh fiscal ye> #bjba4 7g7 ,def9itions ,9 ?is section3 7#a7 ,adv]s>y ,! t]m adv]s>y includes-- 7,a7 any unau?oriz$ hack] or o!r intrud] into a mobile s]vice network2 & 7,b7 any =eign gov]nm5t or =eign nongov]nm5t p]son engag$ 9 a long-t]m patt]n or s]i\s in/ances ( conduct significantly adv]se to ! national security ( ! ,unit$ ,/ates or security & safety ( ,unit$ ,/ates p]sons4 7#b7 ,assi/ant secret>y ,! t]m ,assi/ant ,secret>y means ! ,assi/ant ,secret>y ( ,comm]ce = ,communications & ,in=mation4 7#c7 ,entity ,! t]m entity means a p>tn]%ip1 association1 tru/1 jo9t v5ture1 corporation1 gr\p1 subgr\p1 or o!r organization4 7#d7 ,intellig5ce community ,! t]m intellig5ce community has ! mean+ giv5 t t]m 9 section #c ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjjc74 7#e7 ,mobile communications equipm5t or s]vice ,! t]m mobile communications equipm5t or s]vice means any equipm5t or s]vice t is ess5tial to ! provision ( mobile s]vice4 7#f7 ,mobile s]vice ,! t]m mobile s]vice means1 to ! ext5t provid$ to ,unit$ ,/ates cu/om]s1 ei!r or bo? ( ! foll[+ s]vices3 7,a7 ,comm]cial mobile s]vice 7z def9$ 9 section #ccb7;d7 ( ! ,communications ,act ( #aicd 7#dg ,u4,s4,c4 #ccb7;d7774 7,b7 ,comm]cial mobile data s]vice 7z def9$ 9 section #fjja ( ! ,middle ,class ,tax ,relief & ,job ,creation ,act ( #bjab 7#dg ,u4,s4,c4 #adja774 7#g7 ,p]son ,! t]m p]son means an individual or entity4 7#h7 ,unit$ /ates p]son ,! t]m ,unit$ ,/ates p]son means-- 7,a7 an individual :o is a ,unit$ ,/ates citiz5 or an ali5 lawfully admitt$ = p]man5t resid5ce to ! ,unit$ ,/ates2 7,b7 an entity organiz$ "u ! laws ( ! ,unit$ ,/ates or any jurisdiction )9 ! ,unit$ ,/ates1 includ+ a =eign bran* ( su* an entity2 or 7,c7 any p]son 9 ! ,unit$ ,/ates4