Prototyping secure artificial intelligence data centers

(a) Prototyping artificial intelligence data centers The Secretary of Defense shall, acting through the Under Secretary of Defense for Research and Engineering and in consultation with the Director of the National Security Agency and the head of the Center for Artificial Intelligence Standards and Innovation at the Department of Commerce, carry out a program to construct, retrofit, prototype, and perform testing and evaluation on highly secure data centers uniquely built for artificial intelligence workloads and capable of— (1) resisting attacks by nation-state adversaries; (2) addressing threats from autonomous artificial intelligence agents; and (3) securing the confidentiality, integrity, and availability of artificial intelligence models and inference pipelines. (b) Focus The program required by subsection (a) shall be focused on— (1) building or retrofitting prototype technologies and security controls needed to protect artificial intelligence data centers from attacks by nation-state adversaries; (2) building or prototyping crucial components, such as cross-domain solutions, to address specific security needs of artificial intelligence data centers; (3) protecting model weights and other sensitive assets stored in advanced artificial intelligence data centers from theft, sabotage, unauthorized access, or manipulation by nation-state adversaries; (4) addressing new challenges associated with highly autonomous artificial intelligence systems, including attempts to autonomously exploit vulnerabilities, evade monitoring, or exfiltrate sensitive assets; (5) identifying technologies not yet commercially available or sufficiently mature to achieve the elements of the focus set out in this subsection, including hardware tamper resistance, secure and confidential computing at scale, and supply chain verification tools, and recommending research and development investments needed to advance such technologies; (6) assessing relevant physical security, cybersecurity, supply chain security, insider threat, access control, monitoring, compartmentation, secure compute environment, and incident response requirements for such facilities; and (7) developing detailed plans, budgets, and cost estimates and recommended courses of action, for constructing or retrofitting facilities to achieve the goals of this subsection. (c) Briefing and report (1) Briefing Not later than 180 days after the date of the enactment of this Act, the Secretary shall provide to the congressional defense committees a briefing on progress made under the program required by subsection (a), including key findings from prototype activities, threats, vulnerabilities, capability gaps, and resourcing requirements. (2) Report Not later than one year after the date of the enactment of this Act, the Secretary shall submit to the congressional defense committees a report on the results of the program required by subsection (a), including— (A) prototype results, technologies, or operational measures needed to improve the security of secure artificial intelligence data centers; and (B) recommendations for further investments to address threats from nation-state adversaries and autonomous artificial intelligence agents.