Search any bill in Congress.

The AI Cyber Defense Act requires the National Institute of Standards and Technology (NIST) to take a leading role in addressing cybersecurity threats related to artificial intelligence (AI). Within 180 days of the bill's enactment, NIST must engage with private sector AI stakeholders to define 'AI distillation attacks'—a type of AI-based cyberattack—and develop voluntary standards and best practices to detect and prevent these attacks. These standards are to be published publicly within one year. Additionally, NIST must establish an AI Cybersecurity Roundtable within 180 days, including representatives from private AI companies and critical infrastructure operators, to develop voluntary standards and best practices for using AI defensively in cybersecurity. These standards must also be published within one year. The bill defines key terms such as 'artificial intelligence,' 'critical infrastructure,' and 'entities of concern,' which include foreign companies or persons linked to specified countries considered security risks. The focus on voluntary standards means that while the guidelines are not mandatory, they aim to encourage best practices across industries to improve cybersecurity resilience against AI-driven threats. This approach could help private companies and critical infrastructure operators better protect themselves from emerging AI-based cyberattacks, potentially reducing risks to national security and economic stability. However, since the standards are voluntary, their adoption may vary, and the bill does not provide direct enforcement mechanisms. The involvement of private sector stakeholders ensures that the standards are informed by industry expertise, but it may also raise concerns about the influence of commercial interests on cybersecurity policies.