US Lawmaker Proposes AI-Powered Cybersecurity Pilot for Critical Infrastructure
Rep. Josh Gottheimer has introduced the AI Cyber Defense Act, a bill aiming to provide critical infrastructure operators with free access to advanced AI models for enhanced cybersecurity defenses.
A new legislative proposal from Capitol Hill seeks to bolster the cybersecurity defenses of the nation's critical infrastructure by leveraging the power of artificial intelligence. Rep. Josh Gottheimer, D-N.J., has introduced the AI Cyber Defense Act, which would establish a pilot program within the Cybersecurity and Infrastructure Security Agency (CISA). This initiative aims to offer owners and operators of critical infrastructure free access to cutting-edge AI models and technical assistance.
The bill is directly inspired by a recent spate of cyberattacks targeting water facilities, highlighting the growing vulnerability of essential services. "If we don’t get ahead of it, it can mean a disaster for our families," Gottheimer stated, emphasizing the urgent need for proactive measures. The congressman, who holds key positions in AI and cyber policy as a co-chair of the House Democratic Commission on Artificial Intelligence and the top Democrat on the House Intelligence Committee's cyber subcommittee, has garnered bipartisan support for the legislation.
The AI Cyber Defense Act directs the Department of Homeland Security, through CISA, to create a program enabling participants to securely utilize AI for detecting, testing, and remediating cybersecurity vulnerabilities. This program is designed to be a crucial resource, particularly for smaller and rural entities that may lack the substantial financial resources required to procure and implement advanced AI solutions independently.
Authorized with $100 million in funding for the period between 2027 and 2031, the bill aims to address the financial barriers to AI adoption in cybersecurity. Gottheimer pointed out that "federal funding for critical infrastructure has an uncertain future and many of our local communities just don't have the resources they need to pay for AI tokens to do the patching they need." He further elaborated that the cost of integrating AI for vulnerability analysis can be prohibitive for many organizations.
Priority within the pilot program will be given to nonprofit, publicly owned, rural, and small-sized organizations, ensuring that those most in need receive support. This focus aims to democratize access to advanced cybersecurity tools, preventing a scenario where only well-funded entities can afford the best protection.
Gottheimer acknowledged the dual nature of AI in cybersecurity, noting, "The same technology that can help a small town's IT guy find and patch a gap in cybersecurity can also help a hostile government find a hundred more it hasn't even discovered yet." He stressed that while AI did not create the threat landscape, it has significantly accelerated it, necessitating a parallel advancement in defensive capabilities.
The proposed legislation comes as other initiatives are also exploring the intersection of AI and cybersecurity. However, Gottheimer's bill distinguishes itself with a dedicated funding authorization, aiming to provide a more robust and sustainable framework compared to purely voluntary programs. The success of the pilot will depend on future appropriations, but the bill represents a significant step towards integrating AI into the nation's critical infrastructure defense strategy.