Senate cyber security plan met with criticism

WASHINGTON -- A developing Senate plan that would bolster the government's ability to regulate the computer security of companies that run critical industries is drawing strong opposition from businesses that say it goes too far and security experts who believe it should have even more teeth.

Legislation set to come out in the days ahead is intended to ensure that computer systems running power plants and other essential parts of the country's infrastructure are protected from hackers, terrorists or other criminals.

The Department of Homeland Security, with input from businesses, would select which companies to regulate; the agency would have the power to require better computer security, according to officials who described the bill.

Lawmakers have not finalized the details, but those are the most contentious parts of legislation designed to boost cybersecurity against the constant attacks that target government, corporate and personal computer networks and accounts.

Authorities are increasingly worried that cybercriminals are trying to take over systems that control the inner workings of water, electrical, nuclear or other power plants.

That was the case with the Stuxnet computer worm, which targeted Iran's nuclear program in 2010, infecting laptops at the Bushehr nuclear power plant.

As much as 85 percent of America's critical infrastructure is owned and operated by private companies.

The emerging proposal isn't sitting well with those who believe it gives Homeland Security too much power and those who think it's too watered down to achieve real security improvements.