House votes to increase penalties for cybercrime. (News, Trends & Analysis).

The U.S. government may not be prepared for cyber attacks, but it is prepared to punish cyber attackers. The House recently passed legislation to increase penalties for computer crimes and make it easier for Internet service providers (ISPs) to disclose dangerous material to government agencies. The legislation also states that immediate threats to national security should be included among emergency instances where law enforcement can tap into computer communications.

Cybercrime is more than an annoyance; it can devastate business, the economy, and the nation's infrastructure. "Our mouse can be just as dangerous as a bullet or a bomb," said Rep. Lamar Smith, (R-Texas), the legislation's chief sponsor.

The bill exempts from civil or criminal liability ISPs that disclose communications to government offices in the good-faith belief that an emergency posing danger of death or serious physical injury exists.

Electronic surveillance tools known as "pen registers" and "trap-and-trace devices" can be used for 48 hours while court authorization is sought if an immediate threat to national security exists or an attack is underway on protected computers. Such devices allow law enforcement to find the source or destination of computer communications without capturing the content. To meet privacy considerations, the bill says agencies must report to the Justice Department within 90 days after getting access to electronic communications.

In addition, the bill doubles the maximum penalty from 10 to 20 years' imprisonment for knowingly attempting to cause serious injury through a cyber attack. Attempts to cause death may receive punishment of up to life in prison.

The legislation, which still requires Senate approval, also would move the National Infrastructure Protection Center from the FBI to the planned Homeland Security Department to respond to cyber attacks.