Software Engineering Institute

SEI Launches Leadership in AI for Cybersecurity Application Workshop

This training teaches analysts, developers, engineers, and leaders to build an end-to-end AI solution and consider how it could realize value for their organization.
sei.cmu

Software Isolation: Why It Matters to Software Evolution and Why Everybody Puts It Off

Benitez, M., 2023: Software Isolation: Why It Matters to Software Evolution and Why Everybody Puts It Off. Carnegie Mellon University, Software Engineering Institute ...
sei.cmu

Tools for Building an AI-Enabled SOC

In this webcast, Justin Novak and Christopher Ian Rodman discuss how AI can be leveraged to build out and enable your security operations center (SOC) by covering gaps in tools, workforce, and ...
sei.cmu

Summaries from the 2025 SEI Year in Review

The Software Engineering Institute establishes and advances software as a strategic advantage for national security. We lead and direct research and transition of software engineering, cyber, ...
sei.cmu

Mission Thread Analysis Using End-to-End Data Flows - Part 1

Firesmith, D., 2019: Mission Thread Analysis Using End-to-End Data Flows - Part 1. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Don't Play Developer Testing Roulette: How to Use Test Coverage

Binder, R., 2019: Don't Play Developer Testing Roulette: How to Use Test Coverage. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

CERT Leadership in AI for Cybersecurity Certificate Package

Students who wish to purchase the CERT Leadership in AI for Cybersecurity certificate package (three eLearning courses, instructor-led 2-day workshop) will receive a discount from the total cost. The ...
sei.cmu

Rust Software Security: A Current State Assessment

Sible, J., and Svoboda, D., 2022: Rust Software Security: A Current State Assessment. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Prioritizing Vulnerability Response: A Stakeholder-Specific Vulnerability Categorization

This paper presents a testable Stakeholder-Specific Vulnerability Categorization (SSVC) that takes the form of decision trees and that avoids some problems with the Common Vulnerability Scoring System ...
sei.cmu

Architecture Tradeoff Analysis Method Collection

This collection contains resources about the Architecture Tradeoff Analysis Method (ATAM), a method for evaluating software architectures against quality attribute goals. The Architecture Tradeoff ...
sei.cmu

When "ASLR" Is Not Really ASLR - The Case of Incorrect Assumptions and Bad Defaults

Dormann, W., 2018: When "ASLR" Is Not Really ASLR - The Case of Incorrect Assumptions and Bad Defaults. Carnegie Mellon University, Software Engineering Institute's ...
sei.cmu

12 Risks, Threats, & Vulnerabilities in Moving to the Cloud

Morrow, T., 2018: 12 Risks, Threats, & Vulnerabilities in Moving to the Cloud. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...