Software Engineering Institute

SEI Launches Leadership in AI for Cybersecurity Application Workshop

This training teaches analysts, developers, engineers, and leaders to build an end-to-end AI solution and consider how it could realize value for their organization.
sei.cmu

SEI Study on Defense Department DevSecOps Finds Excellence and Opportunities

May 12, 2025—DevSecOps practices foster collaboration among software development, security, and operations teams to build, test, and release software quickly and reliably. A high-stakes, high-security ...
sei.cmu

Using LLMs to Adjudicate Static-Analysis Alerts

Software analysts use static analysis as a standard method to evaluate the source code for potential vulnerabilities, but the volume of findings is often too large to review in their entirety, causing ...
sei.cmu

Introduction to MLOps: Bridging Machine Learning and Operations

DeCapria, D., 2024: Introduction to MLOps: Bridging Machine Learning and Operations. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

An Introduction to Model-Based Systems Engineering (MBSE)

Shevchenko, N., 2024: An Introduction to Model-Based Systems Engineering (MBSE). Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Application Programming Interface (API) Vulnerabilities and Risks

This report describes 11 common vulnerabilities and 3 risks related to application programming interfaces, providing suggestions about how to fix or reduce their impact. Application programming ...
sei.cmu

Software Bill of Materials (SBOM) Considerations for Operational Test & Evaluation Activities

This white paper looks at potential uses for an SBOM within various Operational Test & Evaluation (OT&E) activities. It looks at the history and background of SBOMs, recent developments (as of the ...
sei.cmu

Applying the SEI SBOM Framework

Woody, D., 2024: Applying the SEI SBOM Framework. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed April 15, 2026, https://doi ...
sei.cmu

The SEI SBOM Framework: Informing Third-Party Software Management in Your Supply Chain

Alberts, C., Bandor, M., Wallen, C., and Woody, D., 2023: The SEI SBOM Framework: Informing Third-Party Software Management in Your Supply Chain. Carnegie Mellon ...
sei.cmu

Using Game Theory to Advance the Quest for Autonomous Cyber Threat Hunting

Groce, P., 2023: Using Game Theory to Advance the Quest for Autonomous Cyber Threat Hunting. Carnegie Mellon University, Software Engineering Institute's Insights ...
sei.cmu

Software Isolation: Why It Matters to Software Evolution and Why Everybody Puts It Off

Benitez, M., 2023: Software Isolation: Why It Matters to Software Evolution and Why Everybody Puts It Off. Carnegie Mellon University, Software Engineering Institute ...
sei.cmu

Rust Vulnerability Analysis and Maturity Challenges

Wassermann, G., and Svoboda, D., 2023: Rust Vulnerability Analysis and Maturity Challenges. Carnegie Mellon University, Software Engineering Institute's Insights ...