sei.cmu

Getting Your Software Supply Chain In Tune with SBOM Harmonization

Software bills of materials or SBOMs are critical to software security and supply chain risk management. Regardless of the SBOM tool, the output should be consistent for a given piece of software. But ...
sei.cmu

NDIA System & Mission Engineering Conference 2025

The Software Engineering Institute is a leader in researching complex solutions, connecting AI, cyber, and software strategies for maximum impact. Since 1984, the SEI has been one of only 10 Federally ...
sei.cmu

A Naval Perspective on Open-Systems Architecture

Schmidt, D., and Sledge, C., 2016: A Naval Perspective on Open-Systems Architecture. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

AIAA SciTech Forum 2026

The SEI is participating at the SciTech Forum 2026 ...
sei.cmu

Welcome to the Insider Threat Blog

CERT Insider Threat Center, T., 2010: Welcome to the Insider Threat Blog. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...
Software Engineering Institute

5 Essential Questions for Implementing the Software Acquisition Pathway and the Tools to Tackle Them

In this webcast, Eileen Wrubel and Brigid O’Hearn discuss the launch of the Software Acquisition Go Bag. Our SEI team has helped hundreds of DoD programs deliver software-enabled capability through ...
sei.cmu

Rust Software Security: A Current State Assessment

Sible, J., and Svoboda, D., 2022: Rust Software Security: A Current State Assessment. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Applying Large Language Models to DoD Software Acquisition: An Initial Experiment

Schmidt, D., and Robert, J., 2024: Applying Large Language Models to DoD Software Acquisition: An Initial Experiment. Carnegie Mellon University, Software Engineering ...
sei.cmu

Using ChatGPT to Analyze Your Code? Not So Fast

Sherman, M., 2024: Using ChatGPT to Analyze Your Code? Not So Fast. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed November 3 ...
sei.cmu

Best Practices for Cloud Security

Faatz, D., 2018: Best Practices for Cloud Security. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed October 22, 2025, https ...
sei.cmu

2000 CERT Advisories

CERT/CC advisories are now part of the US-CERT National Cyber Awareness System. We provide these advisories, published by year, for historical purposes. This report details the description, impact, ...
sei.cmu

Threat Modeling: 12 Available Methods

Shevchenko, N., 2018: Threat Modeling: 12 Available Methods. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed October 29, 2025 ...