sei.cmu

Rust Software Security: A Current State Assessment

Sible, J., and Svoboda, D., 2022: Rust Software Security: A Current State Assessment. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Go Bag User's Guide

The Software Acquisition Go Bag (or Go Bag for short) is an extensible collection of tailorable kits that program teams can use to enable the delivery of software capabilities at the speed of need.
sei.cmu

How do we scope and sequence an MVP, MVCR, and subsequent releases?

Kicking off the Software Acquisition Go Bag series, Brigid O'Hearn (Software Modernization Policy Lead) of the Software Solutions Division at the SEI walks through the definitions and process of a ...
sei.cmu

For those on the Software Acquisition Pathway (SWP), how do we catch problems before they escalate?

Kicking off the Software Acquisition Go Bag series, Eileen Wrubel (Technical Director - Transforming Software Acquisition Policy and Practice) and Brigid O'Hearn (Software Modernization Policy Lead) ...
sei.cmu

What is the SWP?

Before the SWP policy was released in 2020, most acquisition policy and guidance was designed for hardware-centric programs using milestones that measured readiness to proceed to the next phase. The ...
sei.cmu

Bridging Research and Practice in LLM Agent Security

This newsletter compiles the latest SEI releases and news about mitigating security risks in agentic large language models (LLMs), AI-powered memory safety with the pointer ownership model, aligning ...
sei.cmu

The Need to Specify Requirements for Off-Nominal Behavior

Firesmith, D., 2012: The Need to Specify Requirements for Off-Nominal Behavior. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...
sei.cmu

An Introduction to Model-Based Systems Engineering (MBSE)

Shevchenko, N., 2020: An Introduction to Model-Based Systems Engineering (MBSE). Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

How Easy Is It to Make and Detect a Deepfake?

Bernaciak, C., and Ross, D., 2022: How Easy Is It to Make and Detect a Deepfake?. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

An Introduction to the Cybersecurity Maturity Model Certification (CMMC)

Stewart, K., and Hoover, A., 2020: An Introduction to the Cybersecurity Maturity Model Certification (CMMC). Carnegie Mellon University, Software Engineering ...
sei.cmu

Using ChatGPT to Analyze Your Code? Not So Fast

Sherman, M., 2024: Using ChatGPT to Analyze Your Code? Not So Fast. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed December 11 ...
sei.cmu

10 Types of Application Security Testing Tools: When and How to Use Them

Scanlon, T., 2018: 10 Types of Application Security Testing Tools: When and How to Use Them. Carnegie Mellon University, Software Engineering Institute's Insights ...