This SEI Blog post is an overview of publications regarding the SEI's work on AI, DevSecOps, and Security Incident Response.

July 5, 2021•By Douglas Schmidt (Vanderbilt University)

The SEI, a DoD federally funded research and development center (FFRDC), shares its multi-year research roadmap for next-gen software-reliant systems.

July 12, 2021•By Anita Carleton

In Software Engineering Research and Development

The role of metrics in a government program’s assessment of progress in an iterative, incremental delivery of a system.

July 19, 2021•By Will Hayes, Patrick R. Place, Keith Korzec

In Agile

This SEI Blog on cybersecurity in cyber-physical systems (CPS), shows how safety evaluations fail to protect against cyber threats.

August 2, 2021•By Mark Sherman

In Cyber-Physical Systems

DNS over HTTPS (DoH) can impair enterprise network visibility and security by bypassing traditional DNS monitoring and protections. In this post, I'll provide enterprise defenders three strategies for security monitoring …

August 9, 2021•By Sean Hutchison

In Cybersecurity Engineering

This post explores people issues that must be considered when software teams transition from sustainment to engineering.

August 16, 2021•By Thomas Evans, Michael J. Gagliardi, Mena Kostial, Nicholas Reimer, Douglas Schmidt (Vanderbilt University)

In Software Engineering Research and Development

This blog post translates federal-government-specific aspects of the Risk Management Framework into processes for nonfederal organizations.

August 23, 2021•By Emily Shawgo, Brian Benestelli

In Enterprise Risk and Resilience Management

This blog post by Rachel Dzombak and Jay Palat outlines 5 factors that are critical for organizations and leaders to consider as they grow an AI-ready workforce.

August 30, 2021•By Rachel Dzombak, Jay Palat

In Artificial Intelligence Engineering

This post highlights the latest work from the SEI in coordinated vulnerability disclosure, cyber risk and resilience management, automation, and the science of cybersecurity.

September 6, 2021•By Douglas Schmidt (Vanderbilt University)

In CERT/CC Vulnerabilities

Ghidra provides a compelling environment for reverse engineering tools that are relatively easy to use during malware analysis. Our latest blog post highlights a new suite of tools, known as …

September 13, 2021•By Garret Wassermann, Jeff Gennari

In Reverse Engineering for Malware Analysis