SEI Digital Library
Latest Publications
3 Key Elements for Designing Secure Systems
• Podcast
By Timothy A. Chick
To make secure software by design a reality, engineers must intentionally build security throughout the software development lifecycle.
Listen
Game-Theoretic Modeling and Analysis of Insider Compliance with Security Policy
• Conference Paper
By Andrew P. Moore, Stephanie Grzenia, Jose A. Morales, Cody Ickes, Joshua Fallon, William Casey
In this paper, the authors present our work in progress applying game-theoretic modeling and analysis to their study of the effects of policy compliance requirements on shifting insider motivation.
Read
Using Role-Playing Scenarios to Identify Bias in LLMs
• Podcast
By Katherine-Marie Robinson, Violet Turri
Harmful biases in large language models (LLMs) make AI less trustworthy and secure. Katie Robinson and Violet Turri discuss their recent work using role-playing game scenarios to identify biases in …
Listen
Best Practices and Lessons Learned in Standing Up an AISIRT
• Podcast
By Lauren McIlvenny
In the wake of widespread adoption of AI practices in critical infrastructure, best practices and lessons learned in standing up a AI Security Incident Response Team (AISIRT).
Listen
Embracing AI: Unlocking Scalability and Transformation Through Generative Text, Imagery, and Synthetic Audio
• Webcast
By Tyler Brooks, Shannon Gallagher, Dominic A. Ross
In this webcast, Tyler Brooks, Shannon Gallagher, and Dominic Ross aim to demystify AI and illustrate its transformative power in achieving scalability, adapting to changing landscapes, and driving digital innovation.
Watch
Counter AI: What Is It and What Can You Do About It?
• White Paper
By Nathan M. VanHoudnos, Carol J. Smith, Matt Churilla, Shing-hon Lau, Lauren McIlvenny, Greg Touhill
This paper describes counter artificial intelligence (AI) and provides recommendations on what can be done about it.
Read
3 API Security Risks (and How to Protect Against Them)
• Podcast
By McKinley Sconiers-Hasan
McKinley Sconiers-Hasan discusses three API risks and how to address them through the lens of zero trust.
Listen
Using Quality Attribute Scenarios for ML Model Test Case Generation
• Conference Paper
By Rachel Brower-Sinning, Grace Lewis, Sebastián Echeverría, Ipek Ozkaya
This paper presents an approach based on quality attribute (QA) scenarios to elicit and define system- and model-relevant test cases for ML models.
Read
Lessons Learned in Coordinated Disclosure for Artificial Intelligence and Machine Learning Systems
• White Paper
By Allen D. Householder, Vijay S. Sarvepalli, Jeff Havrilla, Matt Churilla, Lena Pons, Shing-hon Lau, Nathan M. VanHoudnos, Andrew Kompanek, Lauren McIlvenny
In this paper, the authors describe lessons learned from coordinating AI and ML vulnerabilities at the SEI's CERT/CC.
Read
On the Design, Development, and Testing of Modern APIs
• White Paper
By Alejandro Gomez, Alex Vesey
This white paper discusses the design, desired qualities, development, testing, support, and security of modern application programming interfaces (APIs).
Read