Software Engineering Institute

Right-Sized DevSecOps: How Tooling Complexity Breaks Modern Pipelines

In this webcast, Joseph Yankel, Vaughn Coates, and David Shepard discuss how right-sizing DevSecOps restores velocity and reliability.
Software Engineering Institute

SEI Parser Demystifies Firmware to Fight Vulnerabilities

Software based on the Unified Extensible Firmware Interface (UEFI) standard makes up the firmware of most modern desktop computers and servers. This software is largely invisible to users, critical to ...
sei.cmu

AI-Powered Memory Safety with the Pointer Ownership Model

Svoboda, D., and Flynn, L., 2025: AI-Powered Memory Safety with the Pointer Ownership Model. Carnegie Mellon University, Software Engineering Institute's Insights ...
sei.cmu

A Model-Based Approach for Software Acquisition

Dempsey, C., and Hugues, J., 2025: A Model-Based Approach for Software Acquisition. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Software Isolation: Why It Matters to Software Evolution and Why Everybody Puts It Off

Benitez Preciado, M., 2023: Software Isolation: Why It Matters to Software Evolution and Why Everybody Puts It Off. Carnegie Mellon University, Software Engineering ...
sei.cmu

An Introduction to Model-Based Systems Engineering (MBSE)

Shevchenko, N., 2024: An Introduction to Model-Based Systems Engineering (MBSE). Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Evaluating Static Analysis Alerts with LLMs

Klieber, W., and Flynn, L., 2024: Evaluating Static Analysis Alerts with LLMs. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...
sei.cmu

Application Programming Interface (API) Vulnerabilities and Risks

This report describes 11 common vulnerabilities and 3 risks related to application programming interfaces, providing suggestions about how to fix or reduce their impact. Application programming ...
sei.cmu

Applying Large Language Models to DoD Software Acquisition: An Initial Experiment

Schmidt, D., and Robert, J., 2024: Applying Large Language Models to DoD Software Acquisition: An Initial Experiment. Carnegie Mellon University, Software Engineering ...
sei.cmu

CERT Releases 2 Tools to Assess Insider Risk

Black, R., 2024: CERT Releases 2 Tools to Assess Insider Risk. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed January 16, 2026 ...
sei.cmu

10 Benefits and 10 Challenges of Applying Large Language Models to DoD Software Acquisition

Robert, J., and Schmidt, D., 2024: 10 Benefits and 10 Challenges of Applying Large Language Models to DoD Software Acquisition. Carnegie Mellon University, Software ...
sei.cmu

The Seven Virtues of Reconciling Agile and Earned Value Management (EVM)

Wilson, S., Place, P., and Korzec, K., 2023: The Seven Virtues of Reconciling Agile and Earned Value Management (EVM). Carnegie Mellon University, Software ...