Software Engineering Institute

SEI Report Advises Congress on Civilian Cybersecurity Reserve

The Pentagon-commissioned study recommends boosting the federal government’s cybersecurity capabilities with private-sector professionals, under certain conditions.
Software Engineering Institute

SEI Parser Demystifies Firmware to Fight Vulnerabilities

Software based on the Unified Extensible Firmware Interface (UEFI) standard makes up the firmware of most modern desktop computers and servers. This software is largely invisible to users, critical to ...
sei.cmu

An Introduction to Model-Based Systems Engineering (MBSE)

Shevchenko, N., 2020: An Introduction to Model-Based Systems Engineering (MBSE). Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Measuring Resilience in Artificial Intelligence and Machine Learning Systems

Petrilli, A., and Lau, S., 2019: Measuring Resilience in Artificial Intelligence and Machine Learning Systems. Carnegie Mellon University, Software Engineering ...
sei.cmu

Software Architecture

The software architecture of a system represents the design decisions related to overall system structure and behavior. Architecture helps stakeholders understand and analyze how the system will ...
sei.cmu

A New Approach for Handheld Devices in the Military

Morris, E., 2011: A New Approach for Handheld Devices in the Military. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed January ...
sei.cmu

Structuring the Chief Information Security Officer (CISO) Organization

Mehravari, N., and Allen, J., 2016: Structuring the Chief Information Security Officer (CISO) Organization. Carnegie Mellon University, Software Engineering Institute ...
sei.cmu

The Risks of Google Sign-In on iOS Devices

Dormann, W., 2016: The Risks of Google Sign-In on iOS Devices. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed January 14, 2026 ...
Software Engineering Institute

Right-Sized DevSecOps: How Tooling Complexity Breaks Modern Pipelines

In this webcast, Joseph Yankel, Vaughn Coates, and David Shepard discuss how right-sizing DevSecOps restores velocity and reliability.
sei.cmu

Taking DevSecOps to the Next Level with Value Stream Mapping

Brown, N., 2021: Taking DevSecOps to the Next Level with Value Stream Mapping. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...
sei.cmu

Probably Don’t Rely on EPSS Yet

Spring, J., 2022: Probably Don’t Rely on EPSS Yet. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed January 14, 2026, https ...
sei.cmu

Architecture Tradeoff Analysis Method Collection

This collection contains resources about the Architecture Tradeoff Analysis Method (ATAM), a method for evaluating software architectures against quality attribute goals. The Architecture Tradeoff ...