Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University
SEI Podcast Series

Selected Category: Cybersecurity Engineering

December 08, 2016

Cyber Security Engineering for Software and Systems Assurance

 Jeffrey Smith (Microsoft)

Nancy R. Mead

 Jeffrey Smith (Microsoft)

Carol Woody, PhD

"We have made risk management the driving focus. In essence that is because nobody goes out and just buys security for the sake of security. There has got to be a reason that they need that type of control or structure around the data and what happens with their technology."

"We have made risk management the driving focus. In essence that is because nobody goes out and just buys security for the sake of security. There has got to be a reason that they need that type of control or structure around the data and what happens with their technology."
October 13, 2016

Predicting Quality Assurance with Software Metrics and Security Methods

 Jeffrey Smith (Microsoft)

Carol Woody, PhD

"Through our research we were able to identify a connection between security vulnerabilities and quality defects."

"Through our research we were able to identify a connection between security vulnerabilities and quality defects."
September 29, 2016

Network Flow and Beyond

 Jeffrey Smith (Microsoft)

Timothy J. Shimeall

"The interesting question is are there departures from the diurnal curve? Is there a sudden interruption? Is there a particularly high spike? Now, I can turn to other data sources to help me drill down and understand that. Can I look at my firewall records and see whether or not there was some interruption in terms of blocked traffic or network connection problems with respect to that? Can I look at my web server logs and see whether or not there was a big spike of activity for whatever reason?"

"The interesting question is are there departures from the diurnal curve? Is there a sudden interruption? Is there a particularly high spike? Now, I can turn to other data sources to help me drill down and understand that. Can I look at my firewall records and see whether or not there was some interruption in terms of blocked traffic or network connection problems with respect to that? Can I look at my web server logs and see whether or not there was a big spike of activity for whatever reason?"
September 15, 2016

A Community College Curriculum for Secure Software Development

 Jeffrey Smith (Microsoft)

Girish Seshagiri

"This initiative will succeed if it is employer driven. These are the people that have the jobs. Those are the people that you need to have on board to actually pay the apprentice an apprentice wage, so we do not have the student debt and all of that.  "

"This initiative will succeed if it is employer driven. These are the people that have the jobs. Those are the people that you need to have on board to actually pay the apprentice an apprentice wage, so we do not have the student debt and all of that.  "
August 10, 2016

The SEI Fellow Series: Nancy Mead

 Jeffrey Smith (Microsoft)

Nancy R. Mead

"Even in high school my very first formal teaching job was tutoring one of my classmates who wanted to go to college but was struggling with the academic math requirements. That caused me to be interested in it. Then, at IBM, I was manager of an education team that taught software engineering and I continued to teach at universities part-time, here and there, when the opportunity presented itself."

"Even in high school my very first formal teaching job was tutoring one of my classmates who wanted to go to college but was struggling with the academic math requirements. That caused me to be interested in it. Then, at IBM, I was manager of an education team that taught software engineering and I continued to teach at universities part-time, here and there, when the opportunity presented itself."