SEI Digital Library
Latest Publications
Elements of Effective Communications for Cybersecurity Teams
• Webcast
In this webcast, Cybersecurity Operations Researcher Sharon Mudd leverages the National Institute of Standards and Technology Cybersecurity Framework and the Forum of Incident Response and Security Teams CSIRT Services Framework …
Watch
DOD Software Modernization: SEI Impact and Innovation
• Podcast
As software size, complexity, and interconnectedness continues to grow, modernization has become more important than ever. Paul Nielsen outlines the SEI's work with the DoD on this front in the …
Listen
Operational Resilience Fundamentals: Building Blocks of a Survivable Enterprise
• Webcast
In this webcast, Greg Crabbe and Matt Butkovic share their experiences in establishing and maintaining operational resilience programs.
Watch
Using LLMs to Adjudicate Static-Analysis Alerts
• Conference Paper
This paper discusses techniques for using large language models to handle static analysis output.
Read
Understanding the Need for Cyber Resilience
• Webcast
In this webcast, Matthew Butkovic, Greg Crabb, and Ray Umerley explore how to best plan for maintaining operational resilience when a ransomware incident occurs.
Watch
Addressing Today's Software Risks Requires an Assurance-Educated Workforce
• Article
The author summarizes gaps in workforce knowledge, skills, and support resources based on recent publications and panel discussions held by the SSCA forum.
Read
Securing Docker Containers: Techniques, Challenges, and Tools
• Podcast
With the increasing prevalence of cloud computing environments, containers are increasingly providing their underlying architecture.
Listen
Security Engineering Framework (SEF): Managing Security and Resilience Risks Across the Systems Lifecycle
• Special Report
The SEF is a collection of software-focused engineering practices for managing security and resilience risks across the systems lifecycle.
Read
An Introduction to Software Cost Estimation
• Podcast
Software cost estimation is an important first step when beginning a project. It addresses budget, staffing, scheduling, and whether the current environment will support the project.
Listen
Dangers of AI for Insider Risk Evaluation (DARE)
• White Paper
This paper describes the challenges and pitfalls of using artificial intelligence for insider risk analysis and how to thoughtfully and efficiently use AI to find insider threats.
Read