Analyzing Zero Trust Risk Tradeoffs for Weapon Systems
This report documents the results of a study that analyzes the tradeoffs that should be considered when implementing zero trust in a weapon system.
-
Home
- Publications and Media
Publications and Media
SEI REPORT
•
Analyzing Zero Trust Risk Tradeoffs for Weapon Systems
News
Digital Library
The SEI publishes extensively to connect with and deliver our most recent advancements in software engineering, cyber, artificial intelligence, and acquisition transformation to the software community. We publish our research in elite journals, and we also produce technical reports, white papers, webcasts, and much more—all of which we make available in our digital library. We’ve collected thousands of publications over decades of research that you can download today.
Search the digital library
Technical Papers
Strategies for System Modernization
The purpose of this SEI report is to support policymakers and assist the PMO and program team in making risk-based decisions in system modernization.
Early Lifecycle Cybersecurity Requirements Development Through Threat Modeling
This report details a threat modeling method for lifecycle cybersecurity risk management, from early design onward, uniting U.S. Air Force and other cybersecurity sources.
A Decade of GHOSTS in the Machine: From Cyber Range Realism to Cognitive Mission Rehearsal
This paper describes how GHOSTS evolved from simple activity generation into a platform for simulating complex human, organizational, and machine behavior.
Unused Code: A Hidden Time Bomb
This report examines failures that unused code can cause, including discussions of real examples using C/C++, and discussions of other languages as well.
Integrating Cyber Threat Intelligence into Cyber Mission Rehearsals
This report provides a comprehensive overview of how to integrate cyber threat intelligence into cybersecurity mission rehearsals, focusing on planning, assessment, and evaluation.
Blog Posts
This post presents seven core research areas for a rapidly evolving cyber landscape.
Read more about Seven Core Research Areas for a Rapidly Evolving Cyber Landscape>This blog post proposes a five-step framework for determining the needed realism of a simulated environment.
Read more about A Five-Step Framework to Sufficient Realism in Cyber Simulations>Learn how the Waypoints Framework helps program managers visualize activities, synchronize dependencies, and manage risks effectively.
Read more about Navigating Program Complexity with the Waypoints Framework>How do you select the best hardware to test next-gen compilers? Our latest post explores how the SEI is tackling this challenge for DARPA’s MOCHA …
Read more about Choosing the Hardware That Will Put DARPA MOCHA’s Compilers to the Test>Podcasts
Our latest podcast explores the shift from depot activation to continuous evolution of technical baselines to avoid risky software sustainment paths.
Read more about Fast Development, Furious Sustainment: 3 Questions for Continuous Evolution>
This podcast presents a new quality model for machine learning components that serves as a guide for requirements elicitation and negotiation.
Read more about Why Accuracy Isn’t Enough: A New Quality Model for Real-World ML Components>
This podcast explores the use of LLMs in unclassified environments to rapidly develop tools that accelerate software analysis in classified environments with improved accuracy.
Read more about Breaking Down Barriers: How LLMs Enable Software Analysis in Classified Environments>
This podcast explores the evolution of software-defined warfare and the challenges of implementing software on the battlefield.
Read more about Software-Defined Warfare: Expanding the Frontier>
Webcasts
Upcoming
Upcoming Webcast
・
How Real Is Real Enough? A Decade of Lessons from GHOSTS
Latest webcasts
This webcast introduces and explores the seven topic areas that the SEI identified in its SEI Report, Advancing Cybersecurity: A Framework of Cyber Research Priorities.
Read more about A Framework of Cyber Research Priorities to Advance Cybersecurity>
In this webcast, Matthew Walsh and Dominic Ross explore one emerging approach—3D Gaussian Splatting (3DGS)—and discuss how organizations can leverage these models for applications such …
Read more about World Building: How 3D Gaussian Splatting is Transforming Digital Twins>
In this webcast, Brigid O’Hearn, Julie Cohen, and Rita Creel discuss the user agreement and how it is the key to software acquisition pathway success.
Read more about The Key to Software Acquisition Pathway Success—the User Agreement>
In this webcast, David Svoboda and Manuel Arenaz discuss how the SEI CERT Coding Standard for Fortran leverages expertise in secure coding practices and provides …
Read more about Intro to the SEI CERT Coding Standard for Fortran>
Vulnerability Notes
The SEI builds relationships with software vendors and other organizations to coordinate prompt responses to possible risks or threats that arise from software vulnerabilities. Over the years, we have built an extensive vendor network, and we work as a trusted broker to identify, disclose, and mitigate vulnerabilities. As part of this effort, we publish vulnerability notes to keep the community informed and to enable effective and swift mitigation.