Software Engineering Institute

New AI Flaw Reporting System Fills Crucial Security Gap

Flaw Reporting for AI (FLARE-AI) allows developers and security researchers to submit artificial intelligence flaws for formal, coordinated disclosure.
sei.cmu

7 Recommendations to Improve SBOM Quality

Tobar, D., Jamieson, J., Priest, M., and Fricke, J., 2025: 7 Recommendations to Improve SBOM Quality. Software Engineering Institute blog, Accessed July 7, 2026 ...
sei.cmu

Three Risks in Building Machine Learning Systems

Cohen, B. (2020, May 18). Three Risks in Building Machine Learning Systems. Retrieved July 8, 2026, from https://www.sei.cmu.edu/blog/three-risks-in-building-machine ...
sei.cmu

Implementing Zero Trust in Operational Technology: A Practical Case Study

Brown, R. (2026, June 16). Implementing Zero Trust in Operational Technology: A Practical Case Study. Retrieved July 8, 2026, from https://doi.org/10.58012/6eyx-5204 ...
sei.cmu

CERT Insider Threat Vulnerability Assessments, ITVA Training Course, and ITVA Certificate Program

Zajicek, M. (2018, February 1). CERT Insider Threat Vulnerability Assessments, ITVA Training Course, and ITVA Certificate Program. Retrieved July 8, 2026, from https ...
sei.cmu

Differences Between ASLR on Windows and Linux

Dormann, W. (2014, February 10). Differences Between ASLR on Windows and Linux. Retrieved July 7, 2026, from https://www.sei.cmu.edu/blog/differences-between-aslr-on ...
sei.cmu

DevOps Case Study: Netflix and the Chaos Monkey

Cois, C. (2015, April 30). DevOps Case Study: Netflix and the Chaos Monkey. Retrieved July 6, 2026, from https://www.sei.cmu.edu/blog/devops-case-study-netflix-and ...
sei.cmu

EMFTA: an Open Source Tool for Fault Tree Analysis

Delange, J. (2016, July 18). EMFTA: an Open Source Tool for Fault Tree Analysis. Retrieved July 7, 2026, from https://www.sei.cmu.edu/blog/emfta-an-open-source-tool ...
sei.cmu

The Risks of Google Sign-In on iOS Devices

Dormann, W. (2016, August 2). The Risks of Google Sign-In on iOS Devices. Retrieved July 7, 2026, from https://www.sei.cmu.edu/blog/the-risks-of-google-sign-in-on-ios ...
sei.cmu

The Curious Case of the Bouncy Castle BKS Passwords

Dormann, W. (2018, March 19). The Curious Case of the Bouncy Castle BKS Passwords. Retrieved July 6, 2026, from https://www.sei.cmu.edu/blog/the-curious-case-of-the ...
sei.cmu

The AI Adoption Maturity Model v1.0

Organizations achieve lasting AI value and return on investment (ROI) through discipline—not just speed. True AI maturity is not measured by how much AI an organization deploys, but by its ability to ...
sei.cmu

Software-Defined Warfare: Crossing the Chasm in Two Software Areas

Nielsen, P. (2026, June 23). Software-Defined Warfare: Crossing the Chasm in Two Software Areas. Retrieved July 1, 2026, from https://doi.org/10.58012/9wg2-8778. This ...