Software Engineering Institute

SEI CERT Division Leadership Lends Emerging Technology Insights to Cyber-Risk Oversight Handbook

Gregory Touhill, CERT Division Director, and Matthew Butkovic, technical director of cyber risk and resilience, co-authored tools for corporate boards dealing with quantum computing, AI, and other ...
sei.cmu

Scaling Code Translation

Our code translation workflow augments LLMs to translate Ada to C++ incrementally, reducing errors and accelerating large-scale legacy system modernization. Legacy systems written in obsolete ...
sei.cmu

Transfer of Personal Information Between Countries

Carnegie Mellon University - Software Engineering Institute (“SEI”) is a global institution with operations, campuses, partnerships, and instructional sites in multiple countries. These include the ...
sei.cmu

AI-Powered Memory Safety with the Pointer Ownership Model

Svoboda, D., and Flynn, L., 2025: AI-Powered Memory Safety with the Pointer Ownership Model. Carnegie Mellon University, Software Engineering Institute's Insights ...
sei.cmu

7 Recommendations to Improve SBOM Quality

Tobar, D., Jamieson, J., Priest, M., and Fricke, J., 2025: 7 Recommendations to Improve SBOM Quality. Carnegie Mellon University, Software Engineering Institute's ...
sei.cmu

SEI Study on Defense Department DevSecOps Finds Excellence and Opportunities

May 12, 2025—DevSecOps practices foster collaboration among software development, security, and operations teams to build, test, and release software quickly and reliably. A high-stakes, high-security ...
sei.cmu

Self-Assessment in Training and Exercise

In this report, we introduce an approach to performance evaluation that focuses on self-assessment. We find that this approach provides both greater information fidelity to satisfy performance ...
sei.cmu

An Introduction to Model-Based Systems Engineering (MBSE)

Shevchenko, N., 2024: An Introduction to Model-Based Systems Engineering (MBSE). Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Generative AI and Software Engineering Education

Ozkaya, I., and Schmidt, D., 2024: Generative AI and Software Engineering Education. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Lessons Learned in Coordinated Disclosure for Artificial Intelligence and Machine Learning Systems

In this paper, SEI researchers incorporate several lessons learned from the coordination of artificial intelligence (AI) and machine learning (ML) vulnerabilities at the SEI’s CERT Coordination Center ...
sei.cmu

Insider Threat Vulnerability Assessment

The Insider Threat Vulnerability Assessment (ITVA) is an evidence-based, capability-level assessment. ITVA is designed to measure an organization's preparedness to prevent, detect, and respond to ...
sei.cmu

The Seven Virtues of Reconciling Agile and Earned Value Management (EVM)

Wilson, S., Place, P., and Korzec, K., 2023: The Seven Virtues of Reconciling Agile and Earned Value Management (EVM). Carnegie Mellon University, Software ...