sei.cmu

The Dangers of VHD and VHDX Files

Dormann, W., 2019: The Dangers of VHD and VHDX Files. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed May 13, 2026, https://www ...
sei.cmu

CERT Tech Tips

Published between 1997 and 2006, CERT Tech Tips helped organizations and individuals navigate security concerns and provided answers to frequently asked questions.
sei.cmu

The ELM Library: An LLM Evaluation Toolset

Turri, V., Schieber, N., Loughin, C., and Brooks, T., 2026: The ELM Library: An LLM Evaluation Toolset. Carnegie Mellon University, Software Engineering Institute's ...
sei.cmu

MTEM 2026

The Malware Technical Exchange Meeting (MTEM) is an annual classified meeting that brings together practitioners and researchers from government, FFRDCs, academia, and industry. Now in its 17th year, ...
sei.cmu

Establishing Baseline Behaviors (Part 14 of 20: CERT Best Practices to Mitigate Insider Threats Series)

Gardner, C., 2017: Establishing Baseline Behaviors (Part 14 of 20: CERT Best Practices to Mitigate Insider Threats Series). Carnegie Mellon University, Software ...
sei.cmu

How Easy Is It to Make and Detect a Deepfake?

Bernaciak, C., and Ross, D., 2022: How Easy Is It to Make and Detect a Deepfake?. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Rust Vulnerability Analysis and Maturity Challenges

Wassermann, G., and Svoboda, D., 2023: Rust Vulnerability Analysis and Maturity Challenges. Carnegie Mellon University, Software Engineering Institute's Insights ...
sei.cmu

Architecture Tradeoff Analysis Method Collection

The Architecture Tradeoff Analysis Method (ATAM) is a method for evaluating software architectures relative to quality attribute goals. ATAM evaluations expose architectural risks that potentially ...
sei.cmu

SEI CERT C Coding Standard: Rules for Developing Safe, Reliable, and Secure Systems (2016 Edition)

We coordinate developing secure coding standards by working with researchers, language experts, and software developers in the Secure Coding Wiki. More than 1,900 contributors and reviewers develop ...
sei.cmu

An Introduction to the Cybersecurity Maturity Model Certification (CMMC)

Stewart, K., and Hoover, A., 2020: An Introduction to the Cybersecurity Maturity Model Certification (CMMC). Carnegie Mellon University, Software Engineering ...
sei.cmu

Prioritizing Vulnerability Response: A Stakeholder-Specific Vulnerability Categorization

Presents a testable SSVC that takes the form of decision trees and avoids some problems with the Common Vulnerability Scoring System (CVSS). Many organizations use the Common Vulnerability Scoring ...
sei.cmu

A Framework for Software Product Line Practice, Version 5.0

This document describes the activities and practices in which an organization must be competent before it can benefit from fielding a product line of software systems. A product line is a set of ...