Software Engineering Institute

Temporal Memory Safety in C and C++: An AI-Enhanced Pointer Ownership Model

This podcast explores updates to the Pointer Ownership Model for C, a modeling framework designed to improve the ability of developers to statically analyze C programs for errors involving temporal ...
sei.cmu

Using Alternate Data Streams in the Collection and Exfiltration of Data

Updyke, D., and Jaconski, M., 2022: Using Alternate Data Streams in the Collection and Exfiltration of Data. Carnegie Mellon University, Software Engineering ...
sei.cmu

From Model-Based Systems and Software Engineering to ModDevOps

Hugues, J., and Yankel, J., 2021: From Model-Based Systems and Software Engineering to ModDevOps. Carnegie Mellon University, Software Engineering Institute's ...
sei.cmu

AI-Powered Memory Safety for C Applications

Proving the absence of use-after-free errors and other temporal memory safety vulnerabilities is complex and costly, particularly in large codebases such as those for mission-critical military systems ...
sei.cmu

Symposium to Address Cyber Mission Readiness in the Age of Artificial Intelligence

This newsletter compiles the latest SEI releases and news about the upcoming symposium Cyber Mission Readiness in the Age of AI, using public LLMs to rapidly develop tools for use in classified ...
sei.cmu

Critical Asset Identification (Part 1 of 20: CERT Best Practices to Mitigate Insider Threats Series)

Ruefle, R., 2017: Critical Asset Identification (Part 1 of 20: CERT Best Practices to Mitigate Insider Threats Series). Carnegie Mellon University, Software ...
sei.cmu

Send a Message

This contact form is for general questions and requests for contact. Do not use this contact form to send sensitive information. Please review the guidelines for sending sensitive information. If you ...
sei.cmu

Thread Safety Analysis in C and C++

Ballman, A., 2014: Thread Safety Analysis in C and C++. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed February 19, 2026 ...
sei.cmu

CSIRT Frequently Asked Questions (FAQ)

The CERT Division of the Software Engineering Institute helps organizations and national CSIRTs develop, operate, and improve incident management capabilities. This FAQ addresses questions the global ...
sei.cmu

How Easy Is It to Make and Detect a Deepfake?

Bernaciak, C., and Ross, D., 2022: How Easy Is It to Make and Detect a Deepfake?. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Rust Software Security: A Current State Assessment

Sible, J., and Svoboda, D., 2022: Rust Software Security: A Current State Assessment. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...