Software Engineering Institute

Cybersecurity Maturity Model Certification Rule Finalized for Defense Industrial Base

Beginning November 10, defense contracts may require assessments under the CMMC program, which the SEI co-created, but implementation will be phased.
sei.cmu

The Seven Virtues of Reconciling Agile and Earned Value Management (EVM)

Wilson, S., Place, P., and Korzec, K., 2023: The Seven Virtues of Reconciling Agile and Earned Value Management (EVM). Carnegie Mellon University, Software ...
sei.cmu

AI Division Publications

Gone but Not Forgotten: Improved Benchmarks for Machine Unlearning May 29, 2024 • White Paper By Keltin Grimes, Collin Abidi, Cole Frank, Shannon Gallagher This paper describes and proposes new ...
sei.cmu

5 Essential Questions for Implementing the Software Acquisition Pathway and the Tools to Tackle Them

Wrubel, E., Creel, R., and O'Hearn, B., 2025: 5 Essential Questions for Implementing the Software Acquisition Pathway and the Tools to Tackle Them. Carnegie Mellon University, Software Engineering ...
sei.cmu

Software Engineering Institute

Digital Library Search ResultsSoftware Engineering Institute Home Publications Digital Library Digital Library Search Results ...
sei.cmu

Ping Sweeping in IPv6

Giobbi, R., 2008: Ping Sweeping in IPv6. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed September 16, 2025, https://www.sei ...
Software Engineering Institute

A Semantics of AADL EMV2 and Its Application to Model-Based Fault Tree Generation

This technical report proposes a formal semantics for EMV2 and shows how to leverage this semantics to generate fault trees from an AADL model enriched with EMV2 information.
sei.cmu

Rust Vulnerability Analysis and Maturity Challenges

Wassermann, G., and Svoboda, D., 2023: Rust Vulnerability Analysis and Maturity Challenges. Carnegie Mellon University, Software Engineering Institute's Insights ...
sei.cmu

Probably Don’t Rely on EPSS Yet

Spring, J., 2022: Probably Don’t Rely on EPSS Yet. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed September 24, 2025, https ...
sei.cmu

Rust Software Security: A Current State Assessment

Sible, J., and Svoboda, D., 2022: Rust Software Security: A Current State Assessment. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

The Zero Trust Journey: 4 Phases of Implementation

Morrow, T., and Nicolai, M., 2022: The Zero Trust Journey: 4 Phases of Implementation. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Architecture Tradeoff Analysis Method Collection

This collection contains resources about the Architecture Tradeoff Analysis Method (ATAM), a method for evaluating software architectures against quality attribute goals. The Architecture Tradeoff ...