sei.cmu

The Seven Virtues of Reconciling Agile and Earned Value Management (EVM)

Wilson, S., Place, P., and Korzec, K., 2023: The Seven Virtues of Reconciling Agile and Earned Value Management (EVM). Carnegie Mellon University, Software ...
sei.cmu

5 Essential Questions for Implementing the Software Acquisition Pathway and the Tools to Tackle Them

Wrubel, E., Creel, R., and O'Hearn, B., 2025: 5 Essential Questions for Implementing the Software Acquisition Pathway and the Tools to Tackle Them. Carnegie Mellon University, Software Engineering ...
Software Engineering Institute

A Semantics of AADL EMV2 and Its Application to Model-Based Fault Tree Generation

This technical report proposes a formal semantics for EMV2 and shows how to leverage this semantics to generate fault trees from an AADL model enriched with EMV2 information.
sei.cmu

Maturing Your Insider Threat Program into an Insider Risk Management Program

Costa, D., 2020: Maturing Your Insider Threat Program into an Insider Risk Management Program. Carnegie Mellon University, Software Engineering Institute's Insights ...
sei.cmu

Generative AI and Software Engineering Education

Ozkaya, I., and Schmidt, D., 2024: Generative AI and Software Engineering Education. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

Application Programming Interface (API) Vulnerabilities and Risks

This report describes 11 common vulnerabilities and 3 risks related to application programming interfaces, providing suggestions about how to fix or reduce their impact. Application programming ...
sei.cmu

The Team Software Process (TSP)

This report describes the TSP and how it was developed. Starting with a brief background discussion of software quality, the report provides an overview of the basic elements of teamwork. The Team ...
sei.cmu

Taking DevSecOps to the Next Level with Value Stream Mapping

Brown, N., 2021: Taking DevSecOps to the Next Level with Value Stream Mapping. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...
sei.cmu

2000 CERT Advisories

CERT/CC advisories are now part of the US-CERT National Cyber Awareness System. We provide these advisories, published by year, for historical purposes. This report details the description, impact, ...
sei.cmu

Acquisition Archetypes Seen in the Wild, DevSecOps Edition: Clinging to the Old Ways

Novak, W., 2023: Acquisition Archetypes Seen in the Wild, DevSecOps Edition: Clinging to the Old Ways. Carnegie Mellon University, Software Engineering Institute's ...
sei.cmu

UEFI: 5 Recommendations for Securing and Restoring Trust

Sarvepalli, V., 2023: UEFI: 5 Recommendations for Securing and Restoring Trust. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...
sei.cmu

Cybersecurity of Quantum Computing: A New Frontier

Scanlon, T., 2023: Cybersecurity of Quantum Computing: A New Frontier. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...