CERT-SEI

Staff Profile

Carol Woody

Technical Lead, Survivability Analysis

Key Responsibilities

Dr. Carol Woody has been a senior member of the technical staff since 2001. Currently she is the technical lead of the Survivability Analysis team, whose research focuses on cyber security engineering: building capabilities in defining, acquiring, developing, measuring, managing, and sustaining secure software for highly complex networked systems as well as systems of systems.

Professional Background

Dr. Woody is an experienced technical researcher whose work has focused on government agencies, higher education, and medical organizations. She has helped them identify effective security risk management solutions, develop approaches to improve their ability to identify security and survivability requirements, and field software and systems with greater assurance.

As a consultant for ImageWork Technologies Corporation in White Plains, New York, Dr. Woody managed the user testing for CITYTIME, a timekeeping application being developed for New York City. She also consulted with the Queens County District Attorney's Office of New York City to design and implement an electronic document management system. New York City's Administration for Child Services chose her to integrate financial information among state, city, and agency financial systems and also to construct a financial data warehouse and implement web-enabled processes for managing social service payments. As project manager at Yale University, Dr. Woody served as architect and implementing project manager for an integrated ID card solution, developed technical specifications and assisted users in vendor review and selection for a procurement package, designed and implemented expert system technology for distributed data collection, and managed a team of technicians supporting the financial operations of the University.

Publications (recent or significant)

Ellison, Robert & Woody, Carol. Survivability Analysis Framework (CMU/SEI-2010-TN-013). Software Engineering Institute, Carnegie Mellon University, 2010.

Ellison, R.; Goodenough, J.; Weinstock, C.; & Woody, C. Survivability Assurance for Systems of Systems (CMU/SEI-2008-TR-008). Software Engineering Institute, Carnegie Mellon University, 2008.

Ellison, Robert & Woody, Carol. Improving Software Assurance.

Ellison, Robert & Woody, Carol. Supply-Chain Risk Management: Incorporating Security into Software Development. Proceedings of the 43rd Hawaii International Conference on System Sciences (HICSS) (CD-ROM), January 5-8, 2010, Computer Society Press, 2010.

Alberts, C.; Smith, J., II; & Woody, C. Multi-view Decision Making (MVDM) Workshop (CMU/SEI-2008-SR-035). Software Engineering Institute, Carnegie Mellon University, 2008.

Alberts, C. & Woody, C. Consider Operational Security Risk During System Development. IEEE Security & Privacy, January/February 2007.

Listed in Whos Who in American Women, 1995-2010.

Teams

Survivability Analysis

Education

  • BS, Mathematics,
  • PhD, Information Science

Professional Memberships

  • AIAA
  • IEEE
  • ACM

Contact Carol Woody

SEI Blog