Insider Threat Control: Using Universal Serial Bus (USB) Device Auditing to Detect Possible Data Exfiltration by Malicious Insiders

This report presents methods to audit USB device use within a Microsoft Windows environment.

The CERT Oracle Secure Coding Standard for Java

This book is the first comprehensive compilation of code-level requirements for building secure systems in JAVA. Organized by CERT’s software security experts, it covers every facet of secure software coding...

Keynote: Engineering Safety-and Security-Related Requirements for Software-Intensive Systems (ICSE 2010)

Keynote presentation by Donald Firesmith at SESS’10, as part of the 32nd ACM/IEEE International Conference on Software Engineering (ISCE’2010) in Cape Town, South Africa.

Why Is R&D in the Cyber and Software Engineering Environment Different? (SSTC 2010)

Terry Roberts addresses why R&D in cyber and software engineering is different, how to research the federal lab landscape for opportunities, and how focus our R&D initiatives.

Data Model as an Architectural View

This 2009 report describes the data model as an architectural style in an effort to help architects apply this style to create data model architectural views.