what's new
Annual Report on CERT Research Projects Published
The SEI’s CERT Program is developing theoretical foundations and engineering methods to help ensure the security of critical systems and networks. This report describes progress in CERT research projects in 2007 and opportunities for collaboration.
Among the 25 projects described in the report are a process improvement approach to security and business continuity, analysis and modeling of insider threat, detection of anomalies in network traffic, support for automated computation of malware behavior, and control system security engineering and critical infrastructure survivability. CERT research is focused on four principal objectives:
- Embed software and system assurance techniques in all aspects of the system development life cycle.
- Improve the effectiveness of the international intrusion analysis and response team community.
- Develop an international workforce skilled in secure cyber operations.
- Improve the survivability and resiliency of critical networked information systems by identifying, applying, and transitioning new technologies, development practices, and management practices.
Much of CERT’s research is done with the help of other organizations. CERT Program Director Rich Pethia says, “We will continue to promote and rely on cooperation and collaboration within the security community. We welcome participation by organizations that share our belief that the networked environment of the future can provide safe and secure computing for all participants in the global information community.”
The report can be downloaded at http://www.cert.org/research/2007research-report.pdf.
Added March 12, 2008