SEI Digital Library
Latest Publications
Early Lifecycle Cybersecurity Requirements Development Through Threat Modeling
• SEI Report
This report details a threat modeling method for lifecycle cybersecurity risk management, from early design onward, uniting U.S. Air Force and other cybersecurity sources.
Read
The Key to Software Acquisition Pathway Success—the User Agreement
• Webcast
In this webcast, Brigid O’Hearn, Julie Cohen, and Rita Creel discuss the user agreement and how it is the key to software acquisition pathway success.
Watch
Intro to the SEI CERT Coding Standard for Fortran
• Webcast
In this webcast, David Svoboda and Manuel Arenaz discuss how the SEI CERT Coding Standard for Fortran leverages expertise in secure coding practices and provides well-documented and enforceable coding guidelines …
Watch
The Key to SWP Success: The User Agreement
• Educational Material
This Tactical Guide helps programs develop a user agreement that specifies the level of user representation needed to ensure acquired software meets user needs.
Learn More
A Quality Model for Machine Learning Components Quick Reference Guide
• Educational Material
Download a quick reference guide and definitions for the Quality Model for Machine Learning Components.
Learn More
Breaking Down Barriers: How LLMs Enable Software Analysis in Classified Environments
• Podcast
This podcast explores the use of LLMs in unclassified environments to rapidly develop tools that accelerate software analysis in classified environments with improved accuracy.
Listen
A Decade of GHOSTS in the Machine: From Cyber Range Realism to Cognitive Mission Rehearsal
• SEI Report
This paper describes how GHOSTS evolved from simple activity generation into a platform for simulating complex human, organizational, and machine behavior.
Read
Prompting Without Principles: Are Students Transferring Software Engineering Knowledge to LLM Use?
• Conference Paper
This paper describes a classroom exercise to study how students apply generative AI to a software engineering task – upgrading dependencies on a library whose upgrade includes API changes.
Read
Software-Defined Warfare: Expanding the Frontier
• Podcast
This podcast explores the evolution of software-defined warfare and the challenges of implementing software on the battlefield.
Listen
Using LLMs to Adjudicate Static-Analysis Alerts with Error Reduction Techniques
• Conference Paper
In this paper, the authors evaluate how well LLMs adjudicate static-analysis alerts, with and without error-reduction techniques, on three benchmarks: Juliet, FormAI, and SV-COMP.
Read