Annual Report FY 2005

> > F Y 2 0 0 5

Publications

SEI in the Community

Press Releases

October 1, 2004 - September 30, 2005

December 15, 2005
CERT Coordination Center Partners With Qatar's Supreme Council to Battle Cyber Risks

The Carnegie Mellon Software Engineering Institute (SEI) CERT Coordination Center (CERT/CC) and the Qatar Supreme Council for Information and Communications Technology (ictQATAR) announced on December 15, 2005, a partnership to establish Qatar CERT (Q-CERT).

November 15, 2005
Carnegie Mellon Software Engineering Institute and General Motors Launch CMMI for Acquisition Organizations Project

The Carnegie Mellon Software Engineering Institute (SEI) and General Motors (NYSE: GM) Corporation, in coordination with the government/industry/SEI CMMI Steering Group, today announced a joint effort to create a new business process improvement model for companies looking to source information technology capabilities from third-party suppliers.
October 3, 2005 Department of Homeland Security and Carnegie Mellon Software Engineering Institute Launch Software Assurance Web Portal
Today the Department of Homeland Security and Carnegie Mellon Software Engineering Institute (SEI) launched a secure, web-based software assurance portal called Build Security In (BSI).

June 5, 2005
Carnegie Mellon Software Engineering Institute Receives Contract Renewal From U.S. Government

Carnegie Mellon University's Software Engineering Institute has received a contract renewal, funded at $411 million, from the U.S. Government through June 2010.

May 16, 2005
Secret Service and CERT Release Report Analyzing Acts of Insider Sabotage Via Computer Systems In Critical Infrastructure Sectors

The United States Secret Service and the Carnegie Mellon Software Engineering Institute’s CERT today announced the findings of the second Insider Threat Study report. According to the report, which analyzed acts of insider sabotage on computer systems in critical infrastructure sectors, the majority of insiders who committed the attacks were former employees, motivated at least in part by a desire to seek revenge and who were granted system administrator or privileged access when hired.

May 3, 2005
E-Crime Watch Survey Shows E-Crime Fighters Making Headway

Results from the 2005 E-Crime Watch survey, conducted among security executives and law enforcement personnel by CSO magazine in cooperation with the United States Secret and the Carnegie Mellon University Software Engineering Institute’s CERT Coordination Center, reveals the fight against electronic crimes (e-crimes) may be paying off. Thirteen percent (13%) of the 819 survey respondents—more than double the 6% from the 2004 survey—report the total number of e-crimes (and network, system or data intrusions) decreased from the previous year; 35% report an increase in e-crimes and 30% report no change.

February 15, 2005
Carnegie Mellon Software Engineering Institute’s Watts Humphrey Awarded Prestigious National Medal of Technology

Watts S. Humphrey, a fellow of the Carnegie Mellon Software Engineering Institute (SEI) has been awarded the 2003 National Medal of Technology, the highest honor awarded by the President of the United States to America’s leading innovators. A formal ceremony will take place March 14, 2005 at the White House.

2005 SEI Annual Report Home | Conferences | AJ Awards

Technical Leadership Positions | SEI-Published Documents | Journal Articles

Books | Keynote Presentations | Proceedings | Tutorials |

Press Releases | Media Coverage

Media Coverage
October 1, 2004 - September 30, 2005

ADT Magazine
"Tailor-Made for Applications Development." October 1, 2005
Watts Humphrey, SEI Fellow, is featured in this article about software development and quality.

IEEE Spectrum
"Why Software Fails." September 2005
Article about the Capability Maturity Model (CMM) created by the Software Engineering Institute to help organizations assess and analyze their software development practices.

Techworld.com
"E-mail Exposure." August 2005
Legal and security analysts predict that companies that pass viruses and worms or other types of cyber threats could be held liable for the damage they cause. Art Manion, an Internet security analyst at the CERT Coordination Center at Carnegie Mellon University's Software Engineering Institute is quoted.

The New York Times
"Virus Attacks Windows Computers at Companies." August 2005
Microsoft Windows computers were recently compromised by a number of digital worms. “The worms in this case exploit a vulnerability inside computers, particularly those running Windows 2000. Once in place, the worm can make an individual computer susceptible to being operated remotely by an intruder”, said Art Manion, an Internet security analyst with the CERT Coordination Center.

Federal Computer Week
"CERT: Zotob, Esbot Not Major Attacks." August 2005
Article about a group of Internet attacks, including the zotob and esbot worms. Jeff Havrilla, Internet security analyst at CERT, states, “We’re nowhere near the same scale of activity that occurred when the Blaster worm leveled computers worldwide in 2003. Blaster affected hundreds of thousands of unique IP addresses, while the number of addresses affected by the group of attacks including zotob and esbot has not yet reached 100,000.”

The Pittsburgh Post Gazette
"Carnegie Mellon Lands $411M DOD Contract." July 2005
Carnegie Mellon University's Software Engineering Institute has been awarded a $411 million dollar Department of Defense contract for software research and development, focusing on the nation’s defense and security.

CNet News
"A Safe Browser? No Longer in the Lexicon." July 2005
Author, Art Manion (internet security analyst at US-CERT) explains that attackers are starting to exploit vulnerabilities in alternative browsers. The article also gives tips on how to keep any browser as safe as possible.

The Washington Post
"Voluntary Disclosure Is the Threat to Password Security." June 2005

ComputerWorld
"Study: Insider Revenge Often Behind Cyberattacks." May 2005

ERCIM News Online
"Software Engineering Institute Goes International in Software Process Research." April 2005

SD Magazine
"Agile CMMI: No Oxymoron." March 2005

ComputerWorld
"Sidebar: Comparing Methodologies." March 2005

TechNewsWorld
"Phishing Grows in Severity, Sophistication." March 2005

InfoWorld
"Secure Architecture." March 2005

Datamonitor
"Microsoft: Part of the Process." March 2005

Government Computer News
"Info Sharing Can Be Perilous – Just Ask Energy and DHS." February 2005

CSO Magazine
"A Long Way to Grow." January 2005