Secure Coding in C++11 and C++14
Writing secure C++ code is hard. This blog post introduces the SEI CERT C++ Coding Standard and explores areas in C++ that can result in security vulnerabilities.
How to Reduce the Graveyard of Software Tools with UI/UX Capability
Wednesday, September 28, 2016 1:30-2:30 p.m. Eastern Time
Two Approaches for Going Beyond Network Flow
Annual global IP traffic will reach 2.3 zettabytes per year by 2020. It is critical that organizations understand the mission activity on their network and threats to that activity.
Modeling and Simulation in Insider Threat
This post highlights a range of modeling and simulation methods and how they can be used to further understand complex insider threat problems.
Building and Scaling a Malware Analysis System
Register for this free Sept. 14 webinar and learn about the issues involved in automating the collection and analysis of malware.
CERT Director Richard Pethia Retires
Cybersecurity Advocate Piloted CERT through Decades of Growth and Change
Research and Publications
- Managing Third Party Risk in Financial Services Organizations: A Resilience-Based Approach A resilience-based approach can help financial services organizations to manage cybersecurity risks from outsourcing and comply with federal regulations. White Paper - 09/27/2016
- Driving Efficiencies into the Software Life Cycle for Army Systems This presentation was presented to the CECOM Software Solarium. Presentation - 09/13/2016
- Segment-Fixed Priority Scheduling for Self-Suspending Real-Time Tasks This report describes schedulability analyses and proposes segment-fixed priority scheduling for self-suspending tasks. Technical Report - 08/18/2016
- The QUELCE Method: Using Change Drivers to Estimate Program Costs This technical note introduces Quantifying Uncertainty in Early Lifecycle Cost Estimation (QUELCE), a method for estimating program costs early in development. Technical Note - 08/17/2016
Training
- PSP Instructor Training November 14 - 18, 2016 (SEI Pittsburgh, PA)
- Advanced Incident Handling November 14 - 18, 2016 (SEI Arlington, VA)
- Measuring What Matters: Security Metrics Workshop November 30 - December 1, 2016 (SEI Arlington, VA)
- ELearning Courses Online
NEWS
-
CERT Director Richard Pethia Retires
Article - 09/01/2016 -
Feiler Named SEI Fellow
Article - 08/29/2016 -
SEI Hosts 13th Annual Software Engineering Workshop for Educators
Article - 08/26/2016 -
High School Students Get Crash Course in Cyber-Kinetic Tactical Operations
Article - 08/17/2016
-
Shannon urges fundamentally new approaches to creating secure software in MIT Technology Review.
Media Coverage - 01/25/2016
EVENTS
-
Software Solutions Symposium 2017
The Software Solutions Symposium is a forum for learning about emerging technologies and practical solutions that you can apply today for help with systemic software issues such as assurance, cost, and schedule.
Conferences - 03/20/2017
WEBINARS
- Data Science: What It Is and How It Can Help Your Company Brian Lindauer, Eliezer Kanal Webinar - 08/15/2016
- How to Build an Effective Insider Threat Program to Comply With the New NISPOM Mandate Randall F. Trzeciak Webinar - 07/15/2016
Blogs
Secure Coding in C++11 and C++14
09/26/2016 - Aaron Ballman
Traffic Analysis for Network Security: Two Approaches for Going Beyond Network Flow Data
09/16/2016 - Tim Shimeall
Modeling and Simulation in Insider Threat
09/12/2016 - Andrew MoorePODCASTS
A Community College Curriculum for Secure Software Development
In this podcast, Girish Seshagiri discusses a two-year community college software assurance program that he developed and facilitated with SEI Fellow Nancy Mead at Illinois Central College. Podcast - 09/15/2016
Security and the Internet of Things
In this podcast, CERT researcher Art Manion discusses work that his team is doing with the Department of Homeland Security to examine and secure IoT devices. Podcast - 08/25/2016