Software Engineering Institute

New AI Flaw Reporting System Fills Crucial Security Gap

Flaw Reporting for AI (FLARE-AI) allows developers and security researchers to submit artificial intelligence flaws for formal, coordinated disclosure.
sei.cmu

7 Recommendations to Improve SBOM Quality

Tobar, D., Jamieson, J., Priest, M., and Fricke, J., 2025: 7 Recommendations to Improve SBOM Quality. Software Engineering Institute blog, Accessed July 1, 2026 ...
sei.cmu

Software-Defined Warfare: Crossing the Chasm in Two Software Areas

Nielsen, P. (2026, June 23). Software-Defined Warfare: Crossing the Chasm in Two Software Areas. Retrieved June 24, 2026, from https://doi.org/10.58012/9wg2-8778 ...
sei.cmu

The Curious Case of the Bouncy Castle BKS Passwords

Dormann, W. (2018, March 19). The Curious Case of the Bouncy Castle BKS Passwords. Retrieved July 6, 2026, from https://www.sei.cmu.edu/blog/the-curious-case-of-the ...
sei.cmu

What Engineers Need to Know About Artificial Intelligence

Longstaff, T. (2019, September 16). What Engineers Need to Know About Artificial Intelligence. Retrieved July 6, 2026, from https://www.sei.cmu.edu/blog/what ...
sei.cmu

Publications and Media

In this webcast, SEI researchers explain how System Theoretic Process Analysis helps organizations build stronger assurances about the safety and security of complex systems, including … The SEI ...
sei.cmu

Implementing Zero Trust in Operational Technology: A Practical Case Study

Brown, R. (2026, June 16). Implementing Zero Trust in Operational Technology: A Practical Case Study. Retrieved July 1, 2026, from https://doi.org/10.58012/6eyx-5204 ...
sei.cmu

Weaknesses and Vulnerabilities in Modern AI: Integrity, Confidentiality, and Governance

Scherlis, B. (2024, August 5). Weaknesses and Vulnerabilities in Modern AI: Integrity, Confidentiality, and Governance. Retrieved July 1, 2026, from https://doi.org ...
sei.cmu

Weaknesses and Vulnerabilities in Modern AI: AI Risk, Cyber Risk, and Planning for Test and Evaluation

Scherlis, B. (2024, August 12). Weaknesses and Vulnerabilities in Modern AI: AI Risk, Cyber Risk, and Planning for Test and Evaluation. Retrieved July 1, 2026, from ...
sei.cmu

Advancing Software for National Security

Since our foundation in 1984, we have helped the Department of War (DoW), government agencies, and private industry meet mission goals and gain strategic advantage by innovating and advancing the ...
sei.cmu

8 Steps for Migrating Existing Applications to Microservices

Frye, B. (2020, September 28). 8 Steps for Migrating Existing Applications to Microservices. Retrieved July 1, 2026, from https://www.sei.cmu.edu/blog/8-steps-for ...
sei.cmu

The Dangers of VHD and VHDX Files

Dormann, W. (2019, September 4). The Dangers of VHD and VHDX Files. Retrieved July 1, 2026, from https://www.sei.cmu.edu/blog/the-dangers-of-vhd-and-vhdx-files/. The ...