sei.cmu

Application of Large Language Models (LLMs) in Software Engineering: Overblown Hype or ...

Ozkaya, I., Carleton, A., Robert, J., and Schmidt, D., 2023: Application of Large Language Models (LLMs) in Software Engineering: Overblown Hype or Disruptive Change ...
sei.cmu

5 Challenges to Implementing DevSecOps and How to Overcome Them

Yankel, J., and Yasar, H., 2023: 5 Challenges to Implementing DevSecOps and How to Overcome Them. Carnegie Mellon University, Software Engineering Institute's ...
sei.cmu

A Field Study of Technical Debt

Ernst, N., 2015: A Field Study of Technical Debt. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed October 29, 2025, https://www ...
sei.cmu

Rust Vulnerability Analysis and Maturity Challenges

Wassermann, G., and Svoboda, D., 2023: Rust Vulnerability Analysis and Maturity Challenges. Carnegie Mellon University, Software Engineering Institute's Insights ...
sei.cmu

Probably Don’t Rely on EPSS Yet

Spring, J., 2022: Probably Don’t Rely on EPSS Yet. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed October 29, 2025, https ...
sei.cmu

AISIRT Advances National Security with Secure AI

In November 2023, the Software Engineering Institute (SEI) developed the first Artificial Intelligence Security Incident Response Team (AISIRT) to increase the safety and security of the artificial ...
Software Engineering Institute

SEI Study Analyzes Applicability of Security and Zero Trust Principles to Weapon Systems

The study explores the risks and tradeoffs when adapting enterprise-IT security and zero trust principles to weapon systems.
sei.cmu

CERT Division

The CERT Division is a leader in cybersecurity. We partner with government, industry, law enforcement, and academia to improve the security and resilience of computer systems and networks. We study ...
sei.cmu

Using LLMs to Automate Static-Analysis Adjudication and Rationales

This is a pre-publication version of the article that has been accepted for publication in the August 2024 edition of “CrossTalk: The Journal of Defense Software Engineering.” Software vulnerabilities ...
sei.cmu

Artificial Intelligence (AI) Division

Leaders in defense and national security want to obtain the leap-ahead capabilities AI offers. At the same time, it is difficult to get AI right. As many as 85% of current AI deployments fail—failures ...
sei.cmu

Resources for Creating a CSIRT

To establish a computer security incident response team (CSIRT), you should understand what type of CSIRT is needed, the type of services that should be offered, the size of the CSIRT and where it ...
sei.cmu

The Risks of SSL Inspection

Dormann, W., 2015: The Risks of SSL Inspection. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed October 21, 2025, https://www ...