Software Engineering Institute

New AI Flaw Reporting System Fills Crucial Security Gap

Flaw Reporting for AI (FLARE-AI) allows developers and security researchers to submit artificial intelligence flaws for formal, coordinated disclosure.
sei.cmu

7 Recommendations to Improve SBOM Quality

Tobar, D., Jamieson, J., Priest, M., and Fricke, J., 2025: 7 Recommendations to Improve SBOM Quality. Software Engineering Institute blog, Accessed July 1, 2026 ...
sei.cmu

Software-Defined Warfare: Crossing the Chasm in Two Software Areas

Nielsen, P. (2026, June 23). Software-Defined Warfare: Crossing the Chasm in Two Software Areas. Retrieved June 24, 2026, from https://doi.org/10.58012/9wg2-8778 ...
sei.cmu

Publications and Media

In this webcast, SEI researchers explain how System Theoretic Process Analysis helps organizations build stronger assurances about the safety and security of complex systems, including … The SEI ...
sei.cmu

The Dangers of VHD and VHDX Files

Dormann, W. (2019, September 4). The Dangers of VHD and VHDX Files. Retrieved July 1, 2026, from https://www.sei.cmu.edu/blog/the-dangers-of-vhd-and-vhdx-files/. The ...
sei.cmu

Advancing Software for National Security

Since our foundation in 1984, we have helped the Department of War (DoW), government agencies, and private industry meet mission goals and gain strategic advantage by innovating and advancing the ...
sei.cmu

8 Steps for Migrating Existing Applications to Microservices

Frye, B. (2020, September 28). 8 Steps for Migrating Existing Applications to Microservices. Retrieved July 1, 2026, from https://www.sei.cmu.edu/blog/8-steps-for ...
sei.cmu

An Introduction to Model-Based Systems Engineering (MBSE)

Shevchenko, N. (2024, October 22). An Introduction to Model-Based Systems Engineering (MBSE). Retrieved July 1, 2026, from https://www.sei.cmu.edu/blog/an ...
sei.cmu

Three Risks in Building Machine Learning Systems

Cohen, B. (2020, May 18). Three Risks in Building Machine Learning Systems. Retrieved July 1, 2026, from https://www.sei.cmu.edu/blog/three-risks-in-building-machine ...
sei.cmu

Implementing Zero Trust in Operational Technology: A Practical Case Study

Brown, R. (2026, June 16). Implementing Zero Trust in Operational Technology: A Practical Case Study. Retrieved July 1, 2026, from https://doi.org/10.58012/6eyx-5204 ...
sei.cmu

The Curious Case of the Bouncy Castle BKS Passwords

Dormann, W. (2018, March 19). The Curious Case of the Bouncy Castle BKS Passwords. Retrieved July 6, 2026, from https://www.sei.cmu.edu/blog/the-curious-case-of-the ...
sei.cmu

Automation Speeds Up Quality Assessments for Safety-Critical Software

Software quality assessments identify risk, allowing for mitigation strategies that ensure secure code in safety-critical defense platforms. But standard static analysis tools can miss risks or ...