Software Engineering Institute

New AI Flaw Reporting System Fills Crucial Security Gap

Flaw Reporting for AI (FLARE-AI) allows developers and security researchers to submit artificial intelligence flaws for formal, coordinated disclosure.
sei.cmu

The SEI CERT Coding Standard for Fortran

Svoboda, D., 2026: The SEI CERT Coding Standard for Fortran. Software Engineering Institute blog, Accessed July 1, 2026, https://doi.org/10.58012/w9t7-6y96. This blog ...
sei.cmu

SEI and Accenture Release AI Adoption Maturity Model to Help Organizations Scale AI with Predictable Outcomes

PITTSBURGH, Pa., June 8, 2026—The Carnegie Mellon University Software Engineering Institute (SEI) and Accenture today released the Artificial Intelligence (AI) Adoption Maturity Model, an empirically ...
sei.cmu

The ELM Library: An LLM Evaluation Toolset

Turri, V., Schieber, N., Loughin, C., and Brooks, T., 2026: The ELM Library: An LLM Evaluation Toolset. Software Engineering Institute blog, Accessed June 28, 2026 ...
sei.cmu

Temporal Memory Safety in C and C++: An AI-Enhanced Pointer Ownership Model

In October 2025, CyberPress reported a critical security vulnerability in the Redis Server, an open-source in-memory database that allowed authenticated attackers to achieve remote code execution ...
sei.cmu

SOK: Bridging Research and Practice in LLM Agent Security

Large Language Model agents are rapidly transitioning from research prototypes to deployed systems, raising new and urgent security challenges. Unlike static chatbots, LLM agents interact with ...
sei.cmu

7 Recommendations to Improve SBOM Quality

Tobar, D., Jamieson, J., Priest, M., and Fricke, J., 2025: 7 Recommendations to Improve SBOM Quality. Software Engineering Institute blog, Accessed July 1, 2026 ...
sei.cmu

SEI Study on Defense Department DevSecOps Finds Excellence and Opportunities

May 12, 2025—DevSecOps practices foster collaboration among software development, security, and operations teams to build, test, and release software quickly and reliably. A high-stakes, high-security ...
sei.cmu

Generative AI and Software Engineering Education

Ozkaya, I., and Schmidt, D., 2024: Generative AI and Software Engineering Education. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

The Top 10 Skills CISOs Need in 2024

Touhill, G., 2024: The Top 10 Skills CISOs Need in 2024. Software Engineering Institute blog, Accessed July 2, 2026, https://doi.org/10.58012/tphr-nz17. The role of ...
sei.cmu

The 13 Key Elements of an Insider Threat Program

Costa, D., and Trzeciak, R., 2023: The 13 Key Elements of an Insider Threat Program. Software Engineering Institute blog, Accessed July 1, 2026, https://doi.org/10. ...
sei.cmu

Insider Threat Program Evaluation

The Insider Threat Program Evaluation (ITPE) is an evidence-based, capability-level assessment. The ITPE is designed to benchmark an organization's insider threat program against a reference model ...