Software Engineering Institute

New AI Flaw Reporting System Fills Crucial Security Gap

Flaw Reporting for AI (FLARE-AI) allows developers and security researchers to submit artificial intelligence flaws for formal, coordinated disclosure.
sei.cmu

The Need to Specify Requirements for Off-Nominal Behavior

Firesmith, D. (2012, January 16). The Need to Specify Requirements for Off-Nominal Behavior. Retrieved July 7, 2026, from https://www.sei.cmu.edu/blog/the-need-to ...
sei.cmu

7 Recommendations to Improve SBOM Quality

Tobar, D., Jamieson, J., Priest, M., and Fricke, J., 2025: 7 Recommendations to Improve SBOM Quality. Software Engineering Institute blog, Accessed July 1, 2026 ...
sei.cmu

Software-Defined Warfare: Crossing the Chasm in Two Software Areas

Nielsen, P. (2026, June 23). Software-Defined Warfare: Crossing the Chasm in Two Software Areas. Retrieved June 24, 2026, from https://doi.org/10.58012/9wg2-8778 ...
sei.cmu

The Curious Case of the Bouncy Castle BKS Passwords

Dormann, W. (2018, March 19). The Curious Case of the Bouncy Castle BKS Passwords. Retrieved July 6, 2026, from https://www.sei.cmu.edu/blog/the-curious-case-of-the ...
sei.cmu

What Engineers Need to Know About Artificial Intelligence

Longstaff, T. (2019, September 16). What Engineers Need to Know About Artificial Intelligence. Retrieved July 6, 2026, from https://www.sei.cmu.edu/blog/what ...
sei.cmu

Publications and Media

In this webcast, SEI researchers explain how System Theoretic Process Analysis helps organizations build stronger assurances about the safety and security of complex systems, including … The SEI ...
sei.cmu

8 Steps for Migrating Existing Applications to Microservices

Frye, B. (2020, September 28). 8 Steps for Migrating Existing Applications to Microservices. Retrieved July 1, 2026, from https://www.sei.cmu.edu/blog/8-steps-for ...
sei.cmu

Advancing Software for National Security

Since our foundation in 1984, we have helped the Department of War (DoW), government agencies, and private industry meet mission goals and gain strategic advantage by innovating and advancing the ...
sei.cmu

Data Poisoning in AI Models: The Case for Chain of Custody Controls

Metcalf, R., & Churilla, M. (2026, April 27). Data Poisoning in AI Models: The Case for Chain of Custody Controls. Retrieved July 1, 2026, from https://doi.org/10. ...
sei.cmu

The Dangers of VHD and VHDX Files

Dormann, W. (2019, September 4). The Dangers of VHD and VHDX Files. Retrieved July 1, 2026, from https://www.sei.cmu.edu/blog/the-dangers-of-vhd-and-vhdx-files/. The ...
sei.cmu

Three Risks in Building Machine Learning Systems

Cohen, B. (2020, May 18). Three Risks in Building Machine Learning Systems. Retrieved July 1, 2026, from https://www.sei.cmu.edu/blog/three-risks-in-building-machine ...