Digital Library

In an effort to determine how to make secure software development more cost effective, the SEI conducted a research study to empirically measure the effects that security tools—primarily automated static analysis tools—had on costs and benefits.

Ritwik Gupta and Carson Sestili describe their use of deep learning in IARPA’s Functional Map of the World Challenge.

In this presentation the author explores issues around named vulnerabilities and presents a system to generate names separate from implied importance.

This study reports the successes and challenges of using Agile and Lean methods and cloud-based technologies in a government software development environment.

This paper introduces a heuristic-driven dynamic analysis that aims to detect reads that may be accessing stale sensitive data.

Ritwik Gupta and Carson Sestili describe their use of deep learning in IARPA’s Functional Map of the World Challenge.

In this podcast excerpt, Ritwik Gupta and Carson Sestili describe deep learning and how it differs from machine learning.

CERT researchers Lori Flynn and Zach Kurtz discuss ongoing research using test suites as a source of labeled training data to create classifiers for static analysis alerts.

In this talk, Elli Kanal and Gabe Somlo discussed some blockchain successes, including a number of interesting applications encountered in their work at SEI.

With the recent Cambridge Analytica news and the rollout of the General Data Privacy Rule (GDPR) in Europe, there are many questions about how social media data privacy is managed and how it could be managed.

In this first webcast in a two-part series, April Galyardt and Carson Sestili described what metadata is and what information can be gleaned from it.