sei.cmu

Implementing Zero Trust in Operational Technology: A Practical Case Study

Brown, R. (2026, June 16). Implementing Zero Trust in Operational Technology: A Practical Case Study. Retrieved October 14, 2026, from https://doi.org/10.58012/6eyx ...
sei.cmu

Differences Between ASLR on Windows and Linux

Dormann, W. (2014, February 10). Differences Between ASLR on Windows and Linux. Retrieved October 14, 2026, from https://www.sei.cmu.edu/blog/differences-between-aslr ...
sei.cmu

Navigating Program Complexity with the Waypoints Framework

Dooley, K., 2026: Navigating Program Complexity with the Waypoints Framework. Software Engineering Institute blog, Accessed October 9, 2026, https://doi.org/10.58012 ...
sei.cmu

Securing UEFI in the Age of AI: The Forgotten Footholds

UEFI remains an attractive attack surface. In the AI era, accelerating computing power and vulnerability discovery make securing UEFI—and leveraging AI to defend it—more critical than ever. UEFI ...
sei.cmu

A Framework for DevSecOps Evolution and Achieving Continuous-Integration/Continuous-Delivery (CI/CD) Capabilities

Hughes, L., & Jackson, V. (2021, February 15). A Framework for DevSecOps Evolution and Achieving Continuous-Integration/Continuous-Delivery (CI/CD) Capabilities ...
sei.cmu

Data Poisoning in AI Models: The Case for Chain of Custody Controls

Metcalf, R., & Churilla, M. (2026, April 27). Data Poisoning in AI Models: The Case for Chain of Custody Controls. Retrieved October 13, 2026, from https://doi.org/10 ...
sei.cmu

The Dangers of VHD and VHDX Files

Dormann, W. (2019, September 4). The Dangers of VHD and VHDX Files. Retrieved October 13, 2026, from https://www.sei.cmu.edu/blog/the-dangers-of-vhd-and-vhdx-files ...
sei.cmu

Cybersecurity Engineering

This blog post presents a method that combines information about security requirements, controls, and capabilities with analysis regarding cyber threats to enable ...
sei.cmu

Four Open-Source Text-to-Speech Systems and When to Use Them

Brewer, S. (2026, September 23). Four Open-Source Text-to-Speech Systems and When to Use Them. Retrieved October 13, 2026, from https://doi.org/10.58012/a0m2-6m84 ...
sei.cmu

7 Guidelines for Being a TRUSTED Penetration Tester

Miller, K. (2019, September 17). 7 Guidelines for Being a TRUSTED Penetration Tester. Retrieved October 13, 2026, from https://www.sei.cmu.edu/blog/7-guidelines-for ...
sei.cmu

DevOps Case Study: Netflix and the Chaos Monkey

Cois, C. (2015, April 30). DevOps Case Study: Netflix and the Chaos Monkey. Retrieved October 12, 2026, from https://www.sei.cmu.edu/blog/devops-case-study-netflix ...
sei.cmu

An Introduction to the Mission Thread Workshop

Gagliardi, M. (2015, March 30). An Introduction to the Mission Thread Workshop. Retrieved October 13, 2026, from https://www.sei.cmu.edu/blog/an-introduction-to-the ...