Inference of Memory Bounds: Preventing the Next Heartbleed
Leakage of sensitive information caused by out-of-bounds reads is a relatively new problem that most recently took the form of the Open SSL HeartBleed vulnerability.
SEI’s Douglass Post Honored with 2017 NDIA Ferguson Award
Post and CREATE leadership team cited for outstanding achievement in the practical application of systems engineering principles, promotion of robust systems engineering principles, and effective process development.
Automated Reverse Engineering with Pharos
The Pharos framework includes utilities and tools to automate the challenging and time-consuming process of reverse engineering.
Automated Detection of Information Leaks in Mobile Devices
Can we more precisely detect malicious exfiltration of sensitive information from an Android device?
SEI Seeks Participants for Cyber Intelligence Study Sponsored by Office of the Director of National Intelligence
Results will give insight on how organizations conduct cyber intelligence and help establish best practices.
Cybersecurity in the Defense Acquisition System
The SEI CERT Division's Mark Sherman discusses this new chapter in the DoD's key governing document for acquisition.
Research and Publications
- Cyber Hygiene: A Baseline Set of Practices The CERT Division's Cybersecurity Hygiene is a set of 11 practice areas for managing the most common and pervasive cybersecurity risks faced by organizations. Presentation - 11/15/2017
- Why does Software Cost so Much? Towards a Causal Model Presentation on research to build an actionable, full causal model of software cost factors that is immediately useful to DoD programs and contract negotiators Presentation - 10/30/2017
- Guided Architecture Trade Space Exploration for Safety-Critical Software Systems Presentation on research to create new tool prototype that automatically explores a system’s trade space Presentation - 10/30/2017
- Dynamic Design Analysis Presentation on research to identify dynamic dependencies that result from the way modern systems are composed Presentation - 10/30/2017
Training
- Insider Threat Program Manager: Implementation and Operation January 23 - 25, 2018 (SEI Arlington, VA)
- Designing Modern Service-Based Systems January 30, 2018 (SEI Pittsburgh, PA)
- Design Guidelines and Patterns for Microservices January 31 - February 1, 2018 (SEI Pittsburgh, PA)
- ELearning Courses Online
NEWS
-
CERT Releases New PGP Key
Article - 12/05/2017 -
SEI’s Douglass Post Honored with 2017 NDIA Ferguson Award
Article - 11/28/2017 -
SEI Seeks Participants for Cyber Intelligence Study Sponsored by Office of the Director of National Intelligence
Press Release - 11/16/2017 -
SEI Hosts 14th Annual Software Engineering Workshop for Educators
Article - 08/31/2017
-
CERT Division's Summer Fowler: Equifax data breach — here's what we can learn from it
Media Coverage - 09/13/2017
EVENTS
-
FloCon 2018
FloCon provides a forum for exploring large-scale, next-generation data analytics in support of security operations. FloCon is geared toward operational analysts, tool developers, researchers, security professionals, and others interested in applying cutting-edge techniques to analyze and visualize large datasets for protection and defense of networked systems.Conferences - 01/08/2018
WEBINARS
- Four Valuable Data Sources for Network Security Analytics Timothy J. Shimeall Webinar - 12/05/2017
- Weaving a Fabric of Trust: Ensured Security, Privacy, Resilience, and Accountability Greg Shannon Webinar - 11/27/2017
Blogs
Inference of Memory Bounds: Preventing the Next Heartbleed
12/04/2017 - Will Klieber
Cyber Warfare, Technical Debt, Network Border Protection, and Insider Threat: The Latest Work from the SEI
11/27/2017 - Douglas C. Schmidt
Automated Detection of Information Leaks in Mobile Devices
11/20/2017 - Lori FlynnPODCASTS
Positive Incentives for Reducing Insider Threat
Andrew Moore and Daniel Bauer highlight results from our recent research that suggests organizations need to take a more holistic approach to mitigating insider threat. Podcast - 11/30/2017
Mission-Practical Biometrics
Satya Venneti presents exploratory research undertaken by the SEI's Emerging Technology Center to design algorithms to extract heart rate from video capture of non-stationary subjects in real-time. Podcast - 11/16/2017