Software Engineering Institute

Orchestrating the Chaos: Protecting Wireless Networks from Cyber Attacks

This podcast explores radio frequency attacks, such as those conducted by APT28, and how software and cybersecurity play key roles in preventing and mitigating these exploitations.
Software Engineering Institute

Bridging Research and Practice in LLM Agent Security

This systematic review discusses academic surveys, grey literature sources, and real-world case studies on securing LLM agents.
sei.cmu

7 Recommendations to Improve SBOM Quality

Tobar, D., Jamieson, J., Priest, M., and Fricke, J., 2025: 7 Recommendations to Improve SBOM Quality. Carnegie Mellon University, Software Engineering Institute's ...
sei.cmu

Non-DoD Work Sponsor User Guide

The Software Engineering Institute (SEI) is operated and managed by Carnegie Mellon University (CMU) as a Federally Funded Research and Development Center (FFRDC) under Air Force (AF) contract number ...
sei.cmu

Evaluating LLMs for Text Summarization: An Introduction

Gallagher, S., Rallapalli, S., and Brooks, T., 2025: Evaluating LLMs for Text Summarization: An Introduction. Carnegie Mellon University, Software Engineering ...
sei.cmu

Application Programming Interface (API) Vulnerabilities and Risks

This report describes 11 common vulnerabilities and 3 risks related to application programming interfaces, providing suggestions about how to fix or reduce their impact. Application programming ...
sei.cmu

What Recent Vulnerabilities Mean to Rust

Svoboda, D., 2024: What Recent Vulnerabilities Mean to Rust. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed December 3, 2025 ...
sei.cmu

2000 CERT Advisories

CERT/CC advisories are now part of the US-CERT National Cyber Awareness System. We provide these advisories, published by year, for historical purposes. This report details the description, impact, ...
sei.cmu

Applying Large Language Models to DoD Software Acquisition: An Initial Experiment

Schmidt, D., and Robert, J., 2024: Applying Large Language Models to DoD Software Acquisition: An Initial Experiment. Carnegie Mellon University, Software Engineering ...
sei.cmu

10 Lessons in Security Operations and Incident Management

Ruefle, R., 2024: 10 Lessons in Security Operations and Incident Management. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...
sei.cmu

Using ChatGPT to Analyze Your Code? Not So Fast

Sherman, M., 2024: Using ChatGPT to Analyze Your Code? Not So Fast. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed December 3 ...
sei.cmu

10 Benefits and 10 Challenges of Applying Large Language Models to DoD Software Acquisition

Robert, J., and Schmidt, D., 2024: 10 Benefits and 10 Challenges of Applying Large Language Models to DoD Software Acquisition. Carnegie Mellon University, Software ...