Pochette de SEI Shorts
Dernier épisode disponible What has the SEI done to improve observability in the DevSecOps pipeline? Prêt à écouter
0:00 50 s

0 Épisodes

Protecting Systems Using SSH Keys

In this SEI Cyber Minute, Alex Corn discusses how to protect systems using Secure Shell (SSH). SSH supports keys, which provide efficiency and security benefits.

A New Path to Verifiable Confidence

In this SEI Cyber Minute, Bobbie Stempfley explains how in our increasingly complex world, the SEI is redefining approaches to security to address the transformative technologies being adopted throughout government and industry.

Agile Pitfall in Acquisition: The Bottom of the V

In this SEI Cyber Minute, Suzanne Miller explains a pitfall that can occur when trying to use Agile and Lean methods when developing and implementing complex, embedded systems. In such projects, development...

Insider Threat Mitigation, We can help!

September 2019 has been designated "National Insider Threat Awareness Month." A number of federal agencies—including the FBI, Office of the Under Secretary of Defense for Intelligence, and Department of Homeland Security—have chosen...

Automating Alert Handling Reduces Manual Effort

Static analysis (SA) alerts about software code flaws require costly manual effort to validate (e.g., determine True or False) and repair. As a result, organizations often severely limit the types of alerts...

SCAIFE: An Alert Auditing Classification Prototype

In this SEI Cyber Minute, Ebonie McNeil explains how the Source Code Analysis Integrated Framework Environment or (SCAIFE) prototype is intended to be used by developers and analysts who manually audit alerts....

Integrating Threat Modeling with the SERA Method

Threat-modeling methods provide an approach for identifying possible threats to a system and mitigating them. In this SEI Cyber Minute, Chris Alberts discusses the Security Engineering Risk Analysis (SERA) Method and the...

Using Confidence Maps

Chuck Weinstock introduces confidence maps and explains how they work to determine how much confidence someone can have in a claim. Confidence maps collect arguments or doubts about a claim, to which...

Natural Language Processing for Cybersecurity

Elli Kanal describes the work that the SEI does to train computers to learn about stored content and find pertinent information without the help of an analyst. The Software Engineering Institute (SEI)...