News

Software Engineering Institute

A Semantics of AADL EMV2 and Its Application to Model-Based Fault Tree Generation

This technical report proposes a formal semantics for EMV2 and shows how to leverage this semantics to generate fault trees from an AADL model enriched with EMV2 information.
Software Engineering Institute

Emil Mathew

CERT Division at Carnegie Mellon University's Software Engineering Institute. He has supported national security efforts for over 10 years in civilian, military, and contractor roles. Before joining ...
Software Engineering Institute

Government, CMU, and SEI Leaders Celebrate 40 Years of Advancing Software for National Security

Speakers at a September 4 event reflected on four decades of innovation in software, cybersecurity, and AI for defense—and what’s to come.
sei.cmu

Architecting the Future of Software Engineering: A National Agenda for Software Engineering Research & Development

Software is vital to our country’s global competitiveness, innovation, and national security. It also ensures our modern standard of living and enables continued advances in defense, infrastructure, ...
sei.cmu

How Easy Is It to Make and Detect a Deepfake?

Bernaciak, C., and Ross, D., 2022: How Easy Is It to Make and Detect a Deepfake?. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...
sei.cmu

UEFI: 5 Recommendations for Securing and Restoring Trust

Sarvepalli, V., 2023: UEFI: 5 Recommendations for Securing and Restoring Trust. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...
sei.cmu

Probably Don’t Rely on EPSS Yet

Spring, J., 2022: Probably Don’t Rely on EPSS Yet. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed September 10, 2025, https ...
sei.cmu

Modeling Languages for Model-Based Systems Engineering (MBSE)

McGregor, J., and Cohen, S., 2022: Modeling Languages for Model-Based Systems Engineering (MBSE). Carnegie Mellon University, Software Engineering Institute's ...
sei.cmu

Remote Work: Vulnerabilities and Threats to the Enterprise

Groce, P., 2021: Remote Work: Vulnerabilities and Threats to the Enterprise. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...
sei.cmu

Threat Modeling: 12 Available Methods

Shevchenko, N., 2018: Threat Modeling: 12 Available Methods. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed September 9, 2025 ...
sei.cmu

PSP: A Self-Improvement Process for Software Engineers

PSP: A Self-Improvement Process for Software Engineers presents a disciplined process for software engineers and anyone else involved in software development. Most software-development groups have ...
sei.cmu

Insider Threat Test Dataset

The CERT Division, in partnership with ExactData, LLC, and under sponsorship from DARPA I2O, generated a collection of synthetic insider threat test datasets. These datasets provide both synthetic ...