Software Engineering Institute

New AI Flaw Reporting System Fills Crucial Security Gap

Flaw Reporting for AI (FLARE-AI) allows developers and security researchers to submit artificial intelligence flaws for formal, coordinated disclosure.
sei.cmu

7 Recommendations to Improve SBOM Quality

Tobar, D., Jamieson, J., Priest, M., and Fricke, J., 2025: 7 Recommendations to Improve SBOM Quality. Software Engineering Institute blog, Accessed July 1, 2026 ...
sei.cmu

EMFTA: an Open Source Tool for Fault Tree Analysis

Delange, J. (2016, July 18). EMFTA: an Open Source Tool for Fault Tree Analysis. Retrieved July 7, 2026, from https://www.sei.cmu.edu/blog/emfta-an-open-source-tool ...
sei.cmu

The Risks of Google Sign-In on iOS Devices

Dormann, W. (2016, August 2). The Risks of Google Sign-In on iOS Devices. Retrieved July 7, 2026, from https://www.sei.cmu.edu/blog/the-risks-of-google-sign-in-on-ios ...
sei.cmu

DevOps Case Study: Netflix and the Chaos Monkey

Cois, C. (2015, April 30). DevOps Case Study: Netflix and the Chaos Monkey. Retrieved July 6, 2026, from https://www.sei.cmu.edu/blog/devops-case-study-netflix-and ...
sei.cmu

The Curious Case of the Bouncy Castle BKS Passwords

Dormann, W. (2018, March 19). The Curious Case of the Bouncy Castle BKS Passwords. Retrieved July 6, 2026, from https://www.sei.cmu.edu/blog/the-curious-case-of-the ...
sei.cmu

Three Strategies to Minimize the Implementation Dip in DevOps

Waits, T. (2016, September 16). Three Strategies to Minimize the Implementation Dip in DevOps. Retrieved July 6, 2026, from https://www.sei.cmu.edu/blog/three ...
sei.cmu

What Engineers Need to Know About Artificial Intelligence

Longstaff, T. (2019, September 16). What Engineers Need to Know About Artificial Intelligence. Retrieved July 6, 2026, from https://www.sei.cmu.edu/blog/what ...
sei.cmu

Software-Defined Warfare: Crossing the Chasm in Two Software Areas

Nielsen, P. (2026, June 23). Software-Defined Warfare: Crossing the Chasm in Two Software Areas. Retrieved July 1, 2026, from https://doi.org/10.58012/9wg2-8778. This ...
sei.cmu

The AI Adoption Maturity Model v1.0

Organizations achieve lasting AI value and return on investment (ROI) through discipline—not just speed. True AI maturity is not measured by how much AI an organization deploys, but by its ability to ...
sei.cmu

Weaknesses and Vulnerabilities in Modern AI: Integrity, Confidentiality, and Governance

Scherlis, B. (2024, August 5). Weaknesses and Vulnerabilities in Modern AI: Integrity, Confidentiality, and Governance. Retrieved July 1, 2026, from https://doi.org ...
sei.cmu

Advancing Software for National Security

Since our foundation in 1984, we have helped the Department of War (DoW), government agencies, and private industry meet mission goals and gain strategic advantage by innovating and advancing the ...