Software Engineering Institute (SEI) Podcast Series
de Members of Technical Staff at the Software Engineering Institute
Último episodio
Fast Development, Furious Sustainment: 3 Questions for Continuous…
Fast Development, Furious Sustainment: 3 Questions for Continuous…
Sobre este podcast
The SEI Podcast Series presents conversations in software engineering, cybersecurity, and future technologies.
Episodios
Los 50 episodios más recientes de 437
- Fast Development, Furious Sustainment: 3 Questions for Continuous Evolution · 36 minMajor software acquisition programs face pressure to meet delivery milestones. Far too often, by the time program leaders turn their attention to sustainment, the window for…
- Why Accuracy Isn't Enough: A New Quality Model for Real-World ML Components · 24 minAI components, whether traditional machine learning or generative AI, are embedded in many present-day systems. However, despite advances in automation, infrastructure, and…
- Breaking Down Barriers: How LLMs Enable Software Analysis in Classified Environments · 22 minThe recent explosion in large language model (LLM) technology has highlighted the challenges of using public generative artificial intelligence tools in classified environments…
- Software-Defined Warfare: Expanding the Frontier · 13 minSoftware-defined warfare is today's reality for national security, shifting the emphasis in military operations from hardware to software. In the latest podcast from the Carnegie…
- From Coordination Chaos to Mission Focus: The Waypoints Framework · 19 min · Episodio 439In aviation, waypoints guide pilots through complex flight plans, providing some structure but maintaining flexibility. Kevin Dooley, a senior Agile transformation leader at the…
- An LLM Evaluation Framework for High-Stakes AI · 17 minExperimentation and validation of LLM performance is critical when building LLM-driven systems that must reliably deliver a service, from customer service chat bots to…
- Protecting AI Systems Against Data Poisoning · 20 minData poisoning—where adversaries tamper with training data to corrupt model behavior—poses significant risks as AI adoption expands across critical sectors. Organizations without…
- Goal-Line Defense: A Tool to Discover and Mitigate UEFI Vulnerabilities · 41 minAs recently as December 2025, the Carnegie Mellon University Software Engineering Institute (SEI's) CERT Coordination Center (CERT/CC) documented a UEFI-related vulnerability in…
- Leadership, Legacy, and the Power of Mentors: Insights from Dr. Paul Nielsen · 19 min · Episodio 435In February 2026, Paul Nielsen announced that he will transition out of his role as director and chief executive officer of the Software Engineering Institute (SEI) at Carnegie…
- With a Little Help from Our Civilian Friends: Cybersecurity Reserve Is Both Feasible and Advisable · 49 minCybersecurity staffing shortages are a major concern in the government given the increasingly sophisticated cyber attacks on the nation's critical infrastructure. In the FY2023…
- Maturing AI Adoption: From Chaos to Consistency · 26 minWhile Stanford University found that AI investments, optimism, and accessibility are rising, a recent MIT report suggests that 95 percent of organizations are realizing no…
- Temporal Memory Safety in C and C++: An AI-Enhanced Pointer Ownership Model · 24 minIn October 2025, CyberPress reported a critical security vulnerability in the Redis Server, an open-source in-memory database that allowed authenticated attackers to achieve…
- AI for the Warfighter: Acquisition Challenges and Guidance · 25 minOn November 7, the Department of War released an acquisition transformation strategy that seeks to remove bureaucratic hurdles and streamline acquisition processes to enable even…
- Visibility Through the Clouds with Network Flow Logs · 36 minOrganizations, including the U.S. military, are increasingly adopting cloud deployments for their flexibility and cost savings. The shared security model utilized by cloud…
- Orchestrating the Chaos: Protecting Wireless Networks from Cyber Attacks · 37 minFrom early 2022 through late 2024, a group of threat actors publicly known as APT28 exploited known vulnerabilities, such as CVE-2022-38028, to remotely and wirelessly access…
- From Data to Performance: Understanding and Improving Your AI Model · 27 minModern data analytic methods and tools—including artificial intelligence (AI) and machine learning (ML) classifiers—are revolutionizing prediction capabilities and automation…
- What Could Possibly Go Wrong? Safety Analysis for AI Systems · 36 minHow can you ever know whether an LLM is safe to use? Even self-hosted LLM systems are vulnerable to adversarial prompts left on the internet and waiting to be found by system…
- Getting Your Software Supply Chain In Tune with SBOM Harmonization · 23 minSoftware bills of materials or SBOMs are critical to software security and supply chain risk management. Ideally, regardless of the SBOM tool, the output should be consistent for…
- API Security: An Emerging Concern in Zero Trust Implementations · 18 minApplication programing interfaces, more commonly known as APIs, are the engines behind the majority of internet traffic. The pervasive and public nature of APIs have increased…
- Delivering Next-Generation AI Capabilities · 30 minArtificial intelligence (AI) is a transformational technology, but it has limitations in challenging operational settings. Researchers in the AI Division of the Carnegie Mellon…
- The Benefits of Rust Adoption for Mission-and-Safety-Critical Systems · 20 minA recent Google survey found that many developers felt comfortable using the Rust programming language in two months or less. Yet barriers to Rust adoption remain, particularly…
- Threat Modeling: Protecting Our Nation's Complex Software-Intensive Systems · 35 minIn response to Executive Order (EO) 14028, Improving the Nation's Cybersecurity, the National Institute of Standards and Technology (NIST) recommended 11 practices for software…
- Understanding Container Reproducibility Challenges: Stopping the Next Solar Winds · 25 minContainer images are increasingly being used as the main method for software deployment, so ensuring the reproducibility of container images is becoming a critical step in…
- Mitigating Cyber Risk with Secure by Design · 32 minSoftware enables our way of life, but market forces have sidelined security concerns leaving systems vulnerable to attack. Fixing this problem will require the software industry…
- The Magic in the Middle: Evolving Scaled Software Solutions for National Defense · 21 minA January 2025 Defense Innovation Board study on scaling nontraditional defense innovation stated, "We must act swiftly to ensure the DoD leads in global innovation and…
- Making Process Respectable Again: Advancing DevSecOps in the DoD Mission Space · 44 minWarfighters in the Department of Defense (DoD) operate in high-stakes environments where security, efficiency, and speed are critical. In such environments DevSecOps has become…
- Deploying on the Edge · 1 h 1 minDeploying cloud-centric technologies such as Kubernetes in edge environments poses challenges, especially for mission-critical defense systems. In this podcast from the Carnegie…
- The Best and Brightest: 6 Years of Supporting the President's Cup Cybersecurity Competition · 22 minA strong cyber defense is vital to public- and private-sector activities in the United States. In 2019, in response to an executive order to strengthen America's cybersecurity…
- Updating Risk Assessment in the CERT Secure Coding Standard · 26 minEvaluating source code to ensure secure coding qualities costs time and effort and often involves static analysis. But those who are familiar with static analysis tools know that…
- Delivering Next Generation Cyber Capabilities to the DoD Warfighter · 27 minIn this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Gregory Touhill, director of the SEI CERT Division, sits down with Matthew Butkovic…
- Getting the Most Out of Your Insider Risk Data with IIDES · 39 minInsider incidents cause around 35 percent of data breaches, creating financial and security risks for organizations. In this podcast from the Carnegie Mellon University Software…
- Grace Lewis Outlines Vision for IEEE Computer Society Presidency · 18 minGrace Lewis, a principal researcher at the Carnegie Mellon University Software Engineering Institute (SEI) and lead of the SEI's Tactical and AI-Enabled Systems Initiative, was…
- Improving Machine Learning Test and Evaluation with MLTE · 29 minMachine learning (ML) models commonly experience issues when integrated into production systems. In this podcast, researchers from the Carnegie Mellon University Software…
- DOD Software Modernization: SEI Impact and Innovation · 27 minAs software size, complexity, and interconnectedness has grown, software modernization within the Department of Defense (DoD) has become more important than ever. In this…
- Securing Docker Containers: Techniques, Challenges, and Tools · 39 minContainerization allows developers to run individual software applications in an isolated, controlled, repeatable way. With the increasing prevalence of cloud computing…
- An Introduction to Software Cost Estimation · 23 minSoftware cost estimation is an important first step when beginning a project. It addresses important questions regarding budget, staffing, scheduling, and determining if the…
- Cybersecurity Metrics: Protecting Data and Understanding Threats · 27 minOne of the biggest challenges in collecting cybersecurity metrics is scoping down objectives and determining what kinds of data to gather. In this podcast from the Carnegie…
- 3 Key Elements for Designing Secure Systems · 36 minTo make secure software by design a reality, engineers must intentionally build security throughout the software development lifecycle. In this podcast from the Carnegie Mellon…
- Using Role-Playing Scenarios to Identify Bias in LLMs · 45 minHarmful biases in large language models (LLMs) make AI less trustworthy and secure. Auditing for biases can help identify potential solutions and develop better guardrails to…
- Best Practices and Lessons Learned in Standing Up an AISIRT · 38 minIn the wake of widespread adoption of artificial intelligence (AI) in critical infrastructure, education, government, and national security entities, adversaries are working to…
- 3 API Security Risks (and How to Protect Against Them) · 19 minThe exposed and public nature of application programming interfaces (APIs) come with risks including the increased network attack surface. Zero trust principles are helpful for…
- Evaluating Large Language Models for Cybersecurity Tasks: Challenges and Best Practices · 43 minHow can we effectively use large language models (LLMs) for cybersecurity tasks? In this Carnegie Mellon University Software Engineering Institute podcast, Jeff Gennari and Sam…
- Capability-based Planning for Early-Stage Software Development · 34 minCapability-Based Planning (CBP) defines a framework that has an all-encompassing view of existing abilities and future needs for strategically deciding what is needed and how to…
- Safeguarding Against Recent Vulnerabilities Related to Rust · 26 minWhat can the recently discovered vulnerabilities related to Rust tell us about the security of the language? In this podcast from the Carnegie Mellon University Software…
- Developing a Global Network of Computer Security Incident Response Teams (CSIRTs) · 31 minCybersecurity risks aren't just a national concern. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), the CERT division's Tracy Bills…
- Automated Repair of Static Analysis Alerts · 27 minDevelopers know that static analysis helps make code more secure. However, static analysis tools often produce a large number of false positives, hindering their usefulness. In…
- Developing and Using a Software Bill of Materials Framework · 38 minWith the increasing complexity of software systems, the use of third-party components has become a widespread practice. Cyber disruptions, such as SolarWinds and Log4j…
- Using Large Language Models in the National Security Realm · 35 minAt the request of the White House, the Office of the Director of National Intelligence (ODNI) began exploring use cases for large language models (LLMs) within the Intelligence…
- Atypical Applications of Agile and DevSecOps Principles · 34 minModern software engineering practices of Agile and DevSecOps have provided a foundation for producing working software products faster and more reliably than ever before. Far too…
- When Agile and Earned Value Management Collide: 7 Considerations for Successful Interaction · 35 minIncreasingly in government acquisition of software-intensive systems, we are seeing programs using Agile development methodology and earned value management. While there are many…
