Developing a Global Network of Computer Security Incident Response Teams (CSIRTs)

UNLIMITED

Securing Docker Containers: Techniques, Challenges, and Tools: Containerization allows developers to run individual software applications in an isolated, controlled, repeatable way. With the increasing prevalence of cloud computing environments, containers are providing more and more of their underlying... by Software Engineering Institute (SEI) Podcast Series

39 min listen

UNLIMITED

An Introduction to Software Cost Estimation: Software cost estimation is an important first step when beginning a project. It addresses important questions regarding budget, staffing, scheduling, and determining if the current environment will support the project. In this podcast from the... by Software Engineering Institute (SEI) Podcast Series

23 min listen

UNLIMITED

Cybersecurity Metrics: Protecting Data and Understanding Threats: One of the biggest challenges in collecting cybersecurity metrics is scoping down objectives and determining what kinds of data to gather. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Bill Nichols, who... by Software Engineering Institute (SEI) Podcast Series

27 min listen

UNLIMITED

3 Key Elements for Designing Secure Systems: To make secure software by design a reality, engineers must intentionally build security throughout the software development lifecycle. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Timothy A. Chick,... by Software Engineering Institute (SEI) Podcast Series

36 min listen

UNLIMITED

Using Role-Playing Scenarios to Identify Bias in LLMs: Harmful biases in large language models (LLMs) make AI less trustworthy and secure. Auditing for biases can help identify potential solutions and develop better guardrails to make AI safer. In this podcast from the Carnegie Mellon University Software... by Software Engineering Institute (SEI) Podcast Series

45 min listen

UNLIMITED

Best Practices and Lessons Learned in Standing Up an AISIRT: In the wake of widespread adoption of artificial intelligence (AI) in critical infrastructure, education, government, and national security entities, adversaries are working to disrupt these systems and attack AI-enabled assets. With nearly four ... by Software Engineering Institute (SEI) Podcast Series

38 min listen

UNLIMITED

3 API Security Risks (and How to Protect Against Them): The exposed and public nature of application programming interfaces (APIs) come with risks including the increased network attack surface. Zero trust principles are helpful for mitigating these risks and making APIs more secure. In this podcast from... by Software Engineering Institute (SEI) Podcast Series

19 min listen

UNLIMITED

Evaluating Large Language Models for Cybersecurity Tasks: Challenges and Best Practices: How can we effectively use large language models (LLMs) for cybersecurity tasks? In this Carnegie Mellon University Software Engineering Institute podcast, Jeff Gennari and Sam Perl discuss applications for LLMs in cybersecurity, potential challenges,... by Software Engineering Institute (SEI) Podcast Series

43 min listen

UNLIMITED

An Introduction to Capability-Based Planning: Capability-Based Planning (CBP) defines a framework that has an all-encompassing view of existing abilities and future needs for strategically deciding what is needed and how to effectively achieve it. Both business and government acquisition domains... by Software Engineering Institute (SEI) Podcast Series

34 min listen

UNLIMITED

Safeguarding Against Recent Vulnerabilities Related to Rust: What can the recently discovered vulnerabilities related to Rust tell us about the security of the language? In this podcast from the Carnegie Mellon University Software Engineering Institute, David Svoboda discusses two vulnerabilities, their... by Software Engineering Institute (SEI) Podcast Series

26 min listen

UNLIMITED

Automated Repair of Static Analysis Alerts: Developers know that static analysis helps make code more secure. However, static analysis tools often produce a large number of false positives, hindering their usefulness. In this podcast from the Carnegie Mellon University Software Engineering... by Software Engineering Institute (SEI) Podcast Series

27 min listen

UNLIMITED

Cyber Career Pathways and Opportunities: Not all paths to cybersecurity careers look the same. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Randy Trzeciak, deputy director of cyber risk and resilience in the SEI’s CERT division, discusses his... by Software Engineering Institute (SEI) Podcast Series

31 min listen

UNLIMITED

Developing and Using a Software Bill of Materials Framework: With the increasing complexity of software systems, the use of third-party components has become a widespread practice. Cyber disruptions, such as SolarWinds and Log4j, demonstrate the harm that can occur when organizations fail to manage third-party... by Software Engineering Institute (SEI) Podcast Series

38 min listen

UNLIMITED

The Importance of Divesity in Cybersecurity: Carol Ware: In this podcast from the Carnegie Mellon University Software Engineering Institute, Carol Ware, a senior cybersecurity engineer in the SEI’s CERT Division, discusses her career path, the value of mentorship, and the importance of diversity in... by Software Engineering Institute (SEI) Podcast Series

27 min listen

UNLIMITED

The Importance of Diversity in Software Engineering: Suzanne Miller: In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Suzanne Miller, a principal researcher in the SEI’s Software Solutions Division, discusses her career path, the value of mentorship, and the... by Software Engineering Institute (SEI) Podcast Series

29 min listen

UNLIMITED

The Importance of Diversity in Artificial Intelligence: Violet Turri: Across the globe, women account for less than 30 percent of professionals in technical fields. That number drops to 22 percent in the field of Artificial Intelligence (AI). In this podcast from the Carnegie Mellon University Software Engineering... by Software Engineering Institute (SEI) Podcast Series

17 min listen

UNLIMITED

Using Large Language Models in the National Security Realm: At the request of the White House, the Office of the Director of National Intelligence (ODNI) began exploring use cases for large language models (LLMs) within the Intelligence Community (IC). As part of this effort, ODNI sponsored the Mayflower... by Software Engineering Institute (SEI) Podcast Series

35 min listen

UNLIMITED

Atypical Applications of Agile and DevSecOps Principles: Modern software engineering practices of and have provided a foundation for producing working software products faster and more reliably than ever before. Far too often, however, these practices do not address the non-software concerns of business... by Software Engineering Institute (SEI) Podcast Series

34 min listen

UNLIMITED

When Agile and Earned Value Management Collide: 7 Considerations for Successful Interaction: Increasingly in government acquisition of software-intensive systems, we are seeing programs using Agile development methodology and earned value management. While there are many benefits to using both Agile and EVM, there are important considerations... by Software Engineering Institute (SEI) Podcast Series

35 min listen

UNLIMITED

The Impact of Architecture on Cyber-Physical Systems Safety: As developers continue to build greater autonomy into (CPSs), such as unmanned aerial vehicles (UAVs) and automobiles, these systems aggregate data from an increasing number of sensors. However, more sensors not only create more data and... by Software Engineering Institute (SEI) Podcast Series

34 min listen

UNLIMITED

ChatGPT and the Evolution of Large Language Models: A Deep Dive into 4 Transformative Case Studies: To better understand the potential uses of large language models (LLMs) and their impact, a team of researchers at the Carnegie Mellon University Software Engineering Institute CERT Division conducted four in-depth case studies. The case studies span... by Software Engineering Institute (SEI) Podcast Series

46 min listen

UNLIMITED

The Cybersecurity of Quantum Computing: 6 Areas of Research: Research and development of quantum computers continues to grow at a rapid pace. The U.S. government alone spent more than $800 million on quantum information science research in 2022. Thomas Scanlon, who leads the data science group in the SEI CERT... by Software Engineering Institute (SEI) Podcast Series

23 min listen

UNLIMITED

User-Centric Metrics for Agile: Far too often software programs continue to collect metrics for no other reason than that is how it has always been done. This leads to situations where, for any given environment, a metrics program is defined by a list of metrics that must be... by Software Engineering Institute (SEI) Podcast Series

32 min listen

UNLIMITED

The Product Manager’s Evolving Role in Software and Systems Development: In working with software and systems teams developing tech products, Judy Hwang, a senior software engineer in the SEI CERT Division, observed that teams weren’t putting in enough time and effort into thoroughly assessing the product by talking to... by Software Engineering Institute (SEI) Podcast Series

24 min listen

UNLIMITED

Measuring the Trustworthiness of AI Systems: The ability of artificial intelligence (AI) to partner with the software engineer, doctor, or warfighter depends on whether these end users trust the AI system to partner effectively with them and deliver the outcome promised. To build appropriate... by Software Engineering Institute (SEI) Podcast Series

19 min listen

UNLIMITED

Actionable Data in the DevSecOps Pipeline: In this podcast from the Carnegie Mellon University Software Engineering Institute, Bill Nichols and Julie Cohen talk with Suzanne Miller about how automation within DevSecOps product-development pipelines provides new opportunities for program... by Software Engineering Institute (SEI) Podcast Series

32 min listen

UNLIMITED

Insider Risk Management in the Post-Pandemic Workplace: In the wake of the COVID pandemic, the workforce decentralized and shifted toward remote and hybrid environments. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Dan Costa, technical manager of enterprise... by Software Engineering Institute (SEI) Podcast Series

48 min listen

Discover this podcast and so much more

Developing a Global Network of Computer Security Incident Response Teams (CSIRTs)

Description

Titles in the series (100)

More Episodes from Software Engineering Institute (SEI) Podcast Series

Related podcast episodes