A Technical History of the SEI

The Challenge: Software Vulnerabilities 170
A Solution: Vulnerability Analysis, Remediation, and Discovery 170
The Consequence: Improved Vendor Practices, Well-Informed System
Mangers 171
The SEI Contribution 172
References 172
Malicious Code Analysis 173
The Challenge: Malicious Code 173
A Solution: Malicious Code Database and Analysis 173
The Consequence: Faster Response to Malicious Code Attacks, Better Control 174
The SEI Contribution 174
References 175
Secure Coding 177
The Challenge: Preventing Software Vulnerabilities 177
A Solution: Secure Coding Standards and Practices 177
The Consequence: More Secure Products 179
The SEI Contribution 179
References 180
Network Situational Awareness 181
The Challenge: Visibility of Large Networks 181
A Solution: Network Situational Awareness Tools and Techniques 181
The Consequence: Improved Situational Awareness with SEI Tools 182
The SEI Contribution 182
References 183
Insider Threat 184
The Challenge: Cyber Attacks by Insiders 184
A Solution: Insider Threat Research and Solutions 184
The Consequence: Improved Insider Threat Detection and Response 186
The SEI Contribution 186
References 186
Information Security Assessments 188
The Challenge: Managing Risks to Enterprise-Wide Information Security 188
A Solution: Managing Risks to Enterprise-Wide Information Security 188
The Consequence: Enterprise Risk Management and Security Improvement 189
The SEI Contribution 190
References 190
Cybersecurity Engineering 192
The Challenge: Software Security Assurance 192
A Solution: Build In Security from the Start 192
The Consequence: Improved Software Development and Acquisition Practices 194
The SEI Contribution 194
References 195
6 Software Engineering Methods 197
Introduction to Software Engineering Methods 199
Demands of Increasing Reliance on Software Systems 199
Evolving Software Configuration Management 199
Developing Community Standards: Computer-Aided Software Engineering 199
Developing Community Standards: Open Systems Engineering 199
Aiding Understanding of Expanding Technology 200
Managing and Engineering COTS-Based Systems 200
Assurance Cases: Addressing Systems of Systems Challenges 201
References 202
Configuration Management 203
CMU/SEI-2016-SR-027 | SOFTWARE ENGINEERING INSTITUTE | CARNEGIE MELLON UNIVERSITY
Distribution Statement A: Approved for Public Release; Distribution is Unlimited
vi