x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Software Engineering Institute (SEI) Podcast Series

Members of Technical Staff at the Software Engineering Institute

The SEI Podcast Series presents conversations in software engineering, cybersecurity, and future technologies.

technology

All Episodes

40:59

Managing Vulnerabilities in Machine Learning and...

Software Engineering Institute (SEI) Podcast Series ·

2021/06/04

The robustness and security of artificial intelligence, and specifically machine learning (ML), is of vital importance. Yet, ML systems are vulnerable to adversarial attacks. These can range from an attacker attempting to make the ML system learn the wrong thing (data poisoning), do the wrong thing (evasion attacks), or reveal the wrong thing (model inversion). Although there are several efforts to provide detailed taxonomies of the kinds of attacks that can be launched against a machine learning

en

35:18

AI Workforce Development

Software Engineering Institute (SEI) Podcast Series ·

2021/05/20

In this SEI Podcast, Rachel Dzombak and Jay Palat discuss growth in the field of artificial intelligence (AI) and how organizations can hire and train staff to take advantage of the opportunities afforded by AI and machine learning—and the critical need for an AI engineering discipline to grow the AI workforce.

en

40:41

Moving from DevOps to DevSecOps

Software Engineering Institute (SEI) Podcast Series ·

2021/05/13

DevSecOps is a set of principles and practices that provide faster delivery of secure software capabilities by improving the collaboration and communication between software development teams, IT operations, and security staff within an organization, as well as with acquirers, suppliers, and other stakeholders in the life of a software system. In this SEI podcast, Hasan Yasar, technical director of the Continuous Deployment of Capability group in the Software Solutions Division of the SEI, discusses

en

37:27

My Story in Computing with David Zubrow

Software Engineering Institute (SEI) Podcast Series ·

2021/04/29

In this SEI Podcast, the latest in the “My Story in Computing” series, which explores the unique paths people take into the field of computing, David Zubrow discusses his path from a PhD in applied history and social sciences and an administrative position at Carnegie Mellon University to a career as a manager and technical leader at the SEI.

en

13:18

Mission-Based Prioritization: A New Method for...

Software Engineering Institute (SEI) Podcast Series ·

2021/04/23

In this SEI Podcast, Keith Korzec discusses the Mission-Based Prioritization method for prioritizing Agile backlogs. This method overcomes the shortcomings of prioritization based on “weighted shortest job first” and utilizes objective, mission-focused criteria while allowing ongoing re-prioritization to be conducted with minimal overhead.

en

16:41

My Story in Computing with Carol Smith

Software Engineering Institute (SEI) Podcast Series ·

2021/04/09

Those who work in computing today bring a wide array of backgrounds and experiences to the profession. In this podcast, part of the My Story in Computing series, learn how Carol Smith, who trained as a photojournalist, discusses how a love of telling people’s stories led to a career in human-computer interaction working in artificial intelligence with the SEI’s Emerging Technology Center.

en

30:45

Digital Engineering and DevSecOps

Software Engineering Institute (SEI) Podcast Series ·

2021/03/16

Digital engineering is an integrated digital approach that uses authoritative sources of systems data and models as a continuum across disciplines to support lifecycle activities from concept through disposal. With digital engineering, models are developed for everything, not just for software, but for all components of a system of systems, hardware and software. The models and associated data are stored in a singular repository of knowledge and are the single source that is used by all contractors

en

30:31

A 10-Step Framework for Managing Risk

Software Engineering Institute (SEI) Podcast Series ·

2021/03/09

Brett Tucker, a technical manager for cyber risk in the SEI CERT Division, discusses the Operationally Critical Threat, Asset, and Vulnerability Evaluation for the Enterprise (OCTAVE FORTE) Model, which helps organizations evaluate security risks and use principles of enterprise risk management to bridge the gap between executives and practitioners. In this SEI Podcast, Tucker outlines OCTAVE FORTE's 10-step framework to guide organizations in managing risk.

en

20:23

7 Steps to Engineer Security into Ongoing and Future...

Software Engineering Institute (SEI) Podcast Series ·

2021/02/23

If organizations take more steps to address security-related activities now, they will be less likely to encounter security incidents in the future. When it comes to application containers, security is achieved through adopting a series of best practices and guidelines. In this SEI Podcast, Tom Scanlon and Richard Laughlin, researchers with the SEI's CERT Division, discuss seven steps that developers can take to engineer security into ongoing and future container adoption efforts.

en

32:50

Ransomware: Evolution, Rise, and Response

Software Engineering Institute (SEI) Podcast Series ·

2021/02/16

In this SEI Podcast, Marisa Midler and Tim Shimeall, network defense analysts within the SEI's CERT Division, discuss the growing problem of ransomware including the rise of ransomware as a service threats. Ransom payments from Quarter 3 of 2019 were on average $42,000, and in Quarter 1 of 2020, that average increased $70,000 to $112,000. The volume of attacks also increased by 25 percent in Quarter 4 of 2019 and by another 25 percent in Quarter 1 of 2020. The sophistication of the attacks has

en

38:14

VINCE: A Software Vulnerability Coordination Platform

Software Engineering Institute (SEI) Podcast Series ·

2021/01/21

Software vulnerability coordination at the CERT Coordination Center (CERT/CC) has traditionally relied on a hub-and-spoke model, with reports submitted to analysts at the CERT/CC analysts who would then work with contact affected vendors. To scale communications and increase the level of collaboration between vulnerability reporters, coordinators, and software vendors, the CERT/CC team has created a web-based platform for software vulnerability reporting and coordination called the Vulnerability

en

46:17

Work From Home: Threats, Vulnerabilities, and...

Software Engineering Institute (SEI) Podcast Series ·

2021/01/06

The COVID-19 pandemic has forced significant changes in enterprise work practices, including an increased use of telecommunications technologies required by the new work-from-home policies that most organizations have instituted in response. In this podcast, Phil Groce, a senior network defense analyst in the CERT Division of the Carnegie Mellon University Software Engineering Institute, discusses the security implications of this dramatic increase in the number of people in organizations who are

en

08:14

An Introduction to CMMC Assessment Guides

Software Engineering Institute (SEI) Podcast Series ·

2020/12/08

The Cybersecurity Maturity Model Certification (CMMC) 1.0 for Defense Industrial Base (DIB) suppliers defines specific cybersecurity practices across five levels of maturity while also measuring the degree to which those practices are institutionalized within an organization. The CMMC model draws on maturity processes and cybersecurity best practices from multiple standards, including the National Institute of Standards and Technology (NIST) frameworks and references, as well as input from DIB

en

13:45

The CMMC Level 3 Assessment Guide: A Closer Look

Software Engineering Institute (SEI) Podcast Series ·

2020/12/07

The Cybersecurity Maturity Model Certification (CMMC) 1.0 for Defense Industrial Base (DIB) suppliers defines specific cybersecurity practices across five levels of maturity while also measuring the degree to which those practices are institutionalized within an organization. The CMMC model draws on maturity processes and cybersecurity best practices from multiple standards, including the National Institute of Standards and Technology (NIST) frameworks and references, as well as input from DIB

en

20:37

The CMMC Level 1 Assessment Guide: A Closer Look

Software Engineering Institute (SEI) Podcast Series ·

2020/12/07

The Cybersecurity Maturity Model Certification (CMMC) 1.0 for Defense Industrial Base (DIB) suppliers defines specific cybersecurity practices across five levels of maturity while also measuring the degree to which those practices are institutionalized within an organization. The CMMC model draws on maturity processes and cybersecurity best practices from multiple standards, including the National Institute of Standards and Technology (NIST) frameworks and references, as well as input from DIB

en

33:29

Achieving Continuous Authority to Operate (ATO)

Software Engineering Institute (SEI) Podcast Series ·

2020/11/24

Authority to Operate (ATO) is a process that certifies a system to operate for a certain period of time by evaluating the risk of the system's security controls. ATO is based on the National Institute of Standards and Technology’s Risk Management Framework (NIST 800-37). In this podcast, Shane Ficorilli and Hasan Yasar, both with the Carnegie Mellon University Software Engineering Institute, discuss continuous ATO, including challenges, the role of DevSecOps, and cultural issues that organizations

en

16:51

Challenging the Myth of the 10x Programmer

Software Engineering Institute (SEI) Podcast Series ·

2020/11/09

A pervasive belief in software engineering is that some programmers are much, much better than others (the times-10, or 10x, programmer), and that the skills, abilities, and talents of these programmers exert an outsized influence on that organizations’ success or failure. Bill Nichols, a researcher with the Carnegie Mellon University Software Engineering Institute, recently examined the veracity and relevance of this widely held notion. Using data from a study conducted at the SEI, Nichols found

en

37:11

A Stakeholder-Specific Approach to Vulnerability...

Software Engineering Institute (SEI) Podcast Series ·

2020/10/27

Many organizations use the Common Vulnerability Scoring System (CVSS) to prioritize actions during vulnerability management. This podcast—which highlights the latest work in prioritizing actions during vulnerability management—presents a testable Stakeholder-Specific Vulnerability Categorization (SSVC) that avoids some problems with CVSS. SSVC takes the form of decision trees for different vulnerability management communities. During this podcast, CERT vulnerability researchers Eric Hatleback, Allen

en

09:17

Optimizing Process Maturity in CMMC Level 5

Software Engineering Institute (SEI) Podcast Series ·

2020/10/13

The Cybersecurity Maturity Model Certification (CMMC) 1.0 for Defense Industrial Base (DIB) suppliers defines specific cybersecurity practices across five levels of maturity while also measuring the degree to which those practices are institutionalized within an organization. The CMMC model draws on maturity processes and cybersecurity best practices from multiple standards, including the National Institute of Standards and Technology (NIST) frameworks and references, as well as input from DIB

en

13:13

Reviewing and Measuring Activities for Effectiveness...

Software Engineering Institute (SEI) Podcast Series ·

2020/10/07

The Cybersecurity Maturity Model Certification (CMMC) 1.0 for Defense Industrial Base (DIB) suppliers defines specific cybersecurity practices across five levels of maturity while also measuring the degree to which those practices are institutionalized within an organization. The CMMC model draws on maturity processes and cybersecurity best practices from multiple standards, including the National Institute of Standards and Technology (NIST) frameworks and references, as well as input from DIB

en

465 results

Similar Podcasts

The Everything Feed - All Packet Pushers Pods

Packet Pushers

HashrateUp - A Bitcoin Mining Podcast

Jesse

Новости Технологий

Meir Tsvi

The Bitcoin Boomers

Gary Leland, Bob Burnett, Lawrence...

Software Engineering Institute (SEI) Podcast Series

Members of Technical Staff at the...