Software Engineering Institute (SEI) Webcast Series

In this webinar, we discuss topics to consider when planning a large modernization project and share mitigation strategies for executing the modernization effort.

This webinar describes some of the issues involved in automating the collection and analysis of malware, which has seen exponential growth over the past decade.

For different reasons, usability is generally an afterthought in the cybersecurity tool development process. In this webinar, we teach the audience the value of defining the problem and how this impacts the software quality outcomes.

In this webinar, we discussed how you can improve your organization's secure coding capabilities and how to improve your workforce, processes, and tools to develop and verify the security of your software before it is deployed.

Over the past few years, there has been a veritable explosion of hiring in the field of data science. Just ten years ago, the phrase data scientist was almost unheard of; nowadays, data scientist positions are advertised across numerous industries, with a particular focus on high tech. What is this position and why is it relevant? In this webinar, we discussed this position from a number of angles—what the term "data science" means, what skills a data scientist brings to the table, what competitive edge data science can bring to your team, and the differences between data science and business analysis. We also discussed a number of case studies that describe how data science can be integrated into existing businesses as well as how to best make use of data scientists' skills.

Learn why secure coding practices are important to reduce common programming errors that lead to vulnerabilities.

Learn the importance of developing security requirements in the same time frame as functional requirements.

Learn how to better identify process improvements at your organization through new perspectives on secure software development and delivery.

Learn how to develop a vulnerability coordination capability, which helps you respond to vulnerabilities and demonstrates that you are serious about fixing them.

Last summer's Wired article describing vulnerabilities in the Jeep shows that software is being created and deployed with exploitable, yet avoidable, security flaws. So far, the automotive attacks have been largely demonstrations. However, successful cyber-attacks have been carried out on steel furnaces in Germany and the electrical grid in Ukraine. Insecurely written software in cyber-physical systems places people and property in jeopardy. Fortunately, there are many techniques available to those building software for cyber physical systems that can greatly reduce their vulnerability. This talk starts with an in-depth review of the Jeep scenario. It then examines how security can be introduced throughout the software development lifecycle to blunt such vulnerabilities.