Software Engineering Institute (SEI) Webcast Series

This webinar proposed the Intelligence Preparation for Operational Resilience (IPOR) framework to create a model for structured analysis of your intelligence needs and a way to operationalize threat intelligence once you have received it. To build a structure to meet this end, the IPOR references and builds upon frameworks such as the military's Intelligence Preparation of the Battlefield process and the CERT® Resilience Management Model.

Chief Information Security Officers (CISOs) are increasingly finding that the tried-and-true, traditional information security strategies and functions are no longer adequate when dealing with today's increasingly expanding and dynamic cyber risk environment. Many opinions and publications express a wide range of functions that a CISO organization should be responsible for governing, managing, and performing. How does a CISO make sense of these functions and select the ones that are most applicable for their business mission, vision, and objectives?

This webinar describes a CISO organizational structure and functions for a typical large, diverse organization using input from CISOs, policies, frameworks, maturity models, standards, codes of practice, and lessons learned from major cybersecurity incidents.

The most precious resource people have in today's ever-connected world is their attention. Human interaction with information systems has continually shrunk from hours behind a terminal, to minutes interacting with a cell phone screen, to only 3–5 seconds glancing at a smart watch or wearable device. The key to making information immediately understood and actionable in the era of glance-able interaction is understanding context and, eventually, user intent. People inherently understand context. They naturally apply the context of a situation or conversation during everyday activities. Information systems, on the other hand, apply a user's context to the task at hand in very different ways. To improve the way that information systems use context, our research has focused on individual and group context supporting dismounted soldiers and first responders operating in edge environments. The goal of our research in context-enabled computing is to ensure that the right information is delivered to the right individual at the right time to ensure mission success. In this webinar, we will cover a wide variety of research activities associated with our efforts to better leverage context for information delivery and sensor tasking.

Cyber situational awareness is an emerging topic in network operations and defense, yet the overarching concept of situational awareness has been widely used and studied extensively for decades. During this webinar, we will • describe the foundations of cyber situational awareness • explore how to apply situational awareness concepts to the cyber domain • look at how network flow plays a critical part in gaining situational awareness over today's complex networks • introduce tools that can be used to collect and analyze network flow data • review examples that show the successful use of network flow to solve operational and security problems

The implementation of DevOps implies improvement across the entire scope of software delivery. However, as with any process change or introduction of new technology, lack of attention to security can invite disaster. In this presentation, we'll explore some of the security-related topics and expectations that can be addressed when planning and changing your process to accommodate DevOps practices. Specific topics will include automation, monitoring, team collaboration, customer interaction, and also specific technologies such as Docker and Guantlt.

SEI Chief Operating Officer, Robert F. Behler discusses Cyber-Vulnerabilities in Aviation Today.

Will Dormann discusses a tool that shows whether a connection to the web is secure and what information is being transmitted.

Rhiannon Weaver discusses how a small subset of features from dynamic malware analysis can help to uncover possible relationships among files and to direct static reverse engineering efforts.