SEI Insights
Have you ever been developing or acquiring a system and said to yourself, I can't be the first architect to design this type of system. How can I tap into the architecture knowledge that already exists in this domain? If so, you might be looking for a reference architecture. A reference architecture describes a family of similar systems and standardizes nomenclature, defines key solution elements and relationships among them, collects relevant solution patterns, and provides...
By on in Insider Threat
The sixth practice described in the newly released edition of the Common Sense Guide to Mitigating Insider Threats is Practice 6: Consider threats from insiders and business partners in enterprise-wide risk assessments. In this post, I discuss the importance of developing a comprehensive, risk-based security strategy to prevent, detect, and respond to insider threats, including those caused by business partners that are given authorized access....
Longtime SATURN participant Eltjo Poort has posted a summary of SATURN 2017 on his blog. Eltjo was the winner of the inaugural Linda Northrop Software Architecture Award in 2016. "This was my fifth SATURN conference," writes Poort, "and just like the previous years I returned home full of new ideas and inspiration, and with many useful new contacts. I am already looking forward to the 2018 edition in Plano, TX." Read the whole thing....
When it comes to network traffic, it's important to establish a filtering process that identifies and blocks potential cyberattacks, such as worms spreading ransomware and intruders exploiting vulnerabilities, while permitting the flow of legitimate traffic. In this post, the latest in a series on best practices for network security, I explore best practices for network border protection at the Internet router and firewall....
By on in Insider Threat
The fifth practice described in the newly released edition of the Common Sense Guide to Mitigating Insider Threats is Practice 5: Anticipate and manage negative issues in the work environment. In this post, I discuss the importance of understanding organizational issues that may cause employee disgruntlement, being proactive, and identifying and responding to concerning behaviors in the workplace....
Since 2010, the SEI and IEEE have been conferring two attendee-selected awards at SATURN. The IEEE Software SATURN Architecture in Practice Presentation Award is given to the presentation that best describes experiences, methods, and lessons learned from the implementation of software architecture practices. This year's award winner was Sebastian von Conrad of Envato for his presentation titled An In-Depth Look at Event Sourcing with Command Query Responsibility Segregation (CQRS). See presentation slides in PDF here....
Technical Guidelines and practical advice for DevOps. Posts cover issues relating to understanding and achieving successful DevOps including cultural shifts, barriers to collaboration, continuous integration, continuous deployment, and automation.
SubscribeAdvice and best practices for organizations wanting to help better deter, detect, and respond to evolving insider threats.
The SEI Architecture Technology User Network’s blog covers topics relating to software architecture and connects the professional network of software, systems, and enterprise architects from around the world, representing industry, academia, and government.
Ongoing and exploratory research on topics that include secure coding, malware analysis, testing, organizational planning, agile software development, big data, quality assurance, cloud computing, and software sustainment across the lifecycle.
Subscribe
Phone: 412-268-5800
Toll Free: 888-201-4479
Fax: 412-268-6257
4500 Fifth Avenue
Pittsburgh, PA 15213-2612
U.S.A.
CERT/CC
Insider Threat
SATURN
SEI Blog
DevOps
CERT/CC
Insider Threat
SATURN
SEI Blog
DevOps
SEI Digital Library
SEI Podcast Series
SEI Webinar Series
SEI Overview
Director's Message
Our Organization
Our People
Year in Review
Terms of Use
Posted on by
Have you ever been developing or acquiring a system and said to yourself, I can't be the first architect to design this type of system. How can I tap into the architecture knowledge that already exists in this domain? If...
CERT/CC
Timely insights about vulnerabilities, network situational awareness, and research in the security field offered by CERT Division researchers.