The framework identifies the 37 most impactful cybersecurity research opportunities across national security missions and systems.
Hutchison, S. (2021, August 9). DNS Over HTTPS: 3 Strategies for Enterprise Security Monitoring. Retrieved September 30, 2026, from https://www.sei.cmu.edu/blog/dns ...
Scherlis, B. (2024, August 5). Weaknesses and Vulnerabilities in Modern AI: Integrity, Confidentiality, and Governance. Retrieved September 30, 2026, from https://doi ...
CERT Insider Threat Center, T. (2011, June 27). Insider Threat Deep Dive: Theft of Intellectual Property. Retrieved September 30, 2026, from https://www.sei.cmu.edu ...
Petrilli, A., & Lau, S. (2019, December 12). Measuring Resilience in Artificial Intelligence and Machine Learning Systems. Retrieved September 30, 2026, from https ...
Venneti, S. (2018, January 15). Revealing True Emotions Through Micro-Expressions: A Machine Learning Approach. Retrieved September 30, 2026, from https://www.sei.cmu ...
Moniz, J. (2018, October 18). Is Compliance Compromising Your Information Security Culture?. Retrieved September 30, 2026, from https://www.sei.cmu.edu/blog/is ...
Scanlon, T. (2021, October 4). The Role of DevSecOps in Continuous Authority to Operate. Retrieved September 30, 2026, from https://www.sei.cmu.edu/blog/the-role-of ...
Horneman, A. (2016, November 2). The Dyn Attack: Who Participated? Who Was Impacted?. Retrieved September 30, 2026, from https://www.sei.cmu.edu/blog/the-dyn-attack ...
French, D. (2012, November 12). Writing Effective YARA Signatures to Identify Malware. Retrieved September 30, 2026, from https://www.sei.cmu.edu/blog/writing ...
Tucker, B. (2020, December 7). 10 Steps for Managing Risk: OCTAVE FORTE. Retrieved September 30, 2026, from https://www.sei.cmu.edu/blog/10-steps-managing-risk-octave ...
Executive Order 13587 requires federal agencies that operate or access classified computer networks to implement an insider threat detection and prevention program. Proposed changes to the National ...