

Software Engineering Institute (SEI) Podcast Series
Members of Technical Staff at the Software Engineering Institute
The SEI Podcast Series presents conversations in software engineering, cybersecurity, and future technologies.
Episodes
Mentioned books

May 26, 2009 • 20min
More Targeted, Sophisticated Attacks: Where to Pay Attention
Business leaders need to take action to better mitigate sophisticated social engineering attacks. Listen on Apple Podcasts.

May 5, 2009 • 20min
Is There Value in Identifying Software Security "Never Events?"
Now may be the time to examine our responsibilities when developing software with known, preventable errors - along with some possible consequences. Listen on Apple Podcasts.

Apr 14, 2009 • 20min
Cyber Security, Safety, and Ethics for the Net Generation
Capitalizing on the cultural norms of the Net Generation is essential when developing security awareness programs. Listen on Apple Podcasts.

Mar 31, 2009 • 22min
An Experience-Based Maturity Model for Software Security
Observed practice, represented as a maturity model, can serve as a basis for developing more secure software. Listen on Apple Podcasts.

Mar 17, 2009 • 20min
Mainstreaming Secure Coding Practices
Requiring secure coding practices when building or buying software can dramatically reduce vulnerabilities. Related Course Secure Coding in C and C++ Listen on Apple Podcasts.

Mar 3, 2009 • 24min
Security: A Key Enabler of Business Innovation
Making security strategic to business innovation involves seven strategies and calculating risk-reward based on risk appetite. Related Courses Assessing Information Security Risk Using the OCTAVE Approach Introduction to the CERT Resiliency Engineering Framework Listen on Apple Podcasts.

Feb 17, 2009 • 23min
Better Incident Response Through Scenario Based Training
Teams are better prepared to respond to incidents if realistic, hands-on training is part of their normal routine. Related Courses Advanced Incident Handling Advanced Information Security for Technical Staff Listen on Apple Podcasts.

Feb 3, 2009 • 26min
An Alternative to Risk Management for Information and Software Security
Standard, compliance, and process are more effective than risk management for ensuring an adequate level of information and software security. Related Course Assessing Information Security Risk Using the OCTAVE Approach Listen on Apple Podcasts.

Jan 20, 2009 • 18min
Tackling Tough Challenges: Insights from CERT's Director Rich Pethia
Rich Pethia reflects on CERT's 20-year history and discusses how he is positioning the program to tackle future IT and security challenges. Listen on Apple Podcasts.

Dec 9, 2008 • 24min
Climate Change: Implications for Information Technology and Security
Climate change requires new strategies for dealing with traditional IT and information security risks. Listen on Apple Podcasts.


