Software Intensive Systems Engineering

With the increasing rate of security breaches, today’s applications need to be built more securely at the code level, and that code needs to be tested regularly. The Software Assurance Marketplace was developed to make it easier to consistently test the quality and security of applications and bring a transformative change to the software assurance…

Learn how encryption is used to provide electronic credentials. This short video explains digital certificates and how they are issued. This is part 2 of a 3 part series on the topic of encryption.

CSIAC provides hardcopies of technical journals and other products to the community. Most publications are free and only require shipping and handling fees.

CSIAC provides up to four hours of FREE technical research and analysis to answer users’ most pressing technical questions. Learn more and submit a technical inquiry.

CSIAC.org group members can discuss technical topics and ask questions in the Group Forums. It is one way a CSIAC.org member can contribute to the community of practice.

This video shows you how to create an account and explains some of the benefits of having an account on CSIAC.org

Do you want a record of all the CSIAC webinars you have attended? This short video shows you how.

The DoD has outlined a Strategic Vision and goals for DoD Modeling and Simulation (M&S). One of the goals is to "Promote the sharing of tools, data, and information across the DoD Enterprise," to enable reuse and interoperability of models, simulations, and associated data. Providing visibility into the Modeling & Simulation (M&S) resources across the…

Learn the basics about what encryption is and how it works. This short video describes symmetric and asymmetric encryption. This is part 1 of a 3 part series on the topic of encryption.

Embedded devices are increasingly connected to network resources for additional functionality with the ultimate goal of greater mission capability. Recently, security of connected devices is being scrutinized with highly publicized vulnerabilities of various consumer devices. While several domains are starting to publish new guidelines for cybersecurity there is not a standardized risk assessment framework for…

This webinar covers the realities of the Enterprise Mission Assurance Support Service (eMASS): what works well, what does not work, and how to best make it work for you. The webinar discusses how to categorize your system, select applicable controls, and leverage eMASS to assist in this process. Two specific topics that are covered are how inheritance works in eMASS (and does not work) and the tricky business of uploading STIGs/CKLs (and the painful lessons associated with doing it the wrong way). For those attending who don't have eMASS access but will have systems being added to eMASS in the future, we discuss how to best prepare your system for import into eMASS. There are some tricks to the trade that will make life easier for everyone on the project!

This webinar highlights recent success in demonstrating substantial improvements in the accuracy under control-flow and data-oriented attacks in Linux, including malicious code reuse, security bypass, and service abuse. The webinar also describes exciting future research directions on hardware-assisted fast tracing, anomaly-detection as a service, supporting domain experts for inter-disciplinary anomaly discovery, and standardizing evaluation.

What is the difference between a Virus, a Worm, and a Trojan? Don't know? Find out in this short video.

Incorporating security into the design of components used in the Internet of Things (IoT) is essential for securing the cyber-physical infrastructure upon which society depends. This webinar presents the challenges involved in securing IoT components and provides possible solutions by drawing inspiration from the past.