cert.orgThe CERT Division | Software Engineering Institute

search menu icon-carat-right cmu-wordmark ✕ About Leadership Divisions Work with Us Collaboration with CMU History of Innovation at the SEI Our Work Agile Artificial Intelligence Engineering Cyber Workforce Development Cybersecurity Center Development Cybersecurity Engineering DevSecOps Enterprise Risk and Resilience Management All Topics All Projects Publications Annual Reviews Blog Digital Library Podcast Series Software and Tools Technical Papers Vulnerability Notes Database Webinar Series News and Events News Events SEI Bulletin Education and Outreach Courses Credentials Curricula License SEI Materials Careers Job Openings Diversity, Equity and Inclusion Internship Opportunities Working at the SEI Carnegie Mellon University Software Engineering Institute About Leadership Divisions Work with Us Collaboration with CMU History of Innovation at the SEI Our Work Agile Artificial Intelligence Engineering Cyber Workforce Development Cybersecurity Center Development Cybersecurity Engineering DevSecOps Enterprise Risk and Resilience Management All Topics All Projects Publications Annual Reviews Blog Digital Library Podcast Series Software and Tools Technical Papers Vulnerability Notes Database Webinar Series News and Events News Events SEI Bulletin Education and Outreach Courses Credentials Curricula License SEI Materials Careers Job Openings Diversity, Equity and Inclusion Internship Opportunities Working at the SEI News FloCon 2021 Announces Program on Using Data to Defend -- Read more News SEI Releases OCTAVE FORTE Model for Enterprise Risk Management -- Read more News CERT Division Research Supports National Cybersecurity Awareness Month -- Read More News CERT Symposium to Explore Insider Risk Management -- Read More News Building the Cybersecurity Maturity Model Certification -- Read More Previous Next SEI About Divisions The CERT Division The CERT Division The CERT Division is a leader in cybersecurity. We partner with government, industry, law enforcement, and academia to improve the security and resilience of computer systems and networks. We study problems that have widespread cybersecurity implications and develop advanced methods and tools to counter large-scale, sophisticated cyber threats. What We Do Recent Vulnerabilities Case Studies History Leadership What We Do CERT experts are a diverse group of researchers, software engineers, security analysts, and digital intelligence specialists working together to research security vulnerabilities in software products, contribute to long-term changes in networked systems, and develop cutting-edge information and training to improve the practice of cybersecurity. Our connection to the internationally known Carnegie Mellon University creates multidisciplinary collaboration opportunities and amplifies our research abilities. Learn More Autonomy Security and Resilience Develop and sustain security, resilience, and assurance best practices for the development, construction, and employment of machine learning systems. Cyber Center Development Develop measurable and repeatable practices to prepare CSIRTS and other operational security organizations Cyber Intelligence Study and describe the behaviors and capabilities of cyber attackers and identify the properties of their methods Cyber Workforce Development Develop and maintain a well-equipped cyber workforce that is immediately able to support the cybersecurity needs of organizations Digital Forensics Enable and improve incident response and analysis practices used by organizations as the technology landscape and sophistication of adversaries evolve Enterprise Risk Management Develop measurable practices and frameworks that enable organizations to measure and mitigate risks Insider Threat Detect and mitigate the impact of insider threats and reduce their occurrence in organizations Network Situational Awareness Analyze the cyber terrain as it evolves to characterize assets at risk, measure adversary activity, and prioritize responses to threat Security-Aware Acquisition Address vulnerabilities and plan for threats earlier and more effectively in the acquisition lifecycle Secure Development Assess platforms through the analysis of source code to assure they adhere to security best practices System and Platform Evaluation Assess software, devices, systems, and platforms of unknown design or origin to find vulnerabilities and strategies for defending against possible attacks Threat-Aware Sustainment Reduce exposure to known vulnerabilities in systems Recently Published Vulnerabilities VU#815128: Embedded TCP/IP stacks have memory corruption vulnerabilities December 14, 2020 VU#724367: VMware Workspace ONE Access and related components are vulnerable to command injection December 08, 2020 VU#231329: Replay Protected Memory Block (RPMB) protocol does not adequately defend against replay attacks November 16, 2020 More Vulnerabilities Report a Vulnerability A Twitter list by Tweets Case Studies Cyber Lightning Case Study The SEI hosted Cyber Lightning, a three-day joint training exercise involving Air National Guard and Air Force Reserve units from western Pennsylvania and eastern Ohio. Learn More SEI Hosts Crisis Simulation Exercise for Cyber Intelligence Research Consortium In SEI crisis simulation exercises, participants use scenarios that present fictitious malicious actors and environmental factors based on real-world events. Learn More USPS Case Study The SEI teamed with the U.S. Postal Service to help it improve its cybersecurity and resilience and collaborated on a program to develop a strong cybersecurity workforce. Learn More History The CERT Division is the birthplace of cybersecurity. For nearly 30 years, the CERT Division of the SEI has partnered with government, industry, law enforcement, and academia to advance cybersecurity and improve the security and resilience of computer systems and networks. Originally focused on incident response, we have expanded into cybersecurity areas such as network situational awareness, malicious code analysis, secure coding, resilience management, insider threats, digital investigations and intelligence, workforce development, DevOps, forensics, software assurance, vulnerability discovery and analysis, and risk management. Barbara Fraser and Ed DeHart, part of the SEI’s CERT/CC in the early 1990s Former Director Richard Pethia Richard Pethia was founding director of the SEI's CERT Division. Pethia, who served as director of CERT from 1988 to 2016, guided the organization through tremendous growth and change. Under Pethia's leadership, the unit expanded and evolved from the CERT Coordination Center—a small group focused on computer incident response—to a research organization of more than 200 professionals dedicated to solving problems with widespread cybersecurity implications. SEE FULL PROFILE Leadership William Wilson Acting Director, CERT Division Greg Shannon Chief Scientist Related Links CERT Podcast Series CERT/CC Blog Series Computer Security Incident Response Teams FloCon Insider Threat Blog Series Insider Threat Symposium NatCSIRT Meeting Vulnerability Database Report a Vulnerability to CERT/CC Subscribe to SEI Bulletin Request Permission to Use SEI Materials Carnegie Mellon University Software Engineering Institute 4500 Fifth Avenue Pittsburgh, PA 15213-2612 412-268-5800 Contact Us Office Locations Additional Sites Directory Legal Privacy Notice CMU Ethics Hotline www.sei.cmu.edu &COPY2020 Carnegie Mellon University...