No, it said CMU Software Engineering Institute got that money, not CERT.org
It still seems like a huge amount of money, but at least it's plausible. Research grants, things like that I assume.
Ah, so it does. Many thanks. Whew!
SEI gets ~$1.8B/year from DHS. I doubt that's all for CERT.
No, it's more like 150mm per year from the DoD. the 1.8B number makes sense if you are talking about a decade worth of funding. They also get some funding from private industry.
Seems like not many people from the FFRDC community read or post on HN.
https://ncsesdata.nsf.gov/datatables/ffrdcrd/2016/html/FFRDC...
CERT is by far the largest 'department' in the SEI. I'm not sure exactly by what margin, but they probably account for over 50% of the SEI.
Also the funding model isn't quite that straightforward. As an FFRDC they receive a certain static amount every year (in the low millions) as some kind of federal grant. Everything else is income from customer work like you'd find at any other contractor. In terms of revenue, most of the big bucks probably come from DoD and not DHS.
Also, the 1.8b was a maximum value, not a minimum or guaranteed spend.
Re:RIP Cert.org
by blackbagboys on Sunday March 04, 2018 @07:38PM
(#16517814)
That's $1.8b for the Software Engineering Institute, which does a lot of federal contracting work.
In the article, it says CERT.org costs $1.8B/y. How is that possible? That sounds bogus to me -- the article doesn't link to the full FOIA response, so it's hard to fact-check. The 2008 budget apparently earmarked $242M for CERT <http://www.zdnet.com/article/federal-budget-recommends-us-ce.... Anyone have more links to factcheck this statement?