This is a web hosted application that uses malware reports to create security requirements for software development projects. SERF uses the CWE™ to capture weaknesses and generate requirements.

More information about the project's research is available at CERT website

The Report Writer and SERF User Guides and Admin Guides are also available at the SEI website

Common Weakness Enumeration (CWE) is a trademark of the MITRE Corporation. MITRE CWE

To deploy SERF and ReportWriter, see Deploy/Deploy_Guide.pdf for detailed instructions