Physics-Based Modeling Researcher - Biomedical

Riverside Research and Kitware, Inc. strengthen Secure deployment of software updates across complex software ecosystems. Oct 01, 2026, 10:40 AM ET WASHINGTON, Oct. 1, 2026 /PRNewswire/ - Riverside Research, a defense technology nonprofit focusing on intelligence, announced a collaboration with Kitware, Inc., a custom software and AI developer, to develop capabilities that enable organizations to securely and reliably deploy software patches and updates for fielded software inventories. Modern software products often incorporate hundreds or thousands of third-party software components, creating complex dependency networks that can make vulnerability remediation exceptionally challenging. In many cases, updating a critical software component is comparable to replacing a faulty engine part while a vehicle is traveling at highway speeds, requiring precision, reliability, and minimal disruption to ongoing operations. One of the world's most widely used software build tools, CMake, manages software inventories by defining software components and their dependencies. Through this collaboration, Riverside Research and Kitware enhanced CMake with native software inventory capabilities that embed critical metadata directly within those inventories. Riverside Research has developed tools that enable fielded system maintainers to leverage this embedded metadata, improving their ability to identify, update, and repair software systems while maintaining operational continuity. This contrasts with existing approaches to software inventory management, which rely on external scanning tools, self-reporting practices, or a combination of the two. Depending on external tools or providers introduces potential ambiguities and limits coverage. "Software developers have long relied on CMake as the authoritative source for defining how applications are built and how their dependencies fit together," said Bill Hoffman, co-founder of Kitware and lead architect of CMake. "By integrating software inventory generation directly into the build system, we're making that same trusted information available for security, maintenance, and risk management activities. Our collaboration with Riverside Research helps ensure organizations can understand and maintain increasingly complex software ecosystems with greater accuracy, confidence, and efficiency." How Riverside Research and Kitware Create More Accurate Cyber Risk Tracking in CMake Riverside Research and Kitware's integration of software inventory generation directly into CMake allows organizations across government and industry to more accurately track their cyber risk, reducing the likelihood and impact of crippling attacks on the nation's software supply chain, a known national security risk that the federal government continually mitigates. Embedding software inventories directly into the build itself provides: * Authoritative dependency modeling * Deterministic output tied to configuration * Continuous Integration -friendly automation * Reproducible results "CMake's adoption of software inventories marks a significant step toward improving software security and visibility for millions of C++ developers," said Dr. Gordon Stewart, Associate Director of Secure and Resilient Systems at Riverside Research. "We are excited by this partnership with Kitware and look forward to the further impact of E-BOSS technologies." CMake Enhancements Result of Defense Advanced Research Projects Agency (DARPA) Funding The companies developed this CMake enhancement with funding from DARPA under the Enhanced Software Bill of Materials (SBOM) for the Optimized Software Sustainment (E-BOSS) program. DARPA's development initiatives answer recent federal guidance, which emphasizes flexible, risk-based approaches to software and hardware assurance, enabling agencies to tailor security practices to mission needs. Within such frameworks, CMake's software inventories support risk-informed decision-making, enabling agencies to manage their cyber risk without undue compliance overhead. CMake's native software inventories give organizations access to advanced software supply-chain capabilities without additional tooling or setup, providing flexibility to apply cyber risk reduction strategies according to agency operational and security needs. Projected Impact of CMake Improvements The E-BOSS program advances technologies that improve how software systems are understood, maintained, and secured over time. Future work will aim to enable seamless integration of E-BOSS performer technologies into the software inventories now provided natively by CMake, working to streamline the adoption of E-BOSS rapid vulnerability triage and remediation across government and industry. Other ongoing work includes richer metadata modeling, improved handling of transitive dependencies, enhanced license reporting, and tighter integration with packaging and CI workflows. About Riverside Research Riverside Research is a national security nonprofit serving the DOW and Intelligence Community. Through the company's Open Innovation Center (OIC), they invest in multidisciplinary research and development and encourages collaboration. Riverside Research's areas of expertise include Object and Activity Detection; Accelerated AI/ML; Zero Trust; Open Architectures; Computational Electromagnetics; Plasma Physics; Precision Timing; Terahertz Imaging; Commercial Intelligence, Surveillance, and Reconnaissance (ISR); Collection Planning; and more. Learn more at www.riversideresearch.org. About Kitware, Inc. Kitware advances science and technology to make a meaningful difference in the world. They deliver high-impact software solutions built on open-source foundations, combining deep technical expertise with a collaborative, people-first approach. Trusted by commercial, government, and academic organizations, Kitware partners closely with customers to understand their goals and integrate robust, sustainable technology into real-world scenarios. They build solutions that endure by prioritizing transparency, long-term value, and positive impact. Founded in 1998, Kitware is 100% employee-owned. Visit them at kitware.com or on Twitter, LinkedIn, and YouTube. SOURCE RIVERSIDE RESEARCH NOTE: This content is not written by or endorsed by "KSWB", its advertisers, or Nexstar Media Inc.

Kitware achieves CMMC Level 2 assessment, reinforcing commitment to secure software development. October 1, 2026 This certification demonstrates Kitware's commitment to protecting Controlled Unclassified Information (CUI) and supporting the cybersecurity requirements of the Defense Industrial Base. Clifton Park, NY - October 1, 2026 - Kitware, a leader in software R&D and advanced AI, has achieved CMMC Level 2 (C3PAO) certification, reinforcing the company's commitment to protecting Controlled Unclassified Information (CUI) and supporting the cybersecurity requirements of the U.S. Department of War (DoW). The CMMC Program validates compliance with rigorous cybersecurity requirements for organizations that develop technologies or handle sensitive information on behalf of the Department of War. As cyber threats targeting defense agencies continue to grow in both frequency and sophistication, CMMC provides assurance that contractors have implemented and maintain the security controls necessary to safeguard Controlled Unclassified Information. Kitware officially received its CMMC Level 2 certification on June 24, 2026, following a comprehensive independent assessment by a C3PAO. At the time, only about 2% of eligible organizations had successfully achieved CMMC Level 2 (C3PAO) certification, making Kitware part of a select group of organizations recognized for meeting the DoW's rigorous cybersecurity requirements. "Achieving CMMC Level 2 certification reflects years of investment in secure processes and protecting sensitive information for our government customers," said Lisa Avila, CEO and co-founder of Kitware. "For a software R&D company of our size, this accomplishment demonstrates that we can deliver innovative software solutions while meeting some of the highest cybersecurity standards required by the DoW." Although the CMMC Phase 2 (C3PAO) certification requirement has been temporarily paused, securely managing CUI remains a critical factor for organizations supporting DoW programs. By proactively achieving certification, Kitware demonstrates both the maturity of its cybersecurity program and its readiness to support customers with demanding security and compliance requirements. About kitware. Kitware advances science and technology to make a meaningful difference in the world. CMake Feabhas Limited deliver high-impact software solutions built on open source foundations, combining deep technical expertise with a collaborative, people-first approach. Trusted by commercial, government, and academic organizations, Kitware partners closely with customers to understand their goals and integrate robust, sustainable technology into real-world scenarios. CMake Feabhas Limited build solutions that endure by prioritizing transparency, long-term value, and positive impact. Founded in 1998, Kitware is 100% employee-owned. Visit CMake Feabhas Limited at kitware.com or on Twitter, LinkedIn, and YouTube.

Kitware and UNC collaborate on robotic stroke care project with ARPA-H funding. UNC School of Medicine announced on Sep. 3 a collaboration with Kitware and several universities to advance robotic stroke care, supported by up to $17.5 million in funding from the Advanced Research Projects Agency for Health (ARPA-H). The initiative, called the Testbed for Autonomous Interventions and Robotics (AIR), aims to develop an open-source virtual testing platform for robotic interventions in endovascular stroke treatment. The project brings together researchers from Kitware, UNC School of Medicine, Johns Hopkins University, University of North Carolina, University of Pittsburgh, Florida State University, and Lightside Surgical, Inc. The funding will be used to create a simulation environment designed to test and evaluate robotic algorithms that assist with minimally invasive procedures inside the brain's blood vessels. Yueh Lee, MD, PhD, professor of radiology at UNC School of Medicine and clinical lead for the project, said this simulation software is expected to accelerate development of robotic tools that could improve access and expedite care for patients experiencing strokes or other brain blood vessel disorders. "That's one of the reasons we are excited to help develop open-source software tools to reduce barriers to entry," said Lee. "More importantly, this will help accelerate the development of these tools, which could substantially expand access to stroke thrombectomy for patients. Imagine a robot that could perform the procedure at any hospital without requiring the patient to be transferred to a major medical center." James Ho, MD, assistant professor of neurology and director of UNC Medical Center's Comprehensive Stroke Center as well as co-investigator on the project, said: "A stroke occurs when there is a blockage of the blood vessels in the brain, usually from a blood clot. The longer that blood clot stays in place, the more brain tissue loses oxygen and nutrients it needs to survive. It's estimated that every minute during a stroke nearly 2 million brain cells die... This has made a huge impact on patients." Ho added that timely access remains challenging because only highly trained specialists can perform these interventions: "This project has the potential to enhance a Neurointerventionalist's ability to take care of patients regardless of where they had their stroke." The team will work with faculty at other institutions such as University of Pittsburgh who will contribute data supporting digital intervention testing. Lee said this effort builds upon strong clinical care provided by UNC Hospitals Comprehensive Stroke Center as well as its commitment toward high-quality imaging and neurovascular research. A statement accompanying the announcement noted: "This research is funded in part by ARPA-H... The views and conclusions contained in this document are those of the authors and should not be interpreted as representing official policies...of the U.S. Government."