Revisit security in the era of DevOps: An evidence‐based inquiry into DevSecOps industry [PDF]
IET Software, 2023 By adopting agile and lean practices, DevOps aims to achieve rapid value delivery by speeding up development and deployment cycles, which however lead to more security concerns that cannot be fully addressed by an isolated security role only in the final
Xin Zhou +7 more
doaj +3 more sources
The Test Pyramid 2.0: AI-assisted testing across the pyramid. [PDF]
Front Artif IntellEnsuring robust test coverage, high code quality, and a strong security posture are persistent challenges in modern industrial software development, especially as systems grow in complexity and release cycles accelerate with recent Artificial ...
Desai P, Singh S, Amilkanthwar S.
europepmc +2 more sources
Quantitative DevSecOps Metrics for Cloud-Based Web Microservices
IEEE AccessThe widespread adoption of Cloud-Based Web Microservices (CBWMs) and DevSecOps (Development, Security, and Operations) methodologies has significantly improved modern software development, particularly regarding scalability, agility, and security ...
Jin Yu Zhang
exaly +3 more sources
Factors influencing the adoption of secure software engineering practices in pre-adoption and post-adoption phases. [PDF]
Sci RepSecure software engineering (SSE) is inevitably linked to DevSecOps which aims to embed security at every phase of the software development life cycle.
Mihelič A, Hovelja T, Vrhovec S.
europepmc +2 more sources
AEJ - Alexandria Engineering JournalAutomated, secure software development is an important digitalization task, solved with the DevSecOps approach. An important part of the DevSecOps approach is continuous risk assessment, which is necessary to identify and evaluate risk factors. Combining
Tamara Radivilova +1 more
exaly +3 more sources
Powerful authentication regime applicable to naval OFP integrated development (PARANOID): a vision for non-circumventable code signing and traceability for embedded avionics software [PDF]
Journal of Defense Analytics and Logistics, 2021 Purpose – This paper aims to describe an effort to provide for a robust and secure software development paradigm intended to support DevSecOps in a naval aviation enterprise (NAE) software support activity (SSA), with said paradigm supporting strong ...
Joe Garcia +5 more
doaj +1 more source
ВИКОРИСТАННЯ ПІДХОДУ DEVSECOPS ДЛЯ АНАЛІЗУ СУЧАСНИХ ЗАГРОЗ ІНФОРМАЦІЙНОЇ БЕЗПЕКИ
Кібербезпека: освіта, наука, техніка, 2021 У даній статті подано дослідження використання підходу DevSecOps для аналізу сучасних загроз. Визначення методології для реалізації та адаптації DevSecOps підходу.
Vitalii Susukailo
doaj +1 more source
АНАЛІЗ МЕТОДОЛОГІЇ DEVSECOPS В ПРОЦЕСАХ РОЗРОБКИ ПРОГРАМНОГО ЗАБЕЗПЕЧЕННЯ
Вісник Національного технічного університету "ХПÌ": Системний аналіз, управління та інформаційні технології, 2020 Предметом дослідження в статті є методологія розробки і захисту програмного забезпечення в рамках DevSecOps. Дана методологія змінила підхід до забезпечення безпеки з реактивного на проактивний, а також підкреслює важливість забезпечення безпеки на всіх ...
Andrii Oleksandrovich Hapon +4 more
doaj +1 more source
INTEGRACIÓN Y DESPLIEGUE CONTINUO CON DEVOPS COMO CULTURA EN EMPRESAS DEL SECTOR TI COLOMBIANAS
Revista Ingeniería, Matemáticas y Ciencias de la Información, 2023 Continuous integration and deployment are practices that have allowed the software development cycle to behave in amore agile way, thanks to the fact that they constantly provide the possibility of automating processes in order to improvetimes and ...
Gilberth Nick Cruz González +1 more
doaj +1 more source
Context-Aware Software Vulnerability Classification Using Machine Learning
IEEE Access, 2021 Managing the vulnerabilities reported by a number of security scanning software is a tedious and time-consuming task, especially in large-scale, modern communication networks.
Grzegorz Siewruk, Wojciech Mazurczyk
doaj +1 more source