Results 61 to 70 of about 2,003 (206)

Security in DevOps: understanding the most efficient way to integrate security in the agile software development process [PDF]

, 2020
Modern development methodologies follow a fast and dynamic pace, which gives great attention to customers’ satisfaction in the delivery of new releases.
Schicchi, Mirko
core  

Empirical evaluation of information security risk assessment framework GBM-OA [PDF]

, 2021
Importance of information security is rapidly increasing when new security breaches are continuously reported by companies and organizations. These breaches cause loss of confidentiality, reputation and revenue for companies and organizations.
Hytönen, Aleksi
core   +3 more sources

Analysis of Methods and Tools for Detecting Sensitive Information in Source Code: Issues of Accuracy and Completeness

Современные информационные технологии и IT-образование
In the context of widespread adoption of DevOps practices and increasing software system complexity, the issue of sensitive information leakage – such as API keys, passwords, and tokens – directly from source code and configuration files is becoming ...
Sergey Lebed, Sophiia Ibragimova
doaj   +1 more source

NEA GitLab: A centralised platform for development and deployment of nuclear codes and data [PDF]

EPJ Web of Conferences
The NEA Data Bank is an international reference centre for computer codes, nuclear and thermochemical data which has traditionally used simple file servers, and even DVDs, to deliver valuable content to end users across the globe.
Stainer Thomas, Fleming Michael, Holcomb Andrew, Ogawa Tatsuhiko, Valtavirta Ville, Foster David, Bailey Greg, Gilbert Mark   +7 more
doaj   +1 more source

Automated software security activities in a continuous delivery pipeline [PDF]

, 2021
Due to the rise of cyberattacks in IT companies, software security has become a topic for debate. Currently, to secure their products, companies often use manual methods, which makes development stalled and inefficient. To speed up a software development
Chalishhafshejani, Sohrab, Pham, Bao Khanh   +1 more
core   +1 more source

A DEVSECOPS APPROACH FOR DEVELOPING AND DEPLOYING CONTAINERIZED CLOUD-BASED SOFTWARE ON SUBMARINES [PDF]

, 2021
There are unique challenges for using secure cloud services in disconnected resource-constrained environments and with controlled data. To address those challenges, this thesis introduces a tactical-edge platform-as-a-service (PaaS) solution with a ...
Smith, Bridger A.
core  

Enhancing Secure Software Development with AZTRM-D: An AI-Integrated Approach Combining DevSecOps, Risk Management, and Zero Trust

Applied Sciences
This paper introduces the Automated Zero Trust Risk Management with DevSecOps Integration (AZTRM-D) framework, a novel approach that embeds security throughout the entire Secure Software and System Development Life Cycle (S-SDLC).
Ian Coston, Karl David Hezel, Eadan Plotnizky, Mehrdad Nojoumian   +3 more
doaj   +1 more source

Propuesta de una Metodología basada en DevSecOps y SCRUM para el desarrollo de Software con Calidad.

Innovación y Software
La colaboración en equipos de desarrollo de software a menudo necesita una buena gestión de las actividades; con la aplicación de metodologías ágiles es posible administrar los cambios, sin embargo, una cultura de colaboración transversal en la ...
Itzel Xochitototl Cote, José Juan Hernández Mora, María Guadalupe Medina Barrera, Elizabeth Cuatecontzi Cuahutle, Juan Ramos Ramos   +4 more
doaj   +1 more source

Enhancing DevOps Continuous Monitoring Phase: Hybrid Intrusion Detection and Ensemble Learning System (HIDELS)

IEEE Access
Companies are excited to maintain high-quality software while reducing the costs of production. DevOps is a contemporary software development life cycle paradigm in which development and operations teams join together during all stages of software ...
Jafar Ababneh, Esam Y. A. Al-Nsour, Ala'A Al-Shaikh, Mohammad Rasmi Al-Mousa, Ahmad Al-Zabin, Mahmoud Asassfeh, Hasan Abualese   +6 more
doaj   +1 more source

D2.3 - PIACERE DevSecOps Framework - v1

, 2022
This deliverable will integrate all the components developed by the other technical WPs in the PIACERE DevSecOps Framework. Different versions of the PIACERE DevSecOps Framework will be provided following an incremental approach. The first version will be an initial prototype with the core functionalities implemented; the second version will augment ...
openaire   +1 more source