Litcius/Paper detail

DevSecOps: A Security Model for Infrastructure as Code Over the Cloud

Amr Awad Ibrahim, Ahmed H. Yousef, Walaa Medhat

20222022 2nd International Mobile, Intelligent, and Ubiquitous Computing Conference (MIUCC)22 citationsDOI

Abstract

DevSecOps includes security practice while applying DevOps. DevSecOps help secure the whole DevOps process. This paper aims to define a DevSecOps module to be used by the infrastructure team while applying infrastructure as code. The proposed module solves the problem of security by including security practice with the DevOps cycle to reach DevSecOps. The module was tested to measure time effi-ciency. A small survey was created to test other DevSecOps metrics and enhance future work.

Topics & Concepts

DevOpsComputer scienceCloud computingProcess (computing)Computer securityMeasure (data warehouse)Code (set theory)Software security assuranceSoftware engineeringCloud computing securityDatabaseOperating systemProgramming languageSet (abstract data type)Cloud Data Security SolutionsCloud Computing and Resource ManagementBig Data and Business Intelligence