Component Analysis of DevOps and DevSecOps
0
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
This paper is analyzed of the characteristics of development operations and development security operations of the software and product, and the use analysis tools from a software code perspective. Also, it is emphasized the importance of human factors and the need to strengthen them, when considering security design rules. In this paper, we consider a secure process for managing change, focusing on fast and accurate decision-making in terms of procedural factors, when considering development security operations. In addition, the paper discussed the need for maturity model analysis in relation to the development security operating characteristics, and analyzed the meaning of the analysis elements through detailed procedures for the strength and integration elements of the dynamic and static elements accordingly. The paper also analyzed factors such as scanning activity and code analysis for threat modeling and compliance and control.
Abstract
This paper is analyzed of the characteristics of development operations and development security operations of the software and product, and the use analysis tools from a software code perspective. Also, it is emphasized the importance of human factors and the need to strengthen them, when considering security design rules. In this paper, we consider a secure process for managing change, focusing on fast and accurate decision-making in terms of procedural factors, when considering development security operations. In addition, the paper discussed the need for maturity model analysis in relation to the development security operating characteristics, and analyzed the meaning of the analysis elements through detailed procedures for the strength and integration elements of the dynamic and static elements accordingly. The paper also analyzed factors such as scanning activity and code analysis for threat modeling and compliance and control.
참고문헌 (17)
- H. Yasa, "Experiment Exposed Credentials in GitHub Public Repositories for CI", CD, 2018 (2018), 143~143[DOI]
- V. Mohan, "BP: Security Concerns and Best Practices for Automation of Software Deployment Processes: An Industrial Case Study", 2018 IEEE Cybersecurity Development (SecDev), pp.21~28 (2018), IEEE
- L. Williams, "CContinuously integrating security", Proceedings of the 1st International Workshop on Security Awareness from Design to Deployment, pp.1~2 (2018), ACM
- O. Diaz, "Reinforcing DevOps approach with security and Risk Management: an experience of implementing it in a Data Center of a Mexican Organization", 2017 6th International Conference on Software Process Improvement (CIMPS), pp.1~7 (2017), IEEE
- J. S. Lee, "The DevSecOps and agency theory", 2018 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW), pp.243~244 (2018), IEEE
- K. Carter, "Francois Raynaud on DevSecOps", IEEE Software, 34(5), pp.93~96 (2017)
- V. Mohan, "SecDevOps Is It a marketing buzzword? – mapping research on security in DevOps", 2016 11th International Conference on Availability, Reliability and Security (ARES), pp.542~547 (2016), IEEE
- H. Assal, "Security in the Software Development Lifecycle", Fourteenth Symposium on Usable Privacy and Security ({SOUPS} 2018), pp.281~296 (2018)
- 원종혁, "IoT 계층별 보안위협 분석 및 대응기술 개선 방안 연구", 융합정보논문지, 8(6), pp.149~157 (2018), 중소기업융합학회[DOI]
- 김만식, "무인기 군집 비행 보안위협 및 보안요구사항 연구", 디지털융복합연구, 15(8), pp.195~202 (2017), 한국디지털정책학회[DOI]