Trends for the DevOps Security : A Systematic Literature Review
Abstract
Due to technical advances, old ways for securing DevOps software development have become obsolete. Thus, researchers and practitioners need new insights into the security challenges and practices of DevOps development. This paper reviews the data extraction and analysis phase and results of a Systematic Literature Review (SLR) study that was carried out in 2019. The outcome is an updated list of security challenges and practices for DevOps software development. Both reviews shows that the most essential challenges for the DevOps security deal with the complexity of the development pipelines and the overall complexity of the cloud and microservice environments. The security activities identified were classified by using the BSIMM maturity model for software security as a framework. Our review shows that DevOps security research focuses mostly on deployment phase and technical aspects of software security. We compared the security activities identified in our study with the ones identified by the BSIMM development company in their 2020 review of 128 practitioners’ security practices and found matching practices and similar trends.
Main Authors
Format
Conferences
Conference paper
Published
2022
Series
Subjects
Publication in research information system
Publisher
Springer International Publishing
The permanent address of the publication
https://urn.fi/URN:NBN:fi:jyu-202301251474Use this for linking
Parent publication ISBN
978-3-031-11509-7
Review status
Peer reviewed
ISSN
1865-1348
DOI
https://doi.org/10.1007/978-3-031-11510-3_12
Conference
International Symposium on Business Modeling and Software Design
Language
English
Published in
Lecture Notes in Business Information Processing
Is part of publication
Business Modeling and Software Design : 12th International Symposium, BMSD 2022, Fribourg, Switzerland, June 27–29, 2022, Proceedings
Citation
- Leppänen, T., Honkaranta, A., & Costin, A. (2022). Trends for the DevOps Security : A Systematic Literature Review. In B. Shishkov (Ed.), Business Modeling and Software Design : 12th International Symposium, BMSD 2022, Fribourg, Switzerland, June 27–29, 2022, Proceedings (pp. 200-217). Springer International Publishing. Lecture Notes in Business Information Processing, 453. https://doi.org/10.1007/978-3-031-11510-3_12
License
Copyright© 2022 Springer Nature Switzerland AG