Design and Practice of Security Architecture via DevSecOps Technology

Abstract

DevSecOps is the abbreviation of “development, security and operation and maintenance”[1]. It automatically integrates security at each stage of the software development life cycle, including initial design, integration, testing, deployment and software delivery. DevSecOps can seamlessly integrate system security into the DevOps process, which makes application and infrastructure security the common responsibility of development, security and it operations teams. This study designed an integrated operation and maintenance platform of DevSecOps, which was of great significance to improve the efficiency of enterprise research and development and realize the automation of security protection.