{"title":"基于DevSecOps技术的安全体系结构设计与实践","authors":"Tao Chen, Haiyan Suo","doi":"10.1109/ICSESS54813.2022.9930212","DOIUrl":null,"url":null,"abstract":"DevSecOps is the abbreviation of “development, security and operation and maintenance”[1]. It automatically integrates security at each stage of the software development life cycle, including initial design, integration, testing, deployment and software delivery. DevSecOps can seamlessly integrate system security into the DevOps process, which makes application and infrastructure security the common responsibility of development, security and it operations teams. This study designed an integrated operation and maintenance platform of DevSecOps, which was of great significance to improve the efficiency of enterprise research and development and realize the automation of security protection.","PeriodicalId":265412,"journal":{"name":"2022 IEEE 13th International Conference on Software Engineering and Service Science (ICSESS)","volume":"29 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2022-10-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"Design and Practice of Security Architecture via DevSecOps Technology\",\"authors\":\"Tao Chen, Haiyan Suo\",\"doi\":\"10.1109/ICSESS54813.2022.9930212\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"DevSecOps is the abbreviation of “development, security and operation and maintenance”[1]. It automatically integrates security at each stage of the software development life cycle, including initial design, integration, testing, deployment and software delivery. DevSecOps can seamlessly integrate system security into the DevOps process, which makes application and infrastructure security the common responsibility of development, security and it operations teams. This study designed an integrated operation and maintenance platform of DevSecOps, which was of great significance to improve the efficiency of enterprise research and development and realize the automation of security protection.\",\"PeriodicalId\":265412,\"journal\":{\"name\":\"2022 IEEE 13th International Conference on Software Engineering and Service Science (ICSESS)\",\"volume\":\"29 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2022-10-21\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2022 IEEE 13th International Conference on Software Engineering and Service Science (ICSESS)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ICSESS54813.2022.9930212\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2022 IEEE 13th International Conference on Software Engineering and Service Science (ICSESS)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICSESS54813.2022.9930212","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Design and Practice of Security Architecture via DevSecOps Technology
DevSecOps is the abbreviation of “development, security and operation and maintenance”[1]. It automatically integrates security at each stage of the software development life cycle, including initial design, integration, testing, deployment and software delivery. DevSecOps can seamlessly integrate system security into the DevOps process, which makes application and infrastructure security the common responsibility of development, security and it operations teams. This study designed an integrated operation and maintenance platform of DevSecOps, which was of great significance to improve the efficiency of enterprise research and development and realize the automation of security protection.