The emergence and importance of DevSecOps: Integrating and reviewing security practices within the DevOps pipeline
1 Independent Researcher, Nebraska, USA.
2 Independent Researcher, Canada.
3 Independent Researcher, New York, USA.
2 Independent Researcher, Canada.
3 Independent Researcher, New York, USA.
4 Independent Researcher, North Dakota, USA.
5 Independent Researcher, Ohio, USA.
5 Independent Researcher, Ohio, USA.
6 Independent Researcher, Kentucky, USA.
Review
World Journal of Advanced Engineering Technology and Sciences, 2024, 11(02), 127–133.
Article DOI: 10.30574/wjaets.2024.11.2.0093
Publication history:
Received on 31 January 2024; revised on 09 March 2024; accepted on 11 March 2024
Abstract:
The emergence of DevSecOps marks a significant paradigm shift in software development, focusing on integrating security practices seamlessly into the DevOps pipeline. This paper explores the evolution, principles, and importance of DevSecOps in contemporary software engineering. DevSecOps arises from the recognition that traditional security measures often lag behind the rapid pace of DevOps development cycles, leading to vulnerabilities and breaches. By integrating security early and continuously throughout the software development lifecycle, DevSecOps aims to proactively identify and mitigate risks without impeding the agility and speed of DevOps practices. This paper delves into the core principles of DevSecOps, emphasizing automation, collaboration, and cultural transformation. Automation streamlines security processes, enabling the automated testing and validation of code for vulnerabilities. Collaboration fosters communication and shared responsibility among developers, operations, and security teams, breaking down silos and promoting a collective approach to security. Cultural transformation involves cultivating a security-first mindset across the organization, where security is not an afterthought but an inherent part of the development process. The importance of DevSecOps cannot be overstated in today's digital landscape, where cyber threats are omnipresent and the cost of security breaches is staggering. By integrating security into every stage of the DevOps pipeline, organizations can enhance their resilience to cyber attacks, comply with regulatory requirements, and build trust with customers. DevSecOps represents a holistic approach to software development that prioritizes security without compromising speed or innovation. Embracing DevSecOps principles is imperative for organizations seeking to stay ahead in an increasingly complex and hostile digital environment.
Keywords:
DevSecOps; Security; Practices; Emergence; DevOps; Review
Full text article in PDF:
Copyright information:
Copyright © 2024 Author(s) retain the copyright of this article. This article is published under the terms of the Creative Commons Attribution Liscense 4.0