English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

DevOps is an emerging collection of software management practices intended to shorten time to market for new software features and to reduce the risk of costly deployment errors. In this paper we examine the security implications of two of the key DevOps practices, automation of the deployment pipeline using a deployment toolchain and infrastructure-as-code to specify the environment of the deployed software. We focus on identifying what changes when an organization moves from manual deployments to DevOps automated deployment processes. We reviewed the literature and conducted three case studies using simple configurations of common DevOps tools. This allowed us to identify specific: • Positive influences on security where automation enhances defenses. • Negative influences, where automation enables different kinds of attacks and increases the attack surface. • Research directions that look promising to support this new approach to software management. • Recommendations for DevOps adopters

Security for Devops Deployment Processes: Defenses, Risks, Research Directions