DevSecOps: A Security Model for Infrastructure as Code Over the Cloud
Amr Awad Ibrahim, Ahmed Hassan Yousef, Walaa Medhat · 2022 2nd International Mobile, Intelligent, and Ubiquitous Computing Conference (MIUCC) · 2022
DevSecOps includes security practice while applying DevOps. DevSecOps help secure the whole DevOps process. This paper aims to define a DevSecOps module to be used by the infrastructure team while applying infrastructure as code. The proposed module solves the problem of security by including security practice with the DevOps cycle to reach DevSecOps. The module was tested to measure time effi-ciency. A small survey was created to test other DevSecOps metrics and enhance future work.