Automation and DevSecOps: Streamlining Security Measures in Financial System
Mohit Kumar Kushwaha, Priyanshi David, G. Suseela · 2024
DevOps is a practice that integrates and automates the work of software development and IT Operations. DevSecOps emphasizes automating security within CI-CD pipelines to streamline the swift deployment of developmental changes and counter the threats and vulnerabilities that arise in a financial web application. This study utilizes comprehensive threat modeling to identify potential vulnerabilities early in development, allowing timely remediation. It explores integrating SAST and DAST tools like Codacy, OWASP ZAP, and GitHub Advanced Security Scanning into an Azure DevOps pipeline to enhance the security of financial web applications.