Resilient cloud cluster with DevSecOps security model, automates a data analysis, vulnerability search and risk calculation
Open accessAbstract
Automated, secure software development is an important digitalization task, solved with the DevSecOps approach. An important part of the DevSecOps approach is continuous risk assessment, which is necessary to identify and evaluate risk factors. Combining the development cycle with continuous risk assessment creates software development and operation synergies and minimizes vulnerabilities. The article presents the main methods of deploying web applications and ways to increase information security at all stages of product development. It also compares different types of infrastructures and cloud computing providers and analyzes modern tools used to automate processes. The cloud cluster was deployed using Terraform and the Jenkins pipeline, written in the Groovy programming language, which checks program code for vulnerabilities and allows you to fix violations at the earliest stages of developing secure web applications. The developed cluster implements the proposed algorithm for automated risk assessment based on the calculation (modeling) of cloud infrastructure threats and vulnerabilities, which operates in real-time, periodically collecting all information and adjusting the system according to the risk and applied controls. The algorithm for calculating risk and losses is based on statistical data and FAIR information risk assessment methodology. The risk value obtained using the proposed method is quantitative, which allows more efficient forecasting of information security costs in software development.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The study applies the FAIR methodology to enable real-time, quantitative risk assessment in cloud environments.
“The study compares different infrastructures and cloud service providers, and notably applies the FAIR (Factor Analysis of Information Risk) methodology to enable real-time, quantitative risk assessment in cloud environments.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [43]
Section 5.1 (pp. 9–10) compares cloud providers, and the Conclusion (p. 19) describes a real-time system that produces quantitative risk values. Section 4 (pp. 8–9) says the method follows a FAIR concept but moves from FAIR's qualitative assessment to a quantitative one. Thus, the paper does not attribute its real-time, quantitative assessment to applying FAIR itself. (LLM, conf=0.88)
Experimental — accuracy not yet measuredAlghawli & Radivilova [43] explore methods for enhancing security throughout all stages of software development, with a particular emphasis on automation tools such as Terraform and Jenkins.
“Alghawli & Radivilova [43] explore methods for enhancing security throughout all stages of software development, with a particular emphasis on automation tools such as Terraform and Jenkins.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [43]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Matrix Differential Calculus with Applications in Statistics and Econometrics
Magnus, J. R., & Magnus, J. R. (2019) · Wiley series in probability and statistics · doi:10.1002/9781119541219 · Cited by 455 · see citing works
Challenges and solutions when adopting DevSecOps: A systematic review
Rajapakse, R. N., Zahedi, M., Babar, M. A., & Shen, H. (2022) · Information and Software Technology · doi:10.1016/j.infsof.2021.106700 · Cited by 235 · see citing works
Toward successful DevSecOps in software development organizations: A decision-making framework
Akbar, M. A., Smolander, K., Mahmood, S., & Alsanad, A. (2022) · Information and Software Technology · doi:10.1016/j.infsof.2022.106894 · Cited by 128 · see citing works
Saaty, T. L. (2014) · Wiley StatsRef: Statistics Reference Online · doi:10.1002/9781118445112.stat05310 · Cited by 106 · see citing works
Self-Service Cybersecurity Monitoring as Enabler for DevSecOps
Díaz, J., Pérez, J., Peña, M. Á. L., Mena, G. A., & Yagüe, A. (2019) · IEEE Access · doi:10.1109/access.2019.2930000 · Cited by 64 · see citing works
Machine Learning in Classification Time Series with Fractal Properties
Kirichenko, L., Радівілова, Т., & Bulakh, V. (2018) · Data · doi:10.3390/data4010005 · Cited by 53 · see citing works
A systematic literature Review: Risk analysis in cloud migration
Maniah, M., Soewito, B., Gaol, F. L., et al. (2021) · Journal of King Saud University - Computer and Information Sciences · doi:10.1016/j.jksuci.2021.01.008 · Cited by 44 · see citing works
Горбенко, І. Д., Zamula, A. A., & Semenko, Y. А. (2016) · Telecommunications and Radio Engineering · doi:10.1615/telecomradeng.v75.i2.60 · Cited by 42 · see citing works
Information security risk management models for cloud hosted systems: A comparative study
Irsheid, A., Murad, A., AlNajdawi, M., & Qusef, A. D. (2022) · Procedia Computer Science · doi:10.1016/j.procs.2022.08.025 · Cited by 40 · see citing works
Assessing Approaches of IT Infrastructure Audit
Kipchuk, F., Sokolov, V., СКЛАДАННИЙ, П. М., et al. (2021) · IEEE International Conference on Problems of Infocommunications, Science and Technology (PIC S&T) · doi:10.1109/picst54195.2021.9772181 · Cited by 32 · see citing works
Sharma, A. B., & Singh, U. K. (2022) · Global Transitions Proceedings · doi:10.1016/j.gltp.2022.03.030 · Cited by 29 · see citing works
Добринін, І. С., Радівілова, Т., Maltseva, N., et al. (2018) · International Scientific-Practical Conference Problems of Infocommunications Science and Technology · doi:10.1109/infocommst.2018.8632022 · Cited by 27 · see citing works
Classification of Time Realizations Using Machine Learning Recognition of Recurrence Plots
Kirichenko, L., Zinchenko, P., & Радівілова, Т. (2020) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-54215-3_44 · Cited by 24 · see citing works
Alghawli, A. S., AL-KHULAIDI, A. A. G., Nasser, A. A., et al. (2022) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2022.0130579 · Cited by 23 · see citing works
Self-citationRevisit security in the era of DevOps: An evidence-based inquiry into DevSecOps industry
Zhou, X., Mao, R., Zhang, H., Dai, Q., Huang, H., Shen, H., Li, J., & Rong, G. (2023) · IET Software · doi:10.1049/sfw2.12132 · Cited by 23 · see citing works
Datta, D., Mallick, P. K., Reddy, A. V. N., et al. (2022) · Remote Sensing · doi:10.3390/rs14194853 · Cited by 23 · see citing works
International Journal of Electronics and Telecommunications
Daradkeh, Y. I., Kirichenko, L., & Радівілова, Т. (2018) · doi:10.24425/118142 · Cited by 18 · see citing works
Analyzes of the distributed system load with multifractal input data flows
Kirichenko, L., & Радівілова, Т. (2017) · doi:10.1109/cadsm.2017.7916130 · Cited by 17 · see citing works
Resource Optimization and Security for Cloud Services
Xiong, K. (2014) · Wiley eBooks · doi:10.1002/9781118898598 · Cited by 16 · see citing works
A Comprehensive Review of Existing Risk Assessment Models in Cloud Computing
Amini, A., & Jamil, N. (2018) · Journal of Physics Conference Series · doi:10.1088/1742-6596/1018/1/012004 · Cited by 16 · see citing works
Identification in Informative Systems on the Basis of Users’ Behaviour
Рубан, І. В., Martovytskyi, V., Kovalenko, A., et al. (2019) · IEEE International Conference on Advanced Optoelectronics and Lasers (CAOL) · doi:10.1109/caol46282.2019.9019446 · Cited by 15 · see citing works
Astapenya, V., Sokolov, V., СКЛАДАННИЙ, П. М., et al. (2021) · IEEE International Conference on Problems of Infocommunications, Science and Technology (PIC S&T) · doi:10.1109/picst54195.2021.9772161 · Cited by 13 · see citing works
Lecture Notes in Computational Intelligence and Decision Making
Babichev, S., Lytvynenko, V., Wójcik, W., et al. (2020) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-54215-3 · Cited by 13 · see citing works
Sobchuk, V., Барабаш, О., Musienko, A. P., & Svynchuk, O. (2021) · E3S Web of Conferences · doi:10.1051/e3sconf/202125008002 · Cited by 12 · see citing works
Мулеса, О. Ю., Geche, F., Batyuk, A. Y., et al. (2018) · IEEE International Scientific and Technical Conference on Computer Sciences and Information Technologies (CSIT) · doi:10.1109/stc-csit.2018.8526749 · Cited by 11 · see citing works
Entropy Analysis Method for Attacks Detection
Радівілова, Т., Kirichenko, L., & Alghawli, A. S. (2019) · doi:10.1109/picst47496.2019.9061451 · Cited by 11 · see citing works
Self-citationБарабаш, О., Sobchuk, V., Musienko, A. P., et al. (2023) · Studies in computational intelligence · doi:10.1007/978-3-031-37450-0_11 · Cited by 9 · see citing works
Forming the clusters of labour migrants by the degree of risk of hiv infection
Мулеса, О. Ю., Snytyuk, V., & Myronyuk, I. S. (2016) · Eastern-European Journal of Enterprise Technologies · doi:10.15587/1729-4061.2016.71203 · Cited by 8 · see citing works
Security Scenarios Automation and Deployment in Virtual Environment using Ansible
Acheampong, R., Bălan, T., Popovici, D.-M., et al. (2022) · International Conference on Communications (COMM) · doi:10.1109/comm54429.2022.9817150 · Cited by 8 · see citing works
Díaz, O., & Muñoz, M. (2017) · International Conference on Software Process Improvement (CIMPS) · doi:10.1109/cimps.2017.8169957 · Cited by 7 · see citing works
Arshad, M., Saeed, M., Rahman, A. U., et al. (2023) · PeerJ Computer Science · doi:10.7717/peerj-cs.1423 · Cited by 6 · see citing works
Risk Assessment Methods for Cloud Computing Platforms
Weil, T. R. (2020) · IT Professional · doi:10.1109/mitp.2019.2956257 · Cited by 5 · see citing works
Sun, W., Tang, Y., & Huang, Y. (2023) · Software Testing Verification and Reliability · doi:10.1002/stvr.1847 · Cited by 5 · see citing works
A DevSecOps-enabled framework for risk management of critical infrastructures
Ramaj, X. (2022) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1145/3510454.3517053 · Cited by 5 · see citing works
Resilience Aware Traffic Engineering FHRP Solution
Lemeshko, O. V., Yeremenko, O., Mersni, A., et al. (2021) · IEEE International Conference on Information and Telecommunication Technologies and Radio Electronics (UkrMiCo) · doi:10.1109/ukrmico52950.2021.9716677 · Cited by 4 · see citing works
A DevSecOps-enabled Framework for Risk Management of Critical Infrastructures
Ramaj, X. (2022) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1109/icse-companion55297.2022.9793812 · Cited by 3 · see citing works
Computer Vision Technology for Fault Detection Systems Using Image Processing
Alghawli, A. S. (2022) · Computers, materials & continua/Computers, materials & continua (Print) · doi:10.32604/cmc.2022.028990 · Cited by 3 · see citing works
Self-citationAn Approach for Evaluation of Cloud Outage Risk based on FAIR Model
Hsu, T.-C., Pan, Y.-S., Wu, J.-C., et al. (2023) · International Conference on Engineering Management of Communication and Technology (EMCTECH) · doi:10.1109/emctech58502.2023.10296935 · Cited by 3 · see citing works
Martovytskyi, V., Аргунов, В. В., Рубан, І. В., et al. (2023) · Eastern-European Journal of Enterprise Technologies · doi:10.15587/1729-4061.2023.277997 · Cited by 3 · see citing works
Lemeshko, O. V., Yeremenko, O., Mersni, A., et al. (2022) · doi:10.1109/icat54566.2022.9811191 · Cited by 2 · see citing works
Empirical Cloud Security, Second Edition
Sood, A. K. (2023) · De Gruyter eBooks · doi:10.1515/9781501517990 · Cited by 2 · see citing works
Modeling of Decision-Making Processes in the Service Management System
Мулеса, О. Ю., Melnyk, O., Horvat, P., Токар, М., Peresoliak, V., & Kumar, H. (2023) · IEEE International Conference on Computer Sciences and Information Technologies (CSIT) · doi:10.1109/csit61576.2023.10324217 · Cited by 2 · see citing works
System Analysis and Artificial Intelligence
Zgurovsky, M. Z., & Pankratova, N. D. (2023) · Studies in computational intelligence · doi:10.1007/978-3-031-37450-0 · Cited by 2 · see citing works
Flagged first, then by citations
Research works printed but not linked: 5
- [13]13. Lemeshko, O.; Yevdokymenko, M.; Yeremenko, O.; Kuzminykh, I. Cyber Resilience and Fault Tolerance of Artificial Intelligence Systems: EU Standards, Guidelines, and Reports. In proceedings of CPITS Kyiv, Ukraine, July 7, 2020, pp. 99-108.
- [32]32. Wilson, G. DevSecOps: A Leader's Guide to Producing Secure Software Without By. Compromising Flow, Feedback and Continuous Improvement . Rethink Press: Norfolk, GB , 2020, 280 p.
- [37]37. Evolving Software Processes. Trends and Future Directions. Khan, A.A; Dac-Nhuong, L. Eds. Wiley: UK, 2022, 320 p.
- [44]44. Wilson, G. DevSecOps. A Leader's Guide to Producing Secure Software Without Compromising Flow, Feedback and Continuous Improvement. Rethink Press: Norfolk, GB, 2020, 280 p.
- [52]52. Blokdyk, G. DevSecOps Strategy a Complete Guide - 2020 Edition . Emereo Pty Limited: Queensland, Australia, 2019. 306 p.
Cited by
Sorted by citations
Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review
Mohammed, K., Shanmugam, B., & El-Den, J. (2025) · Technologies · doi:10.3390/technologies13120548 · Cited by 8 · see citing works
- Authors
- Alghawli, A. S. A., & Radivilova, T.
- Affiliations
- Prince Sattam Bin Abdulaziz University (SA)
- Corresponding author
- Alghawli, Abed Saif Ahmed
- Venue
- Alexandria Engineering Journal
- Publisher
- Elsevier BV
- Published
- 2024-11
- Volume
- 107
- Pages
- 136-149
- ISSN
- 1110-0168 (ISSN-L)
- OpenAlex
- W4400673905
- Cited by
- 23
- References
- 43
- Citations by year
- 2026: 7 · 2025: 15 · 2024: 1
- FWCI
- 8.67
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Licence
- Locations
- Alexandria Engineering Journal (publishedVersion, cc-by-nc-nd)
- arXiv (Cornell University) (submittedVersion)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- arXiv (Cornell University)
- Funders
- Prince Sattam bin Abdulaziz University Deanship of Scientific Research (IF2/PSAU/2022/01/22780)
- Prince Sattam bin Abdulaziz University
- Deanship of Scientific Research, King Saud University
- Ministry of Education - Kingdom of Saudi Arabia
- Topics
- Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
- Physical Sciences › Computer Science › Information Systems › Software Engineering Techniques and Practices
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Keywords
- DevSecOps, cloud clusters, continuous risk assessment, vulnerability detection, automated risk assessment, Terraform, Jenkins Pipeline, cloud provider comparison
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
