Modeling continuous security: A conceptual model for automated DevSecOps using open-source software over cloud (ADOC)
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The ADOC model remains largely theoretical.
“Despite its innovative approach, the ADOC model remains largely theoretical.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [45]
The ADOC framework has not been empirically validated in real-world organisational settings.
“The framework has not been empirically validated in real-world organisational settings, which raises questions about its practical effectiveness and scalability.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [45]
Cites
The NIST Definition of Cloud Computing
Mell, P., & Grance, T. (2011) · doi:10.6028/nist.sp.800-145 · Cited by 15,338 · see citing works
Addressing cloud computing security issues
Zissis, D., & Lekkas, D. (2010) · Future Generation Computer Systems · doi:10.1016/j.future.2010.12.006 · Cited by 1,848 · see citing works
Security and Privacy Challenges in Cloud Computing Environments
Takabi, H., Joshi, J. B. D., & Ahn, G. (2010) · IEEE Security & Privacy · doi:10.1109/msp.2010.186 · Cited by 1,326 · see citing works
Bayesian Estimation and Prediction Using Asymmetric Loss Functions
Zellner, A. (1986) · Journal of the American Statistical Association · doi:10.1080/01621459.1986.10478289 · Cited by 868 · see citing works
Security in cloud computing: Opportunities and challenges
Ali, M., Khan, S. U., & Vasilakos, A. V. (2015) · Information Sciences · doi:10.1016/j.ins.2015.01.025 · Cited by 835 · see citing works
An analysis of security issues for cloud computing
Hashizume, K., Rosado, D. G., Fernández‐Medina, E., & Fernández, E. B. (2013) · Journal of Internet Services and Applications · doi:10.1186/1869-0238-4-5 · Cited by 791 · see citing works
Understanding Cloud Computing Vulnerabilities
Grobauer, B., Walloschek, T., & Stöcker, E. (2010) · IEEE Security & Privacy · doi:10.1109/msp.2010.115 · Cited by 783 · see citing works
Microservices Architecture Enables DevOps: Migration to a Cloud-Native Architecture
Balalaie, A., Heydarnoori, A., & Jamshidi, P. (2016) · IEEE Software · doi:10.1109/ms.2016.64 · Cited by 735 · see citing works
Eliciting security requirements with misuse cases
Sindre, G., & Opdahl, A. L. (2004) · Requirements Engineering · doi:10.1007/s00766-004-0194-4 · Cited by 731 · see citing works
Shahin, M., Ali Babar, M., & Zhu, L. (2017) · IEEE Access · doi:10.1109/access.2017.2685629 · Cited by 680 · see citing works
Microservices: The Journey So Far and Challenges Ahead
Jamshidi, P., Pahl, C., Mendonça, N. C., Lewis, J., & Tilkov, S. (2018) · IEEE Software · doi:10.1109/ms.2018.2141039 · Cited by 560 · see citing works
Ebert, C., Gallardo, G., Hernantes, J., & Serrano, N. (2016) · IEEE Software · doi:10.1109/ms.2016.68 · Cited by 504 · see citing works
Security issues in cloud environments: a survey
Fernandes, D. A. B., Soares, L. F. B., Gomes, J. V., Freire, M. M., & Inácio, P. R. M. (2013) · International Journal of Information Security · doi:10.1007/s10207-013-0208-7 · Cited by 499 · see citing works
Meng, G., Liu, Y., Zhang, J., Pokluda, A., & Boutaba, R. (2015) · ACM Computing Surveys · doi:10.1145/2785733 · Cited by 427 · see citing works
Using abuse case models for security requirements analysis
McDermott, J. P., & Fox, C. (2003) · Annual Computer Security Applications Conference · doi:10.1109/csac.1999.816013 · Cited by 398 · see citing works
Eliciting security requirements by misuse cases
Sindre, G., & Opdahl, A. L. (2002) · doi:10.1109/tools.2000.891363 · Cited by 328 · see citing works
On cloud security requirements, threats, vulnerabilities and countermeasures: A survey
Kumar, R., & Goyal, R. (2019) · Computer Science Review · doi:10.1016/j.cosrev.2019.05.002 · Cited by 264 · see citing works
Continuous Delivery: Huge Benefits, but Challenges Too
Chen, L. (2015) · IEEE Software · doi:10.1109/ms.2015.27 · Cited by 262 · see citing works
Continuous deployment of software intensive products and services: A systematic mapping study
Rodríguez, P., Haghighatkhah, A., Lwakatare, L. E., Teppola, S., Suomalainen, T., Eskeli, J., Karvonen, T., Kuvaja, P., Verner, J. M., & Oivo, M. (2016) · Journal of Systems and Software · doi:10.1016/j.jss.2015.12.015 · Cited by 240 · see citing works
Locking the sky: a survey on IaaS cloud security
Vaquero, L. M., Rodero‐Merino, L., & Morán, D. (2010) · Computing · doi:10.1007/s00607-010-0140-x · Cited by 232 · see citing works
What is DevOps?: A Systematic Mapping Study on Definitions and Practices
Jabbari, R., bin Ali, N., Petersen, K., & Tanveer, B. (2016) · Proceedings of the Scientific Workshop Proceedings of XP2016 · doi:10.1145/2962695.2962707 · Cited by 230 · see citing works
The many meanings of open source
Gacek, C., & Arief, B. (2004) · IEEE Software · doi:10.1109/ms.2004.1259206 · Cited by 227 · see citing works
Continuous software engineering and beyond: trends and challenges
Fitzgerald, B., & Stol, K.-J. (2014) · Proceedings of the 1st International Workshop on Rapid Continuous Software Engineering · doi:10.1145/2593812.2593813 · Cited by 212 · see citing works
Kim, G. H., Debois, P., Willis, J., & Humble, J. (2016) · Cited by 205 · see citing works
DevSecOps: A Multivocal Literature Review
Myrbakken, H., & Colomo-Palacios, R. (2017) · Communications in Computer and Information Science · doi:10.1007/978-3-319-67383-7_2 · Cited by 205 · see citing works
Container and Microservice Driven Design for Cloud Infrastructure DevOps
Kang, H., Le, M. V., & Tao, S. (2016) · IEEE International Conference on Cloud Engineering · doi:10.1109/ic2e.2016.26 · Cited by 179 · see citing works
Adopting DevOps in the real world: A theory, a model, and a case study
Luz, W., Pinto, G., & Bonifácio, R. (2019) · Journal of Systems and Software · doi:10.1016/j.jss.2019.07.083 · Cited by 164 · see citing works
From Security to Assurance in the Cloud
Ardagna, C. A., Asal, R., Damiani, E., & Vu, Q. H. (2015) · ACM Computing Surveys · doi:10.1145/2767005 · Cited by 155 · see citing works
DevOps: Introducing Infrastructure-as-Code
Artač, M., Borovšak, T., Nitto, E. D., Guerriero, M., & Tamburri, D. A. (2017) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1109/icse-c.2017.162 · Cited by 136 · see citing works
Infrastructure as Code: Managing Servers in the Cloud
Morris, K. (2016) · Cited by 134 · see citing works
Continuous Delivery: Overcoming adoption challenges
Chen, L. (2017) · Journal of Systems and Software · doi:10.1016/j.jss.2017.02.013 · Cited by 134 · see citing works
Problems, causes and solutions when adopting continuous delivery—A systematic literature review
Laukkanen, E., Itkonen, J., & Lassenius, C. (2016) · Information and Software Technology · doi:10.1016/j.infsof.2016.10.001 · Cited by 133 · see citing works
Threat analysis of software systems: A systematic literature review
Tuma, K., Çalıklı, G., & Scandariato, R. (2018) · Journal of Systems and Software · doi:10.1016/j.jss.2018.06.073 · Cited by 113 · see citing works
Riedel, M., Wittenburg, P., Reetz, J., van de Sanden, M., Rybicki, J., Vieth, B. V. S., Fiameni, G., Mariani, G., Michelini, A., Cacciari, C., et al. (2013) · Journal of Internet Services and Applications · doi:10.1186/1869-0238-4-1 · Cited by 111 · see citing works
A Brief History of Cloud Application Architectures
Kratzke, N. (2018) · Applied Sciences · doi:10.3390/app8081368 · Cited by 100 · see citing works
A study of value in agile software development organizations
Alahyari, H., Svensson, R. B., & Gorschek, T. (2016) · Journal of Systems and Software · doi:10.1016/j.jss.2016.12.007 · Cited by 98 · see citing works
Towards Container Orchestration in Fog Computing Infrastructures
Hoque, S., Brito, M. S. D., Willner, A., Keil, O., & Magedanz, T. (2017) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/compsac.2017.248 · Cited by 98 · see citing works
Software Architecture in a Changing World
Woods, E. (2016) · IEEE Software · doi:10.1109/ms.2016.149 · Cited by 93 · see citing works
The Top 10 Adages in Continuous Deployment
Parnin, C., Helms, E., Atlee, C., Boughton, H., Ghattas, M., Glover, A., Holman, J., Micco, J., Murphy, T. B., Savor, T., et al. (2017) · IEEE Software · doi:10.1109/ms.2017.86 · Cited by 87 · see citing works
Casola, V., Benedictis, A. D., Rak, M., & Villano, U. (2020) · Journal of Systems and Software · doi:10.1016/j.jss.2020.110537 · Cited by 86 · see citing works
Misuse and abuse cases: getting past the positive
Hope, P., McGraw, G. E., & Antón, A. I. (2004) · IEEE Security & Privacy · doi:10.1109/msp.2004.17 · Cited by 79 · see citing works
Performance-oriented DevOps: A Research AgendaPreprint
Brunnert, A., van Hoorn, A., Willnecker, F., Danciu, A., Hasselbring, W., Heger, C., Herbst, N. R., Jamshidi, P., Jung, R., von Kistowski, J., et al. (2015) · arXiv (Cornell University) · doi:10.48550/arxiv.1508.04752 · Cited by 75 · see citing works
Advances in Using Agile and Lean Processes for Software Development
Rodríguez, P., Mäntylä, M., Oivo, M., Lwakatare, L. E., Seppänen, P., & Kuvaja, P. (2018) · Advances in computers · doi:10.1016/bs.adcom.2018.03.014 · Cited by 70 · see citing works
An Empirical Study on Culture, Automation, Measurement, and Sharing of DevSecOps
Tomas, N., Li, J., & Huang, H. (2019) · 2019 International Conference on Cyber Security and Protection of Digital Services (Cyber Security) · doi:10.1109/cybersecpods.2019.8884935 · Cited by 66 · see citing works
Foundations of Security: What Every Programmer Needs to Know
Daswani, N., Kern, C., & Kesavan, A. (2007) · Digital Access to Libraries (Université catholique de Louvain (UCL), l'Université de Namur (UNamur) and the Université Saint-Louis (USL-B)) · doi:10.1007/978-1-4302-0377-3 · Cited by 65 · see citing works
Beyond Continuous Delivery: An Empirical Investigation of Continuous Deployment Challenges
Shahin, M., Babar, M. A., Zahedi, M., & Zhu, L. (2017) · Proceedings of the ... ACM-IEEE International Symposium on Empirical Software Engineering and Measurement/International Symposium on Empirical Software Engineering and Measurement · doi:10.1109/esem.2017.18 · Cited by 64 · see citing works
Cyber Threat Modeling: Survey, Assessment, and Representative Framework
Bodeau, D. J., McCollum, C. D., & Fox, D. B. (2018) · Cited by 54 · see citing works
Open Source Development, Adoption and Innovation
Feller, J., Sillitti, A., Scacchi, W., & Fitzgerald, B. (2007) · IFIP International Federation for Information Processing/IFIP · doi:10.1007/978-0-387-72486-7 · Cited by 50 · see citing works
Effective DevOps: Building a Culture of Collaboration, Affinity, and Tooling at Scale
Davis, J. P., & Daniels, K. (2016) · CERN Document Server (European Organization for Nuclear Research) · Cited by 49 · see citing works
2018 25th International Conference on Telecommunications (ICT)
(2018) · doi:10.1109/ict42535.2018 · Cited by 47 · see citing works
2017 IEEE Conference on Network Softwarization (NetSoft)
(2017) · doi:10.1109/netsoft40469.2017 · Cited by 47 · see citing works
Prates, L., Faustino, J., Silva, M., & Pereira, R. (2019) · Lecture Notes in Business Information Processing · doi:10.1007/978-3-030-29608-7_7 · Cited by 45 · see citing works
2019 International Conference on Cyber Security and Protection of Digital Services (Cyber Security)
(2019) · International Conference on Cyber Security and Protection of Digital Services (Cyber Security) · doi:10.1109/cybersecpods.2019.8885403 · Cited by 43 · see citing works
Carter, K. (2017) · IEEE Software · doi:10.1109/ms.2017.3571578 · Cited by 42 · see citing works
Challenges in using open source software in product development
Stol, K.-J., & Babar, M. A. (2010) · doi:10.1145/1833272.1833276 · Cited by 41 · see citing works
Towards a Model-Based DevOps for Cyber-Physical Systems
Combemale, B., & Wimmer, M. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-39306-9_6 · Cited by 41 · see citing works
Renaud, K., & Shepherd, L. A. (2018) · Network Security · doi:10.1016/s1353-4858(18)30017-5 · Cited by 35 · see citing works
Mohan, V., Othmane, L. B., & Kres, A. (2018) · IEEE Cybersecurity Development (SecDev) · doi:10.1109/secdev.2018.00011 · Cited by 34 · see citing works
2017 IEEE International Conference on Cloud Engineering (IC2E)
(2017) · doi:10.1109/ic2e39935.2017 · Cited by 34 · see citing works
Defining Security Requirements Through Misuse Actions
Fernández, E. B., VanHilst, M., Larrondo-Petrie, M. M., & Huang, S. (2006) · Springer eBooks · doi:10.1007/978-0-387-34831-5_10 · Cited by 31 · see citing works
LINEX Loss Functions with Applications to Determining the Optimum Process Parameters
Chang, Y., & Hung, W. (2007) · Quality & Quantity · doi:10.1007/s11135-005-5425-3 · Cited by 28 · see citing works
The Role of Continuous Delivery in IT and Organizational PerformancePreprint
Forsgren, N., & Humble, J. (2015) · SSRN Electronic Journal · doi:10.2139/ssrn.2681909 · Cited by 24 · see citing works
Managing Trade-Offs in Adaptable Software Architectures
Schmerl, B. R., Kazman, R., Alí, N., Grundy, J., & Mistrík, I. (2016) · Elsevier eBooks · doi:10.1016/b978-0-12-802855-1.00001-0 · Cited by 24 · see citing works
DevOps Contract for Assuring Execution of IoT Microservices in the Edge
Truong, H., & Klein, P. (2019) · Internet of Things · doi:10.1016/j.iot.2019.100150 · Cited by 24 · see citing works
Developing a Conceptual Framework for Cloud Security Assurance
Duncan, B., Pym, D. J., & Whittington, M. (2013) · IEEE International Conference on Cloud Computing Technology and Science · doi:10.1109/cloudcom.2013.144 · Cited by 23 · see citing works
Proceedings of the Scientific Workshop Proceedings of XP2016
(2016) · doi:10.1145/2962695 · Cited by 23 · see citing works
John, W., Marchetto, G., Németh, F., Sköldström, P., Steinert, R., Meiroşu, C., Papafili, I., & Pentikousis, K. (2017) · IEEE Communications Magazine · doi:10.1109/mcom.2017.1500803cm · Cited by 21 · see citing works
(2000) · Technology of Object-Oriented Languages and Systems · doi:10.1109/tools.2000.891352 · Cited by 21 · see citing works
(2020) · Lecture notes in computer science · doi:10.1007/978-3-030-39306-9 · Cited by 19 · see citing works
Building open source security into agile application builds
Mackey, T. (2018) · Network Security · doi:10.1016/s1353-4858(18)30032-1 · Cited by 18 · see citing works
Software Process Improvement and Capability Determination
(2017) · Communications in computer and information science · doi:10.1007/978-3-319-67383-7 · Cited by 17 · see citing works
Truong, H., & Berardinelli, L. (2017) · doi:10.1145/3107091.3107093 · Cited by 13 · see citing works
Mimidis, A., Zaballa, E. O., Soler, J., Sayadi, B., Roullet, L., Rossem, S. V., Pinneterre, S., Paolino, M., Raho, D., Du, X., et al. (2018) · doi:10.1109/ict.2018.8464838 · Cited by 13 · see citing works
Advanced Software Engineering: Expanding the Frontiers of Software Technology
(2006) · Springer eBooks · doi:10.1007/978-0-387-34831-5 · Cited by 12 · see citing works
From Theory to Practice: The Challenges of a DevOps Infrastructure as Code Implementation
Siebra, C., Lacerda, R., Cerqueira, I., Quintino, J. P., Florentin, F., da Silva, F. Q. B., & Santos, A. L. M. (2018) · International Conference on Software Technologies (ICSOFT) · doi:10.5220/0006826104270436 · Cited by 10 · see citing works
Towards Cloud Native Continuous Delivery: An Industrial Experience Report
Hakli, A., Taibi, D., & Systä, K. (2018) · IEEE/ACM International Conference on Utility and Cloud Computing Companion (UCC Companion) · doi:10.1109/ucc-companion.2018.00074 · Cited by 10 · see citing works
Information Systems: Research, Development, Applications, Education
Wrycza, S., & Maślankowski, J. (2018) · Lecture notes in business information processing · doi:10.1007/978-3-030-00060-8 · Cited by 7 · see citing works
Adaptive Security for Software Systems
Abdelrazek, M., Grundy, J., & Ibrahim, A. (2016) · Elsevier eBooks · doi:10.1016/b978-0-12-802855-1.00005-8 · Cited by 6 · see citing works
When IoT Meets DevOps: Fostering Business Opportunities
Bănică, L., Polychronidou, P., Radulescu, M., & Stefan, C. (2018) · KnE Social Sciences · doi:10.18502/kss.v3i10.3542 · Cited by 6 · see citing works
Assurance of Data Security and Privacy in the Cloud: A Three-Dimensional Perspective
Kumar, R., & Goyal, R. (2019) · Software Quality Professional Magazine · Cited by 6 · see citing works
Erenkrantz, J. R., & Wright, H. K. (2010) · doi:10.1145/1833272 · Cited by 6 · see citing works
Cloud Computing and Open Source Software:Issues and Developments
Odun-Ayo, I. A., Falade, A. M., & Samuel, V. (2018) · Covenant University Repository (Covenant University) · Cited by 5 · see citing works
Devops based service orchestration in 5G virtualised networks - SONATA project demo
Xilouris, G. K., Kolometsos, S., Xilouris, C., Hidalgo, J. F., Siddiqui, S., Rocha, A., Castro, S., Vicens, F., & Martrat, J. (2017) · IEEE International Conference on Network Softwarization (NetSoft) · doi:10.1109/netsoft.2017.8004258 · Cited by 3 · see citing works
2017 IEEE Cybersecurity Development (SecDev)
(2017) · doi:10.1109/secdev41297.2017 · Cited by 3 · see citing works
Cuppett, M. S. (2016) · Apress eBooks · doi:10.1007/978-1-4842-2208-9_2 · Cited by 2 · see citing works
Reducing risk with end-to-end application security automation
Blake, C. (2020) · Network Security · doi:10.1016/s1353-4858(20)30019-2 · Cited by 2 · see citing works
Legal issues for free and open source software in government
Suzor, N. P., Fitzgerald, B. F., & Perry, M. (2007) · IFIP International Federation for Information Processing/IFIP · doi:10.1007/978-0-387-72486-7_41 · Cited by 1 · see citing works
Sharma, S. (2017) · doi:10.1002/9781119310778.ch1 · Cited by 1 · see citing works
Flagged first, then by citations
4 of the 101 references couldn’t be matched to a known paper.
Cited by
Sorted by citations
Toward successful DevSecOps in software development organizations: A decision-making framework
Akbar, M. A., Smolander, K., Mahmood, S., & Alsanad, A. (2022) · Information and Software Technology · doi:10.1016/j.infsof.2022.106894 · Cited by 128 · see citing works
CONFIGURATION MANAGEMENT IN THE MODERN ERA: BEST PRACTICES, INNOVATIONS, AND CHALLENGES
Farayola, O. A., Hassan, A. O., Adaramodu, O. R., Fakeyede, O. G., & Oladeinde, M. (2023) · Computer Science & IT Research Journal · doi:10.51594/csitrj.v4i2.613 · Cited by 64 · see citing works
Rojek, I., Mikołajewski, D., Mroziński, A., Macko, M., Bednarek, T., & Tyburek, K. (2025) · Energies · doi:10.3390/en18071706 · Cited by 62 · see citing works
Microservice security: a systematic literature review
Berardi, D., Giallorenzo, S., Mauro, J., Melis, A., Montesi, F., & Prandini, M. (2022) · PeerJ Computer Science · doi:10.7717/peerj-cs.779 · Cited by 80 · see citing works
DevOps: A Historical Review and Future Works
Gokarna, M., & Singh, R. (2021) · International Conference on Computing, Communication, and Intelligent Systems (ICCCIS) · doi:10.1109/icccis51004.2021.9397235 · Cited by 59 · see citing works
Abiona, O. O., Oladapo, O. J., Modupe, O. T., Oyeniran, O. C., Adewusi, A. O., & Komolafe, A. M. (2024) · World Journal of Advanced Engineering Technology and Sciences · doi:10.30574/wjaets.2024.11.2.0093 · Cited by 48 · see citing works
Secure software development and testing: A model-based methodology
Casola, V., Benedictis, A. D., Mazzocca, C., & Orbinato, V. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103639 · Cited by 45 · see citing works
Identifying the primary dimensions of DevSecOps: A multi-vocal literature review
Zhao, X., Clear, T., & Lal, R. (2024) · Journal of Systems and Software · doi:10.1016/j.jss.2024.112063 · Cited by 40 · see citing works
Mohammed, A. B., Fourati, L. C., & Fakhrudeen, A. M. (2023) · Computer Networks · doi:10.1016/j.comnet.2023.110140 · Cited by 39 · see citing works
Arif, T., Jo, B. H., & Park, J. H. (2025) · Sensors · doi:10.3390/s25082350 · Cited by 35 · see citing works
Szmeja, P., Fornés-Leal, A., Lacalle, I., Palau, C. E., Ganzha, M., Pawłowski, W., Paprzycki, M., & Schabbink, J. (2023) · Electronics · doi:10.3390/electronics12040854 · Cited by 35 · see citing works
Holding on to Compliance While Adopting DevSecOps: An SLR
Ramaj, X., Sánchez-Gordón, M., Gkioulos, V., Chockalingam, S., & Colomo-Palacios, R. (2022) · Electronics · doi:10.3390/electronics11223707 · Cited by 33 · see citing works
A survey on various security protocols of edge computing
Bhattacharya, T., Peddi, A. V., Ponaganti, S., & Veeramalla, S. T. (2024) · The Journal of Supercomputing · doi:10.1007/s11227-024-06678-6 · Cited by 28 · see citing works
A systematic literature review on Agile, Cloud, and DevOps integration: Challenges, benefits
Aouni, F. E., Moumane, K., Idri, A., Najib, M., & Jan, S. U. (2024) · Information and Software Technology · doi:10.1016/j.infsof.2024.107569 · Cited by 26 · see citing works
Alka, T. A., Sreenivasan, A., & Suresh, M. (2025) · Future Business Journal · doi:10.1186/s43093-025-00436-7 · Cited by 23 · see citing works
A systematic review on behavioral biases affecting individual investment decisions
Badola, S., Sahu, A. K., & Adlakha, A. (2023) · Qualitative Research in Financial Markets · doi:10.1108/qrfm-05-2022-0095 · Cited by 22 · see citing works
Caniglia, A., Dentamaro, V., Galantucci, S., & Impedovo, D. (2025) · Information and Software Technology · doi:10.1016/j.infsof.2024.107605 · Cited by 18 · see citing works
An Empirical Study of DevSecOps Focused on Continuous Security Testing
Feio, C., Santos, N., Escravana, N., & Pacheco, B. (2024) · IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · doi:10.1109/eurospw61312.2024.00074 · Cited by 18 · see citing works
A Unified Framework for Automating Software Security Analysis in DevSecOps
Aljohani, M. A., & Alqahtani, S. S. (2023) · 2023 International Conference on Smart Computing and Application (ICSCA) · doi:10.1109/icsca57840.2023.10087568 · Cited by 17 · see citing works
Monitoring solution for cloud-native DevSecOps
Sojan, A., Rajan, R., & Kuvaja, P. (2021) · IEEE International Conference on Smart Cloud (SmartCloud) · doi:10.1109/smartcloud52277.2021.00029 · Cited by 16 · see citing works
Integrating security controls in DevSecOps: Challenges, solutions, and future research directions
Sinan, M., Shahin, M., & Gondal, I. (2025) · Journal of Software: Evolution and Process · doi:10.1002/smr.70029 · Cited by 13 · see citing works
MetaSEnD: A Security Enabled Development Life Cycle Meta-Model
Granata, D., Rak, M., & Salzillo, G. (2022) · Proceedings of the 17th International Conference on Availability, Reliability and Security · doi:10.1145/3538969.3544463 · Cited by 13 · see citing works
Mapping DevOps capabilities to the software life cycle: A systematic literature review
Amaro, R., Pereira, R., & da Silva, M. M. (2024) · Information and Software Technology · doi:10.1016/j.infsof.2024.107583 · Cited by 28 · see citing works
When Security Meets Velocity: Modeling Continuous Security for Cloud Applications using DevSecOps
Kumar, R., & Goyal, R. (2021) · Lecture notes on data engineering and communications technologies · doi:10.1007/978-981-15-9651-3_36 · Cited by 11 · see citing works
Best Practices Evidenced for Software Development Based on DevOps and Scrum: A Literature Review
Pardo, M. A. P., Ordóñez, H., Cobos, C., & Muñoz, M. (2025) · Applied Sciences · doi:10.3390/app15105421 · Cited by 9 · see citing works
Thantharate, P., & Anurag, T. (2023) · International Conference on Contemporary Computing and Informatics (IC3I) · doi:10.1109/ic3i59117.2023.10398075 · Cited by 9 · see citing works
DevSecOps Approach in Software Development Case Study: Public Company Logistic Agency
Efendi, M., Raharjo, T., & Suhanto, A. (2021) · International Conference on Informatics, Multimedia, Cyber and Information System (ICIMCIS) · doi:10.1109/icimcis53775.2021.9699316 · Cited by 9 · see citing works
Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review
Mohammed, K., Shanmugam, B., & El-Den, J. (2025) · Technologies · doi:10.3390/technologies13120548 · Cited by 8 · see citing works
Towards People Maturity for Secure Development and Operations: A vision
Akbar, M. A., Rafi, S., Hyrynsalmi, S., & Khan, A. A. (2024) · International Conference on Evaluation and Assessment in Software Engineering (EASE) · doi:10.1145/3661167.3661238 · Cited by 7 · see citing works
Towards Automated Continuous Security Compliance
Angermeir, F., Fischbach, J., Moyón, F., & Méndez, D. (2024) · Proceedings of the ... ACM-IEEE International Symposium on Empirical Software Engineering and Measurement/International Symposium on Empirical Software Engineering and Measurement · doi:10.1145/3674805.3690748 · Cited by 7 · see citing works
Software supply chain: A taxonomy of attacks, mitigations and risk assessment strategies
Gokkaya, B., Aniello, L., & Halak, B. (2026) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2025.104324 · Cited by 7 · see citing works
AI Empowered DevSecOps Security for Next Generation Development
Yadav, B., Choudhary, G., Shandilya, S. K., & Dragoni, N. (2021) · Communications in computer and information science · doi:10.1007/978-3-030-93135-3_3 · Cited by 7 · see citing works
Nedeltcheva, G. N., Ruiz, A. E. D. L. F., Orue-Echevarria, L., Bat, N., & Blasi, L. (2022) · IEEE International Conference on Software Architecture Companion (ICSA-C) · doi:10.1109/icsa-c54293.2022.00048 · Cited by 7 · see citing works
Building Software Applications Securely with DevSecOps: A Socio-Technical Perspective
Naidoo, R., & Möller, N. (2022) · European Conference on Cyber Warfare and Security · doi:10.34190/eccws.21.1.295 · Cited by 11 · see citing works
Product Incremental Security Risk Assessment Using DevSecOps Practices
Dupont, S., Yautsiukhin, A., Ginis, G., Iadarola, G., Fagnano, S., Martinelli, F., Ponsard, C., Legay, A., & Massonet, P. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-25460-4_38 · Cited by 7 · see citing works
Management of DevSecOps Process: An Empirical Investigation
Akbar, M. A., Khan, A. A., Mahmood, S., & Hyrynsalmi, S. (2025) · Software Practice and Experience · doi:10.1002/spe.3419 · Cited by 6 · see citing works
Khadem, E. A., & Movaghar, A. (2025) · Array · doi:10.1016/j.array.2025.100547 · Cited by 10 · see citing works
Ramaj, X., Sánchez‐Gordón, M., Gkioulos, V., & Colomo‐Palacios, R. (2024) · doi:10.1145/3643662.3643954 · Cited by 7 · see citing works
Integration of Security in the DevOps Methodology
Sermpezis, E., Karapiperis, D., & Tjortjis, C. (2024) · International Conference on Information, Intelligence, Systems & Applications (IISA) · doi:10.1109/iisa62523.2024.10786669 · Cited by 6 · see citing works
Security Practices in Agile Software Development: A Mapping Study
Selva-Mora, A., & López, C. Q. (2024) · ACM/IEEE International Workshop on Software-intensive Business (IWSiB) · doi:10.1145/3643690.3648241 · Cited by 6 · see citing works
Efficient secure DevOps using process mining and Attack Defense Trees
Okubo, T., & Kaiya, H. (2022) · Procedia Computer Science · doi:10.1016/j.procs.2022.09.079 · Cited by 5 · see citing works
Migration From DevOps to DevSecOps: A Complete Migration Framework, Challenges, and Evaluation
N., N. T., & Khandebharad, A. (2021) · International Journal of Cloud Applications and Computing · doi:10.4018/ijcac.2022010102 · Cited by 5 · see citing works
Systematic Literature Review on Agile, Cloud, and Devops Integration: Challenges, BenefitsPreprint
Aouni, F. E., Moumane, K., Idri, A., Najib, M., & Jan, S. U. (2024) · SSRN Electronic Journal · doi:10.2139/ssrn.4827875 · Cited by 5 · see citing works
Dasanayake, S. D. L. V., Senanayake, J., & Wijayanayake, J. I. (2025) · International Conference on Advanced Research in Computing (ICARC) · doi:10.1109/icarc64760.2025.10963292 · Cited by 4 · see citing works
Open-Source Software Security Challenges and Policies for Cloud Enterprises
Gupta, S., & Vadlamudi, S. (2023) · International Conference on Intelligent Communication and Computational Techniques (ICCT) · doi:10.1109/icct56969.2023.10076194 · Cited by 4 · see citing works
Genai in DevOps: Boon or a Bane
Kam, H., & Hemon, A. (2025) · International Convention on Information and Communication Technology, Electronics and Microelectronics · doi:10.1109/mipro65660.2025.11131737 · Cited by 3 · see citing works
Enhancing the security of data in cloud computing environments using Remote Data Auditing
Akmal, M., Syangtan, B., & Alchouemi, A. (2021) · International Conference on Innovative Technologies in Intelligent Systems and Industrial Applications (CITISIA) · doi:10.1109/citisia53721.2021.9719899 · Cited by 3 · see citing works
Application Deployment and Performance Measurement in Serverless Cloud for Microservices
Jhingran, S., & Rakesh, N. (2023) · International Conference on Sustainable Emerging Innovations in Engineering and Technology (ICSEIET) · doi:10.1109/icseiet58677.2023.10303332 · Cited by 3 · see citing works
Ramesh, R. S. (2024) · International Conference on Communications and Computer Science (InCCCS) · doi:10.1109/incccs60947.2024.10593332 · Cited by 2 · see citing works
Implementing Honeypots for Detecting Cyber Threats with AWS using the ELK
Кошелюк, В., & Tulashvili, Y. (2025) · International Journal of Computing · doi:10.47839/ijc.23.4.3761 · Cited by 2 · see citing works
USE OF DEVSECOPS APPROACH FOR INFORMATION SECURITY THREATS ANALYSIS
Сусукайло, В. (2021) · Cybersecurity Education Science Technique · doi:10.28925/2663-4023.2021.14.2635 · Cited by 2 · see citing works
Hybrid Optimization-Based Secure Routing Protocol for Cloud Computing
Vatchala, B., & Preethi, G. (2022) · International Journal of Computer Networks And Applications · doi:10.22247/ijcna/2022/212338 · Cited by 2 · see citing works
Multivocal Literature Review on the Security of DevSecOp
Kanstantsin, Z. (2022) · Asian Journal of Research in Computer Science · doi:10.9734/ajrcos/2022/v14i230329 · Cited by 2 · see citing works
Identification of Influential Factors for Successful Adoption of DevOps and Cloud
Ramzan, S., Khan, S. U. R., Hussain, S., Wang, W., & Tang, M.-H. (2023) · International Conference on Evaluation and Assessment in Software Engineering (EASE) · doi:10.1145/3593434.3594239 · Cited by 2 · see citing works
Keyword Extraction From Specification Documents for Planning Security Mechanisms
Poozhithara, J. J., Asuncion, H. U., & Lagesse, B. (2023) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1109/icse48619.2023.00143 · Cited by 2 · see citing works
Byrne, K., & Cevenini, A. (2023) · Lecture notes in electrical engineering · doi:10.1007/978-3-031-29078-7_32 · Cited by 2 · see citing works
DevOPS Now and ThenPreprint
Singh, R. (2020) · Preprints.org · doi:10.20944/preprints202011.0410.v1 · Cited by 3 · see citing works
AUTOMATING CLOUD SECURITY AND COMPLIANCE: TOOLS AND TECHNIQUES FOR SREsPreprint
Devan, K. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5049834 · Cited by 2 · see citing works
The Security Implications of Microservices in Modern Software Development
Fatima, A., Kumar, C. K., Panjathan, S. U., & Doss, S. (2025) · IGI Global eBooks · doi:10.4018/979-8-3373-0365-9.ch014 · Cited by 1 · see citing works
A BizDevOps-Aligned Framework for Integrating Security Practices in Agile Software Development
Selva-Mora, A. (2025) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1109/icse-companion66252.2025.00026 · Cited by 1 · see citing works
Sok: Zero Trust as a Strategy to Address Devsecops Challenges
Nair, A., Nicolazzo, S., Nocera, A., A., R. R. K., & Vinod, P. (2025) · IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · doi:10.1109/eurospw67616.2025.00069 · Cited by 1 · see citing works
Enhancing Security in SDLC with DevOps Tools and Practices
Manjeti, V. B., Penumajji, S., Patlolla, S. R., Abburi, Y. S. S., Teppala, J., & Patro, S. G. K. (2025) · International Conference on Next Generation of Green Information and Emerging Technologies (GIET) · doi:10.1109/giet65294.2025.11234805 · Cited by 1 · see citing works
An Integrated Cybersecurity Framework for Software Development and Risk‐Aware Practices in the SDLC
Hashimi, H. A. (2025) · Journal of Software Evolution and Process · doi:10.1002/smr.70075 · Cited by 1 · see citing works
Incorporating of Security Methods into the Software Development Lifecycle Process (SDLC)
Aishwarya, V., Pediredla, S., Radhika, B., .T.Vasanthi, B. K. A., Padmanaban, K., & Velmurugan, A. (2023) · International Conference on Computer Communication and Informatics (ICCCI) · doi:10.1109/iccci56745.2023.10128620 · Cited by 1 · see citing works
An Exploratory Analysis of Cloud Security Models in Social Networks
Vajjhala, N. R. (2023) · International Conference on Pervasive Computing and Social Networking (ICPCSN) · doi:10.1109/icpcsn58827.2023.00159 · Cited by 1 · see citing works
Peer Review #1 of "Microservice security: a systematic literature review (v0.1)"
(2022) · PeerJ Computer Science · doi:10.7287/peerj-cs.779v0.1/reviews/1
Peer Review #3 of "Microservice security: a systematic literature review (v0.2)"
(2022) · PeerJ Computer Science · doi:10.7287/peerj-cs.779v0.2/reviews/3
Peer Review #3 of "Microservice security: a systematic literature review (v0.1)"
(2022) · PeerJ Computer Science · doi:10.7287/peerj-cs.779v0.1/reviews/3
Peer Review #2 of "Microservice security: a systematic literature review (v0.2)"
(2022) · PeerJ Computer Science · doi:10.7287/peerj-cs.779v0.2/reviews/2
Peer Review #2 of "Microservice security: a systematic literature review (v0.1)"
(2022) · PeerJ Computer Science · doi:10.7287/peerj-cs.779v0.1/reviews/2
Ramaj, X., Sánchez‐Gordón, M., Colomo‐Palacios, R., & Gkioulos, V. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-61382-1_6 · Cited by 2 · see citing works
Jones, A. J. (2024) · Advances in information security, privacy, and ethics book series · doi:10.4018/979-8-3373-0588-2.ch010
Empirical Insights into Product Security Challenges and Practices in Software Development
Rafi, S., Akbar, M. A., & Khan, A. A. (2024) · International Conference on Frontiers of Information Technology (FIT) · doi:10.1109/fit63703.2024.10838436
Streamlining CI/CD Pipelines with DEVOPS, SRE and Platform EngineeringPreprint
Devan, K. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5049838
Ghai, A. S., Sejwal, L., Yadav, C., & Vyas, S. (2025) · Communications in computer and information science · doi:10.1007/978-3-031-86072-0_7
Embedding Security into DevOps
Elbaghazaoui, B. E., & Allaoui, R. (2025) · IGI Global eBooks · doi:10.4018/979-8-3373-0365-9.ch008
SECURITY AS CODE USING AGENTIC AI: EFFICIENCY IN ENSURING SOFTWARE DEVELOPMENT LIFECYCLE SECURITY
Vakhula, O. P., & Vorobets, P. A. (2025) · Komp'ûternì sistemi ta merežì · doi:10.23939/csn2025.02.013
Almarri, S., Issa, W., Keshk, M., Turnbull, B., & Moustafa, N. (2026) · Electronics · doi:10.3390/electronics15102133
Mata, P. N., Ferreira, J. C., & Martins, J. M. (2026) · Archives of Computational Methods in Engineering · doi:10.1007/s11831-026-10606-7
Вахула, О., Opirskyy, I., & Mykhaylova, O. (2023) · Workshop on Cybersecurity Providing in Information and Telecommunication Systems (CPITS) · doi:10.55056/ceur-ws.org/vol-3550/paper5.pdf
Amaro, R., Pereira, R., & da Silva, M. M. (2026) · Software Quality Journal · doi:10.1007/s11219-026-09765-4
Scalable Threat Assessment Machine Learning Framework for CI/CD DevSecOps Pipelines
Kandadi, A., Gupta, S., Bhaskaran, R., & Muntean, C. H. (2026) · International Conference on Federated Learning and Intelligent Computing Systems (FLICS) · doi:10.1109/flics70075.2026.11621927
A Practical Guide for Application Security and Quality Baselines in the Software Deployment Process
Harseva, M., & Petrov, M. (2026) · Communications in computer and information science · doi:10.1007/978-3-032-24513-7_8
Secure Programming and Secure Design in DevSecOps: A Literature-Based Conceptual Synthesis
Al-Qadda, F. A., Alhumaidi, A. Y., & Saqib, N. A. (2026) · Network · doi:10.3390/network6030075
Veerasamy, M., Pakkirisamy, A., & Thirugnanasambanthan, P. (2026) · VFAST Transactions on Software Engineering · doi:10.21015/vtse.v14i3.2498
An Intelligent DevSecOps Framework for Secure and Adaptive Enterprise Software Delivery
Sura, N. K., Gundala, M., & Hakeem, M. (2026) · International Conference Computational Vision and Bio Inspired Computing · doi:10.1109/iccvbic71195.2026.11689485
Schuessler, J. H. (2026) · Computers & Security · doi:10.1016/j.cose.2026.105212
- Authors
- Kumar, R., & Goyal, R.
- Affiliations
- Guru Gobind Singh Indraprastha University (IN)
- Corresponding author
- Goyal, Rinkaj
- Venue
- Computers & Security
- Publisher
- Elsevier BV
- Published
- 2020-10
- Volume
- 97
- Pages
- 101967
- ISSN
- 0167-4048 (ISSN-L)
- OpenAlex
- W3042680674
- Cited by
- 97
- References
- 101
- Citations by year
- 2026: 13 · 2025: 24 · 2024: 16 · 2023: 18 · 2022: 16 · 2021: 9 · 2020: 1
- FWCI
- 9.81
- Type
- journal article
- Language
- en
- Open access
- closed
- Licence
- Locations
- Computers & Security (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Software Engineering Techniques and Practices
- Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Keywords
- DevSecOps, open source software, cloud computing, security assurance, agile software development, security metrics, data security and privacy
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
