The DOI matches its Crossref record; 8 of the 8 references it cites were found in a registry or an index.
DevSecOps in Finance: Strengthening the Security Model of Applications
Abstract
DevOps is a software development and IT operations approach that emphasizes collaboration, automation, and efficiency throughout the software development lifecycle (SDLC). DevSecOps builds on this idea by adding security measures at all stages of the SDLC. Through an in-depth analysis of industry trends, regulatory requirements, and current publications, this paper aims to describe a DevSecOps framework specifically for financial applications, look for threats and vulnerabilities, and offer opinions on best practices. It also talks about why using DevSecOps gives financial companies an edge over the standard development process. It examines the threat modeling of a proposed financial application’s architecture and the tools and strategies that must be utilized to safeguard the system.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“Organisations often encounter resistance to change, skill shortages, and the technical complexity of integrating security tools into Continuous Integration/Continuous Deployment (CI/CD) pipelines.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [19]
In the citing paper
“Highly regulated sectors such as healthcare, finance, and government face additional hurdles due to stringent compliance requirements, further complicating DevSecOps implementation.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [19]
Citations
Cites
Challenges and solutions when adopting DevSecOps: A systematic review
Rajapakse, R. N., Zahedi, M., Babar, M. A., & Shen, H. (2022) · Information and Software Technology · doi:10.1016/j.infsof.2021.106700 · Cited by 235
Rangnau, T., Buijtenen, R. V., Fransen, F., & Türkmen, F. (2020) · IEEE International Enterprise Distributed Object Computing Conference (EDOC) · doi:10.1109/edoc49727.2020.00026 · Cited by 99
Lombardi, F., & Fanton, A. (2023) · Software Quality Journal · doi:10.1007/s11219-023-09619-3 · Cited by 39
Embracing IaC Through the DevSecOps Philosophy: Concepts, Challenges, and a Reference Framework
Alonso, J., Piliszek, R., & Cankar, M. (2023) · IEEE Software · doi:10.1109/ms.2022.3212194 · Cited by 30
Design and Practice of Security Architecture via DevSecOps Technology
Chen, T., & Suo, H. (2022) · 2022 IEEE 13th International Conference on Software Engineering and Service Science (ICSESS) · doi:10.1109/icsess54813.2022.9930212 · Cited by 17 · cited 1×
“Chen and Suo suggest that security techniques should be used at all stages of the software development lifecycle (SDLC) to find and fix security risks [1].”
BackgroundDesign and Implementation of Security Test Pipeline based on DevSecOps
Sun, X., Cheng, Y., Qu, X., & Li, H. (2021) · IEEE Advanced Information Management, Communicates, Electronic and Automation Control Conference (IMCEC) · doi:10.1109/imcec51613.2021.9482270 · Cited by 10
Secure Change Management Process: On the Effectiveness of DevSecOps
Kanstantsin, Z. (2022) · Computer Science and Information Technology · doi:10.13189/csit.2022.100401 · Cited by 5
Cited by
Sorted by citations
Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review
Mohammed, K., Shanmugam, B., & El-Den, J. (2025) · Technologies · doi:10.3390/technologies13120548 · Cited by 8
Metadata
- Authors
- David, P., Kushwaha, M. K., & Suseela, G.
- Affiliations
- SRM Institute of Science and Technology (IN)
- ORCID
- Suseela, G.
- Venue
- 2024 4th International Conference on Data Engineering and Communication Systems (ICDECS)
- Publisher
- IEEE
- Published
- 2024-03-22
- Pages
- 1-6
- OpenAlex
- W4394994820
- Cited by
- 2
- References
- 8
- Citations by year
- 2025: 2
- FWCI
- 0.76
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- International Conference on Data Engineering and Communication Systems (ICDECS) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Software Engineering Techniques and Practices
- Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Keywords
- DevSecOps, financial applications, software security, software development lifecycle, threat modeling, security vulnerabilities, security best practices, financial regulation, security automation
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: DevSecOps in Finance: Strengthening the Security Model of Applications. https://app.cochat.ai/papers/10.1109/icdecs59733.2023.10502917
- The paper
- David, P., Kushwaha, M. K., & Suseela, G. (2024). DevSecOps in Finance: Strengthening the Security Model of Applications. 2024 4th International Conference on Data Engineering and Communication Systems (ICDECS). https://doi.org/10.1109/icdecs59733.2023.10502917
