The DOI matches its Crossref record.
Design and Practice of Security Architecture via DevSecOps Technology
Abstract
DevSecOps is the abbreviation of “development, security and operation and maintenance”[1]. It automatically integrates security at each stage of the software development life cycle, including initial design, integration, testing, deployment and software delivery. DevSecOps can seamlessly integrate system security into the DevOps process, which makes application and infrastructure security the common responsibility of development, security and it operations teams. This study designed an integrated operation and maintenance platform of DevSecOps, which was of great significance to improve the efficiency of enterprise research and development and realize the automation of security protection.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“Highly regulated sectors such as healthcare, finance, and government face additional hurdles due to stringent compliance requirements, further complicating DevSecOps implementation.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [18]
In the citing paper
“Organisations often encounter resistance to change, skill shortages, and the technical complexity of integrating security tools into Continuous Integration/Continuous Deployment (CI/CD) pipelines.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [18]
Citations
Cited by
Sorted by citations
Implementing and Automating Security Scanning to a DevSecOps CI/CD Pipeline
Marandi, M., Bertia, A., & Silas, S. (2023) · doi:10.1109/wconf58270.2023.10235015 · Cited by 26
“[3] (Chen and Suo) developed a combined operation and maintenance platform of DevSecOps to increase the efficiency of company RnD (research and development) and comprehend security protection automation.”
BackgroundThantharate, P., & Anurag, T. (2023) · International Conference on Contemporary Computing and Informatics (IC3I) · doi:10.1109/ic3i59117.2023.10398075 · Cited by 9
“The [8] [11] propose CyberDevOps and enterprise DevSecOps architectures to enhance security in DevOps by integrating security tools, standards, and knowledge across the development lifecycle.”
MethodEvolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review
Mohammed, K., Shanmugam, B., & El-Den, J. (2025) · Technologies · doi:10.3390/technologies13120548 · Cited by 8
Khadem, E. A., & Movaghar, A. (2025) · Array · doi:10.1016/j.array.2025.100547 · Cited by 10
Securing Infrastructure as Code (IaC) through DevSecOps:A Comprehensive Risk Management Framework
Zeini, A., Lennon, R. G., & Lennon, P. (2023) · 2023 Cyber Research Conference - Ireland (Cyber-RCI) · doi:10.1109/cyber-rci59474.2023.10671452 · Cited by 4
“The secure by design approach involves identifying potential security attacks and vulnerabilities while designing secure components and interfaces from the outset to address security concerns as early as possible [18].”
BackgroundAutomation and DevSecOps: Streamlining Security Measures in Financial System
Kushwaha, M. K., David, P., & Suseela, G. (2024) · IEEE International Conference on Electronics, Computing and Communication Technologies (CONECCT) · doi:10.1109/conecct62155.2024.10677271 · Cited by 4
“Chen and Suo [3] developed a combined DevSecOps operation and maintenance platform to improve the productivity of their company's research and development (R&D) and understand the automation of security measures.”
BackgroundDevSecOps in Finance: Strengthening the Security Model of Applications
David, P., Kushwaha, M. K., & Suseela, G. (2024) · 2024 4th International Conference on Data Engineering and Communication Systems (ICDECS) · doi:10.1109/icdecs59733.2023.10502917 · Cited by 2
“Chen and Suo suggest that security techniques should be used at all stages of the software development lifecycle (SDLC) to find and fix security risks [1].”
BackgroundAkkemgari, S. K. R., & Binny, B. (2025) · International Conference on Intelligent Communication Technologies and Virtual Mobile Networks (ICICV) · doi:10.1109/icicv64824.2025.11085891 · Cited by 2
“As a result, security teams are often forced into a reactive mode, addressing vulnerabilities only after they've been exploited [10].”
Devsecops-Driven Security Controls for ERP Release Pipelines
Gangaiah, Y. K., Pappu, K., & Thanvi, Y. S. (2026) · International Symposium on Digital Forensics and Security (ISDFS) · doi:10.1109/isdfs69419.2026.11459076 · Cited by 2
“Modern DevSecOps practice advocates embedding security controls into the CI/CD pipeline so that defects are detected at build time rather than in production [6], [7].”
Enhancing DevOps Using Intelligent Techniques
Shankar, S. P., Varadam, D., Bharadwaj, A., Dayananda, S., Agrawal, S., Jha, A., & -, S. T. V. (2023) · Advances in business information systems and analytics book series · doi:10.4018/978-1-6684-5859-4.ch012 · Cited by 2
DevSecOps: Improving Software Development Life Cycle
Paranjpe, S. S., & Pachlor, R. (2024) · International Journal of Advanced Research in Science Communication and Technology · doi:10.48175/ijarsct-18379
DevSecOps: Improving Software Development Life Cycle
Ranka, R., Paranjpe, S. S., & Pachlor, R. (2024) · International Journal of Advanced Research in Science Communication and Technology · doi:10.48175/ijarsct-18739
DevSecOps Practices for GDPR, HIPAA or LGPD Compliance in Software Development: A Systematic Review
de Freitas, D. S. A., de Oliveira, A. A., Moreno, E. D., & da Silva, G. J. F. (2025) · Anais do Simpósio Brasileiro de Sistemas de Informação (SBSI) · doi:10.5753/sbsi.2025.246400
Benbenisty, Y., Hadar, I., & Luria, G. (2026) · Applied Sciences · doi:10.3390/app16083618 · Cited by 1
Implementing DevSecOps: A Systematic Literature Review on Integrating Security into DevOps
Guyong, J. A., Balaybay, R. M., Macario, J. M., Pangan, E. J., & Clemente, J. R. D. (2025) · World Symposium on Software Engineering (WSSE) · doi:10.1145/3779657.3779664
“Chen and Suo [35] mention that with integration, duplicate reviews and unnecessary builds are eliminated, resulting in a more efficient development.”
Stanišić, S., Jovanović, Ž., & Đorđević, B. (2026) · International Symposium INFOTEH-JAHORINA (INFOTEH) · doi:10.1109/infoteh68759.2026.11477587
“[10] developed a resilient cloud cluster model integrating automated vulnerability assessment and risk calculation, demonstrating how DevSecOps principles can enhance security in distributed healthcare data systems.”
Metadata
- Authors
- Chen, T., & Suo, H.
- Affiliations
- KPMG Information Technology Services (Nanjing) Co., LTD,Nanjing,Jiangsu,China
- Jiangsu Provincial People’s Hospital,Nanjing,Jiangsu,China
- Venue
- 2022 IEEE 13th International Conference on Software Engineering and Service Science (ICSESS)
- Publisher
- IEEE
- Published
- 2022-10-21
- Pages
- 310-313
- OpenAlex
- W4308078918
- Cited by
- 17
- References
- 0
- Citations by year
- 2026: 4 · 2025: 5 · 2024: 4 · 2023: 4
- FWCI
- 2.91
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- IEEE International Conference on Software Engineering and Service Science (ICSESS) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Software Engineering Techniques and Practices
- Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
- Physical Sciences › Computer Science › Computer Networks and Communications › Software System Performance and Reliability
- Keywords
- DevSecOps, security architecture, software development lifecycle, security automation, software security, infrastructure protection
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
