The DOI matches its Crossref record.
Design and Practice of Security Architecture via DevSecOps Technology
Abstract
DevSecOps is the abbreviation of “development, security and operation and maintenance”[1]. It automatically integrates security at each stage of the software development life cycle, including initial design, integration, testing, deployment and software delivery. DevSecOps can seamlessly integrate system security into the DevOps process, which makes application and infrastructure security the common responsibility of development, security and it operations teams. This study designed an integrated operation and maintenance platform of DevSecOps, which was of great significance to improve the efficiency of enterprise research and development and realize the automation of security protection.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“Highly regulated sectors such as healthcare, finance, and government face additional hurdles due to stringent compliance requirements, further complicating DevSecOps implementation.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [18]
In the citing paper
“Organisations often encounter resistance to change, skill shortages, and the technical complexity of integrating security tools into Continuous Integration/Continuous Deployment (CI/CD) pipelines.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [18]
Citations
Cited by
Sorted by citations
Implementing and Automating Security Scanning to a DevSecOps CI/CD Pipeline
Marandi, M., Bertia, A., & Silas, S. (2023) · doi:10.1109/wconf58270.2023.10235015 · Cited by 26
“[3] (Chen and Suo) developed a combined operation and maintenance platform of DevSecOps to increase the efficiency of company RnD (research and development) and comprehend security protection automation.”
BackgroundThantharate, P., & Anurag, T. (2023) · International Conference on Contemporary Computing and Informatics (IC3I) · doi:10.1109/ic3i59117.2023.10398075 · Cited by 9
“The [8] [11] propose CyberDevOps and enterprise DevSecOps architectures to enhance security in DevOps by integrating security tools, standards, and knowledge across the development lifecycle.”
MethodEvolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review
Mohammed, K., Shanmugam, B., & El-Den, J. (2025) · Technologies · doi:10.3390/technologies13120548 · Cited by 8
Khadem, E. A., & Movaghar, A. (2025) · Array · doi:10.1016/j.array.2025.100547 · Cited by 10
Securing Infrastructure as Code (IaC) through DevSecOps:A Comprehensive Risk Management Framework
Zeini, A., Lennon, R. G., & Lennon, P. (2023) · 2023 Cyber Research Conference - Ireland (Cyber-RCI) · doi:10.1109/cyber-rci59474.2023.10671452 · Cited by 4
“The secure by design approach involves identifying potential security attacks and vulnerabilities while designing secure components and interfaces from the outset to address security concerns as early as possible [18].”
Background
Metadata
- Authors
- Chen, T., & Suo, H.
- Affiliations
- KPMG Information Technology Services (Nanjing) Co., LTD,Nanjing,Jiangsu,China
- Jiangsu Provincial People’s Hospital,Nanjing,Jiangsu,China
- Venue
- 2022 IEEE 13th International Conference on Software Engineering and Service Science (ICSESS)
- Publisher
- IEEE
- Published
- 2022-10-21
- Pages
- 310-313
- OpenAlex
- W4308078918
- Cited by
- 17
- References
- 0
- Citations by year
- 2026: 4 · 2025: 5 · 2024: 4 · 2023: 4
- FWCI
- 2.91
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- IEEE International Conference on Software Engineering and Service Science (ICSESS) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Software Engineering Techniques and Practices
- Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
- Physical Sciences › Computer Science › Computer Networks and Communications › Software System Performance and Reliability
- Keywords
- DevSecOps, security architecture, software development lifecycle, security automation, software security, infrastructure protection
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
