Cited by 48Software Engineering Techniques and PracticesWeb Application Security VulnerabilitiesInformation and Cyber Security

The emergence and importance of DevSecOps: Integrating and reviewing security practices within the DevOps pipeline

Open access
Oluwatosin Oluwatimileyin Abiona, Oluwatayo Jacob Oladapo, Oluwole Temidayo Modupe, Oyekunle Claudius Oyeniran, Adebunmi Okechukwu Adewusi, Abiola Moshood Komolafe·2024·World Journal of Advanced Engineering Technology and Sciences

Abstract

The emergence of DevSecOps marks a significant paradigm shift in software development, focusing on integrating security practices seamlessly into the DevOps pipeline. This paper explores the evolution, principles, and importance of DevSecOps in contemporary software engineering. DevSecOps arises from the recognition that traditional security measures often lag behind the rapid pace of DevOps development cycles, leading to vulnerabilities and breaches. By integrating security early and continuously throughout the software development lifecycle, DevSecOps aims to proactively identify and mitigate risks without impeding the agility and speed of DevOps practices. This paper delves into the core principles of DevSecOps, emphasizing automation, collaboration, and cultural transformation. Automation streamlines security processes, enabling the automated testing and validation of code for vulnerabilities. Collaboration fosters communication and shared responsibility among developers, operations, and security teams, breaking down silos and promoting a collective approach to security. Cultural transformation involves cultivating a security-first mindset across the organization, where security is not an afterthought but an inherent part of the development process. The importance of DevSecOps cannot be overstated in today's digital landscape, where cyber threats are omnipresent and the cost of security breaches is staggering. By integrating security into every stage of the DevOps pipeline, organizations can enhance their resilience to cyber attacks, comply with regulatory requirements, and build trust with customers. DevSecOps represents a holistic approach to software development that prioritizes security without compromising speed or innovation. Embracing DevSecOps principles is imperative for organizations seeking to stay ahead in an increasingly complex and hostile digital environment.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.30574/wjaets.2024.11.2.0093

Cites

44 of 44 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • The study primarily offers a conceptual discussion with limited empirical evidence or case studies, which may restrict its practical applicability and the generalisability of its recommendations.

    “However, the study primarily offers a conceptual discussion with limited empirical evidence or case studies, which may restrict its practical applicability and the generalisability of its recommendations.”

    From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [53]

    The paper’s §2, “Evolution of DevSecOps,” discusses the development of DevSecOps through cited literature, while §7, “Recommendation and Conclusion,” offers general recommendations. These passages support describing the paper as primarily conceptual rather than an empirical study. They do not state that limited case studies or empirical evidence restrict the practical applicability or generalisability of its recommendations; that is the citing author’s assessment. (LLM, conf=0.82)

    Experimental — accuracy not yet measured

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 6

  1. Adeleke, O.K., Segun, I.B. and Olaoye, A.I.C., 2019. Impact of internal control on fraud prevention in deposit money banks in Nigeria. Nigerian Studies in Economics and Management Sciences, 2(1), pp.42-51.
  2. Onoyere, I.O and Adekanmbi A. O. O., 2012. Sustainable Energy Development In a Developing Economy: The Nigerian Experience. ATBU Journal of Science, Technology and Education, 1, pp 142 -150.
  3. Sánchez-Gordón, M. and Colomo-Palacios, R., 2020, June. Security as culture: a systematic literature review of DevSecOps. In Proceedings of the IEEE/ACM 42nd International Conference on Software Engineering Workshops (pp. 266-269).
  4. Vincent, A.A., Segun, I.B., Loretta, N.N. and Abiola, A., 2021. Entrepreneurship, agricultural value-chain and exports in Nigeria. United International Journal for Research and Technology, 2(08), pp.1-8.
  5. Vyas, B., 2023. Security Challenges and Solutions in Java Application Development. Eduzone: International Peer Reviewed/Refereed Multidisciplinary Journal, 12(2), pp.268-275.
  6. Zaydi, M. and Nassereddine, B., 2020. DevSecOps PRACTICES FOR AN AGILE AND SECURE IT SERVICE MANAGEMENT. Journal of Management Information & Decision Sciences, 23(2).

Cited by

Sorted by citations

Authors
Abiona, O. O., Oladapo, O. J., Modupe, O. T., Oyeniran, O. C., Adewusi, A. O., & Komolafe, A. M.
Corresponding author
Oluwatosin Oluwatimileyin Abiona
Venue
World Journal of Advanced Engineering Technology and Sciences
Published
2024-03-30
Volume
11
Issue
2
Pages
127-133
ISSN
2582-8266 (ISSN-L)
OpenAlex
W4392740881
Cited by
48
References
43
Citations by year
2026: 10 · 2025: 23 · 2024: 15
FWCI
18.05
Type
journal article
Language
en
Open access
Licence
cc-by
Locations
World Journal of Advanced Engineering Technology and Sciences (publishedVersion, cc-by)
Topics
  • Physical Sciences › Computer Science › Information Systems › Software Engineering Techniques and Practices
  • Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
  • Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
Keywords
DevSecOps, DevOps pipelines, security integration, software development lifecycle, security automation, vulnerability testing, security culture, cross-functional collaboration, security breaches, regulatory compliance, organizational resilience

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review