{"id":"https://openalex.org/W3044917895","doi":null,"title":"Application Security Review Criteria for DevSecOps Processes","display_name":"Application Security Review Criteria for DevSecOps Processes","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3044917895","mag":"3044917895"},"language":"en","primary_location":{"id":"pmh:oai:DiVA.org:ltu-79305","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:ltu:diva-79305","pdf_url":null,"source":{"id":"https://openalex.org/S7407055297","display_name":"DiVA (Lule\u00e5 University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I190632392","host_organization_name":"Lule\u00e5 University of Technology","host_organization_lineage":["https://openalex.org/I190632392"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/bachelorThesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:ltu:diva-79305","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010398383","display_name":"Jonas Heilmann","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Jonas Heilmann","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5010398383"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.6035000085830688,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.6035000085830688,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.36890000104904175,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.016100000590085983,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/devsecops","display_name":"DevSecOps","score":0.9980000257492065},{"id":"https://openalex.org/keywords/software-security","display_name":"software security","score":0.9409999847412109},{"id":"https://openalex.org/keywords/security-integration","display_name":"security integration","score":0.675000011920929},{"id":"https://openalex.org/keywords/devops","display_name":"DevOps","score":0.7710000276565552},{"id":"https://openalex.org/keywords/security-measurement","display_name":"security measurement","score":0.875},{"id":"https://openalex.org/keywords/security-standards","display_name":"security standards","score":0.7089999914169312},{"id":"https://openalex.org/keywords/security-controls","display_name":"security countermeasures","score":0.8059999942779541},{"id":"https://openalex.org/keywords/agile-software-development","display_name":"agile software development","score":0.7829999923706055},{"id":"https://openalex.org/keywords/security-best-practices","display_name":"security best practices","score":0.5199999809265137}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.41108548641204834},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33422964811325073}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:DiVA.org:ltu-79305","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:ltu:diva-79305","pdf_url":null,"source":{"id":"https://openalex.org/S7407055297","display_name":"DiVA (Lule\u00e5 University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I190632392","host_organization_name":"Lule\u00e5 University of Technology","host_organization_lineage":["https://openalex.org/I190632392"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/bachelorThesis"},{"id":"mag:3044917895","doi":null,"is_oa":false,"landing_page_url":"http://www.diva-portal.org/smash/record.jsf?pid=diva2:1437521","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:DiVA.org:ltu-79305","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:ltu:diva-79305","pdf_url":null,"source":{"id":"https://openalex.org/S7407055297","display_name":"DiVA (Lule\u00e5 University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I190632392","host_organization_name":"Lule\u00e5 University of Technology","host_organization_lineage":["https://openalex.org/I190632392"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/bachelorThesis"},"sustainable_development_goals":[],"study_designs":[{"display_name":"Systematic Review","id":"https://openalex.org/study-designs/systematic-review"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":4,"referenced_works":["https://openalex.org/W1975675278","https://openalex.org/W2040280148","https://openalex.org/W2117866802","https://openalex.org/W2828409123"],"related_works":["https://openalex.org/W4395051966","https://openalex.org/W4385377587","https://openalex.org/W7214505684","https://openalex.org/W4284992454","https://openalex.org/W4243137961","https://openalex.org/W4411237135","https://openalex.org/W7204601723","https://openalex.org/W4416764585","https://openalex.org/W3111055825","https://openalex.org/W4281667213"],"abstract_inverted_index":{"For":[0,171],"several":[1,339],"years":[2],"a":[3,43,53,64,155,164,243,278,334],"trend":[4],"in":[5,20,58,89,128,148,233,237],"agile":[6],"software":[7],"development":[8,13,33,77],"methodologies":[9],"that":[10,25,71,140],"connect":[11],"the":[12,21,28,49,68,73,95,107,115,152,162,172,215,222,247,251,271,275,281,286,293,300,309,313,319,322],"with":[14,229,292],"operations":[15,35,79],"is":[16,36,80,94],"transforming":[17],"business":[18],"activities":[19],"industry.":[22],"This":[23],"methodology,":[24],"breaks":[26],"down":[27],"formerly":[29],"separated":[30],"silos":[31],"of":[32,46,56,60,66,75,92,98,112,138,154,158,205,214,242,250,259,274,280,285,295,316,324,341],"and":[34,78,82,110,118,185,203,211,283,290,336],"commonly":[37],"referred":[38],"to":[39,122,144,192,246],"as":[40,183,261,263,270,329,331,333],"DevOps.":[41],"From":[42],"security":[44,57,99,116,147,206,235,356],"point":[45],"view,":[47],"however,":[48],"DevOps":[50,103,124,252],"methodology":[51,253],"lacks":[52],"fundamental":[54,156,248],"integration":[55,117],"any":[59],"its":[61],"phases.":[62],"As":[63,197],"result":[65],"that,":[67],"DevSecOps":[69,149,355],"practice,":[70],"intertwines":[72],"disciplines":[74],"security,":[76],"more":[81,83],"gaining":[84],"popularity.":[85],"The":[86,218,256,344],"biggest":[87],"challenge":[88],"this":[90,132],"shift":[91],"practice":[93],"flawless":[96],"introduction":[97],"methods":[100],"into":[101],"existing":[102,234],"processes":[104,119],"without":[105],"disturbing":[106],"fast":[108],"pace":[109],"responsiveness":[111],"those.":[113],"Whereas":[114],"on":[120,135,161,318,354],"how":[121],"make":[123],"secure":[125],"are":[126,268],"discussed":[127],"various":[129],"preceding":[130],"studies,":[131],"research":[133,177,317,353],"focuses":[134],"an":[136,240,296],"investigation":[137,241],"criteria":[139,219,260,287,345],"can":[141],"be":[142],"used":[143],"measure":[145],"application":[146],"integration.":[150],"Given":[151],"lack":[153,323],"base":[157],"academic":[159,176],"literature":[160,181],"topic,":[163,320],"Multivocal":[165],"Literature":[166],"Review":[167],"(MLR)":[168],"was":[169,254,306],"conducted.":[170],"study,":[173],"not":[174],"only":[175],"but":[178],"also":[179],"gray":[180],"such":[182],"blogs":[184],"articles":[186],"from":[187,221,299],"industry":[188],"practitioners":[189],"were":[190,208,226],"investigated":[191],"extract":[193],"meaningful":[194],"review":[195],"criteria.":[196],"applicable,":[198],"high-level":[199],"criteria,":[200],"agreed-upon":[201],"best-practices":[202],"descriptions":[204],"controls":[207],"thereby":[209],"examined":[210],"compiled":[212],"out":[213],"studied":[216],"literature.":[217],"resulting":[220,257],"conducted":[223,310],"MLR":[224],"process":[225],"further":[227],"analyzed":[228],"each":[230],"criterion's":[231,244],"coverage":[232],"standards":[236],"mind.":[238],"Additionally,":[239],"connection":[245],"principles":[249],"performed.":[255,307],"list":[258],"well":[262,330],"additional,":[264],"partially":[265],"classified":[266],"sub-criteria":[267],"presented":[269],"primary":[272],"contribution":[273],"thesis.":[276],"Further,":[277],"discussion":[279],"results":[282],"evaluation":[284],"for":[288,326,338,347],"measurability":[289],"applicability":[291],"help":[294],"expert":[297],"group":[298],"cooperating":[301],"company":[302],"Veriscan":[303],"Security":[304],"AB":[305],"Lastly,":[308],"study":[311],"highlights":[312],"current":[314],"state":[315],"discusses":[321],"knowledge":[325],"particular":[327],"areas":[328],"serves":[332],"foundation":[335],"suggestion":[337],"fields":[340],"future":[342,350],"research.":[343],"could,":[346],"instance,":[348],"enable":[349],"design":[351],"science":[352],"measurement.":[357]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":2}],"updated_date":"2026-11-06T12:05:46.655746","created_date":"2020-07-29T00:00:00"}