{"id":"https://openalex.org/W4403556352","doi":"https://doi.org/10.48550/arxiv.2409.03405","title":"Continuous risk assessment in secure DevOps","display_name":"Continuous risk assessment in secure DevOps","publication_year":2024,"publication_date":"2024-09-05","ids":{"openalex":"https://openalex.org/W4403556352","doi":"https://doi.org/10.48550/arxiv.2409.03405"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2409.03405","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2409.03405","pdf_url":"https://arxiv.org/pdf/2409.03405","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2409.03405","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083239334","display_name":"Ricardo Melo Czekster","orcid":"https://orcid.org/0000-0002-6636-4398","observed_orcids":["https://orcid.org/0000-0002-6636-4398"]},"institutions":[{"id":"https://openalex.org/I169199633","display_name":"Aston University","ror":"https://ror.org/05j0ve876","country_code":"GB","type":"education","lineage":["https://openalex.org/I169199633"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Czekster, Ricardo M.","raw_affiliation_strings":["School of Computer Science and Digital Technologies Aston University Birmingham , United Kingdom , B4 7ET"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Digital Technologies Aston University Birmingham , United Kingdom , B4 7ET","institution_ids":["https://openalex.org/I169199633"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5083239334"],"corresponding_institution_ids":["https://openalex.org/I169199633"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.8955000042915344,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.8955000042915344,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.050999999046325684,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.044599998742341995,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/continuous-risk-assessment","display_name":"continuous risk assessment","score":0.8330000042915344},{"id":"https://openalex.org/keywords/threat-modeling","display_name":"threat modeling","score":0.9660000205039978},{"id":"https://openalex.org/keywords/security-automation","display_name":"security automation","score":0.7059999704360962},{"id":"https://openalex.org/keywords/stakeholder-engagement","display_name":"stakeholder engagement","score":0.8230000138282776}],"concepts":[{"id":"https://openalex.org/C9903902","wikidata":"https://www.wikidata.org/wiki/Q3025536","display_name":"DevOps","level":3,"score":0.9146867990493774},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.47821709513664246},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.40930357575416565},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4084661602973938},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4081069827079773},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.08642008900642395},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:arXiv.org:2409.03405","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2409.03405","pdf_url":"https://arxiv.org/pdf/2409.03405","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:publications.aston.ac.uk:46801","doi":null,"is_oa":true,"landing_page_url":"https://publications.aston.ac.uk/view/author/e8d87169b4788bf4bffa87bf881e2dc1.html>","pdf_url":"https://publications.aston.ac.uk/id/eprint/46801/1/2409.03405v1.pdf","source":{"id":"https://openalex.org/S4306400483","display_name":"Aston Publications Explorer (Aston University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I169199633","host_organization_name":"Aston University","host_organization_lineage":["https://openalex.org/I169199633"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.48550/arxiv.2409.03405","doi":"https://doi.org/10.48550/arxiv.2409.03405","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2409.03405","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2409.03405","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2409.03405","pdf_url":"https://arxiv.org/pdf/2409.03405","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4403556352.pdf","grobid_xml":"https://content.openalex.org/works/W4403556352.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4220665054","https://openalex.org/W3154253302","https://openalex.org/W3111012486","https://openalex.org/W3101146292","https://openalex.org/W4287554096","https://openalex.org/W4282831387","https://openalex.org/W3113480566"],"abstract_inverted_index":{"DevOps":[0,27,57,96],"(development":[1],"and":[2,40,79,106,117,135,164],"operations),":[3],"has":[4],"significantly":[5],"changed":[6],"the":[7,38,85,126,129,148,170,184,191],"way":[8],"to":[9,16,103,121],"overcome":[10],"deficiencies":[11],"for":[12,93,142],"delivering":[13],"high-quality":[14],"software":[15,86,115,188],"production":[17],"environments.":[18],"Past":[19],"years":[20],"witnessed":[21],"an":[22,31],"increased":[23],"interest":[24],"in":[25,30,84,111,175],"embedding":[26],"with":[28,62,151],"cybersecurity":[29],"approach":[32,150],"dubbed":[33],"secure":[34,56,95],"DevOps.":[35],"However,":[36],"as":[37],"practices":[39],"guidance":[41],"mature,":[42],"teams":[43],"must":[44],"consider":[45],"them":[46],"within":[47,66],"a":[48,91,139,143,152],"broader":[49],"risk":[50,63,98],"context.":[51],"We":[52,68,119],"argue":[53],"here":[54],"how":[55],"could":[58],"profit":[59],"from":[60],"engaging":[61],"related":[64],"activities":[65],"organisations.":[67],"focus":[69],"on":[70,114,128,159],"combining":[71],"Risk":[72],"Assessment":[73],"(RA),":[74],"particularly":[75],"Threat":[76],"Modelling":[77],"(TM)":[78],"apply":[80],"security":[81,109,160],"considerations":[82],"early":[83],"life-cycle.":[87],"Our":[88],"contribution":[89],"provides":[90],"roadmap":[92],"enacting":[94],"alongside":[97],"objectives,":[99],"devising":[100],"informed":[101],"ways":[102],"improve":[104,183],"TM":[105],"establishing":[107],"effective":[108],"underpinnings":[110],"organisations":[112],"focusing":[113],"products":[116],"services.":[118],"aim":[120],"outline":[122],"proven":[123],"methods":[124],"over":[125],"literature":[127],"subject":[130],"discussing":[131],"case":[132,140],"studies,":[133],"technologies,":[134],"tools.":[136],"It":[137,167],"presents":[138],"study":[141],"real-world":[144],"inspired":[145],"organisation":[146],"employing":[147],"proposed":[149],"discussion.":[153],"Enforcing":[154],"these":[155],"novel":[156],"mechanisms":[157],"centred":[158],"requires":[161,168],"investment,":[162],"training,":[163],"stakeholder":[165],"engagement.":[166],"understanding":[169],"actual":[171],"benefits":[172],"of":[173,177,187],"automation":[174],"light":[176],"Continuous":[178],"Integration/Continuous":[179],"Delivery":[180],"settings":[181],"that":[182],"overall":[185],"quality":[186],"solutions":[189],"reaching":[190],"market.":[192]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-10-19T09:35:57.686232","created_date":"2025-10-10T00:00:00"}