{"id":"https://openalex.org/W7167380985","doi":null,"title":"Perceptions and validation of the fobics framework as a metric-driven model for measuring security and economic performance in the development security operation lifecycle","display_name":"Perceptions and validation of the fobics framework as a metric-driven model for measuring security and economic performance in the development security operation lifecycle","publication_year":2025,"publication_date":"2025-12-17","ids":{"openalex":"https://openalex.org/W7167380985"},"language":"en","primary_location":{"id":"pmh:oai:run.unl.pt:10362/202230","doi":null,"is_oa":true,"landing_page_url":"https://run.unl.pt/items/80edef0b-74e5-4e42-8b1b-e9189ce41af8/request-a-copy?bitstream=a2b9587c-0611-4129-abd9-671451883bda","pdf_url":null,"source":{"id":"https://openalex.org/S4306402433","display_name":"Portuguese National Funding Agency for Science, Research and Technology (RCAAP Project by FCT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"master thesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://run.unl.pt/items/80edef0b-74e5-4e42-8b1b-e9189ce41af8/request-a-copy?bitstream=a2b9587c-0611-4129-abd9-671451883bda","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5140025542","display_name":"Matteo Carlo Giuseppe Cavallo","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Cavallo, Matteo Carlo Giuseppe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5140025542"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9595000147819519,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9595000147819519,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.016899999231100082,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.007300000172108412,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/devsecops","display_name":"DevSecOps","score":0.8140000104904175},{"id":"https://openalex.org/keywords/organizational-resilience","display_name":"organizational resilience","score":0.5830000042915344},{"id":"https://openalex.org/keywords/security-metrics","display_name":"security metrics","score":0.8140000104904175},{"id":"https://openalex.org/keywords/security-automation","display_name":"security automation","score":0.699999988079071},{"id":"https://openalex.org/keywords/security-practices","display_name":"security practices","score":0.503000020980835},{"id":"https://openalex.org/keywords/security-training","display_name":"security training","score":0.5460000038146973},{"id":"https://openalex.org/keywords/access-control","display_name":"access control","score":0.9710000157356262},{"id":"https://openalex.org/keywords/economic-performance-evaluation","display_name":"economic performance measurement","score":0.5550000071525574}],"concepts":[{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5388000011444092},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.5095999836921692},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.4772999882698059},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.4731000065803528},{"id":"https://openalex.org/C2776291640","wikidata":"https://www.wikidata.org/wiki/Q2912517","display_name":"Value (mathematics)","level":2,"score":0.3880000114440918},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.34869998693466187},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.28839999437332153},{"id":"https://openalex.org/C47309137","wikidata":"https://www.wikidata.org/wiki/Q7598357","display_name":"Standard of Good Practice","level":5,"score":0.28459998965263367},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.28119999170303345},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2727000117301941},{"id":"https://openalex.org/C198477413","wikidata":"https://www.wikidata.org/wiki/Q7647069","display_name":"Survey data collection","level":2,"score":0.2718999981880188},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.26660001277923584},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.26159998774528503},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2587999999523163},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.25529998540878296},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.2549000084400177},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2529999911785126}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:run.unl.pt:10362/202230","doi":null,"is_oa":true,"landing_page_url":"https://run.unl.pt/items/80edef0b-74e5-4e42-8b1b-e9189ce41af8/request-a-copy?bitstream=a2b9587c-0611-4129-abd9-671451883bda","pdf_url":null,"source":{"id":"https://openalex.org/S4306402433","display_name":"Portuguese National Funding Agency for Science, Research and Technology (RCAAP Project by FCT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"master thesis"}],"best_oa_location":{"id":"pmh:oai:run.unl.pt:10362/202230","doi":null,"is_oa":true,"landing_page_url":"https://run.unl.pt/items/80edef0b-74e5-4e42-8b1b-e9189ce41af8/request-a-copy?bitstream=a2b9587c-0611-4129-abd9-671451883bda","pdf_url":null,"source":{"id":"https://openalex.org/S4306402433","display_name":"Portuguese National Funding Agency for Science, Research and Technology (RCAAP Project by FCT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"master thesis"},"sustainable_development_goals":[],"study_designs":[{"id":"https://openalex.org/study-designs/observational-study","display_name":"Observational Study"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4403710955","https://openalex.org/W6903845733","https://openalex.org/W2624902979","https://openalex.org/W4283808535","https://openalex.org/W4395051966","https://openalex.org/W4243137961","https://openalex.org/W7212415977","https://openalex.org/W4408973649","https://openalex.org/W2491592823","https://openalex.org/W4376456531"],"abstract_inverted_index":{"This":[0],"thesis":[1],"examines":[2],"how":[3],"resilience,":[4],"security":[5,37],"practices":[6,42],"and":[7,18,33,38,54,67,79],"DevSecOps":[8],"are":[9],"actually":[10],"experienced":[11],"inside":[12],"organizations.":[13],"Through":[14],"interviews":[15],"with":[16,21,76],"professionals":[17],"a":[19,29],"survey":[20],"over":[22],"two":[23],"hundred":[24],"respondents,":[25],"the":[26,51],"study":[27],"highlights":[28],"gap":[30],"between":[31],"intention":[32],"routine:":[34],"teams":[35],"value":[36],"metrics,":[39],"but":[40],"many":[41],"remain":[43],"inconsistent.":[44],"The":[45,69],"analysis":[46],"is":[47],"used":[48],"to":[49,57,86],"evaluate":[50],"FOBICS":[52,73],"framework":[53],"its":[55],"ability":[56],"reflect":[58],"real":[59],"needs":[60],"across":[61],"automation,":[62],"collaboration,":[63],"access":[64],"control,":[65],"training":[66],"measurement.":[68],"results":[70],"suggest":[71],"that":[72],"aligns":[74],"well":[75],"common":[77],"challenges":[78],"could":[80],"support":[81],"more":[82],"structured,":[83],"measurable":[84],"approaches":[85],"resilience.":[87]},"counts_by_year":[],"updated_date":"2026-09-27T08:07:27.782135","created_date":"2026-07-05T00:00:00"}