{"id":"https://openalex.org/W4321230650","doi":"https://doi.org/10.1007/978-3-031-25460-4_38","title":"Product Incremental Security Risk Assessment Using DevSecOps Practices","display_name":"Product Incremental Security Risk Assessment Using DevSecOps Practices","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4321230650","doi":"https://doi.org/10.1007/978-3-031-25460-4_38"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-031-25460-4_38","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-031-25460-4_38","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040831207","display_name":"S\u00e9bastien Dupont","orcid":"https://orcid.org/0000-0002-3737-3500"},"institutions":[{"id":"https://openalex.org/I4210118258","display_name":"Centre d'Excellence en Technologies de l'Information et de la Communication","ror":"https://ror.org/02ma6j015","country_code":"BE","type":"nonprofit","lineage":["https://openalex.org/I4210118258"]}],"countries":["BE"],"is_corresponding":true,"raw_author_name":"S\u00e9bastien Dupont","raw_affiliation_strings":["CETIC, Charleroi, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CETIC, Charleroi, Belgium","institution_ids":["https://openalex.org/I4210118258"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016282493","display_name":"Artsiom Yautsiukhin","orcid":"https://orcid.org/0000-0002-8493-1915"},"institutions":[{"id":"https://openalex.org/I4210165157","display_name":"Confederazione Nazionale dell'Artigianato e Della Piccola e Media Impresa","ror":"https://ror.org/05fa80v88","country_code":"IT","type":"other","lineage":["https://openalex.org/I4210165157"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Artsiom Yautsiukhin","raw_affiliation_strings":["CNR, Rome, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CNR, Rome, Italy","institution_ids":["https://openalex.org/I4210165157"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059116940","display_name":"Guillaume Ginis","orcid":null},"institutions":[{"id":"https://openalex.org/I4210118258","display_name":"Centre d'Excellence en Technologies de l'Information et de la Communication","ror":"https://ror.org/02ma6j015","country_code":"BE","type":"nonprofit","lineage":["https://openalex.org/I4210118258"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Guillaume Ginis","raw_affiliation_strings":["CETIC, Charleroi, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CETIC, Charleroi, Belgium","institution_ids":["https://openalex.org/I4210118258"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080298186","display_name":"Giacomo Iadarola","orcid":"https://orcid.org/0000-0001-7060-6233"},"institutions":[{"id":"https://openalex.org/I4210165157","display_name":"Confederazione Nazionale dell'Artigianato e Della Piccola e Media Impresa","ror":"https://ror.org/05fa80v88","country_code":"IT","type":"other","lineage":["https://openalex.org/I4210165157"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giacomo Iadarola","raw_affiliation_strings":["CNR, Rome, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CNR, Rome, Italy","institution_ids":["https://openalex.org/I4210165157"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057165286","display_name":"Stefano Fagnano","orcid":null},"institutions":[{"id":"https://openalex.org/I4210165157","display_name":"Confederazione Nazionale dell'Artigianato e Della Piccola e Media Impresa","ror":"https://ror.org/05fa80v88","country_code":"IT","type":"other","lineage":["https://openalex.org/I4210165157"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Stefano Fagnano","raw_affiliation_strings":["CNR, Rome, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CNR, Rome, Italy","institution_ids":["https://openalex.org/I4210165157"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021815654","display_name":"Fabio Martinelli","orcid":"https://orcid.org/0000-0001-6746-4967"},"institutions":[{"id":"https://openalex.org/I4210165157","display_name":"Confederazione Nazionale dell'Artigianato e Della Piccola e Media Impresa","ror":"https://ror.org/05fa80v88","country_code":"IT","type":"other","lineage":["https://openalex.org/I4210165157"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Fabio Martinelli","raw_affiliation_strings":["CNR, Rome, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CNR, Rome, Italy","institution_ids":["https://openalex.org/I4210165157"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025787987","display_name":"Christophe Ponsard","orcid":"https://orcid.org/0000-0002-5027-2114"},"institutions":[{"id":"https://openalex.org/I4210118258","display_name":"Centre d'Excellence en Technologies de l'Information et de la Communication","ror":"https://ror.org/02ma6j015","country_code":"BE","type":"nonprofit","lineage":["https://openalex.org/I4210118258"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Christophe Ponsard","raw_affiliation_strings":["CETIC, Charleroi, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CETIC, Charleroi, Belgium","institution_ids":["https://openalex.org/I4210118258"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030129842","display_name":"Axel Legay","orcid":"https://orcid.org/0000-0003-2287-8925"},"institutions":[{"id":"https://openalex.org/I95674353","display_name":"UCLouvain","ror":"https://ror.org/02495e989","country_code":"BE","type":"education","lineage":["https://openalex.org/I95674353"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Axel Legay","raw_affiliation_strings":["UCLouvain, Louvain-la-Neuve, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UCLouvain, Louvain-la-Neuve, Belgium","institution_ids":["https://openalex.org/I95674353"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072897088","display_name":"Philippe Massonet","orcid":"https://orcid.org/0000-0003-1883-4188"},"institutions":[{"id":"https://openalex.org/I4210118258","display_name":"Centre d'Excellence en Technologies de l'Information et de la Communication","ror":"https://ror.org/02ma6j015","country_code":"BE","type":"nonprofit","lineage":["https://openalex.org/I4210118258"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Philippe Massonet","raw_affiliation_strings":["CETIC, Charleroi, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CETIC, Charleroi, Belgium","institution_ids":["https://openalex.org/I4210118258"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5040831207"],"corresponding_institution_ids":["https://openalex.org/I4210118258"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":null,"fwci":1.9437,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.86958672,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"666","last_page":"685"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8137085437774658},{"id":"https://openalex.org/keywords/devops","display_name":"DevOps","score":0.6763781905174255},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.6306253671646118},{"id":"https://openalex.org/keywords/certification","display_name":"Certification","score":0.5854937434196472},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.5031587481498718},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.48506370186805725},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.46047985553741455},{"id":"https://openalex.org/keywords/quality-assessment","display_name":"Quality assessment","score":0.41441112756729126},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.30398398637771606},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2749270498752594},{"id":"https://openalex.org/keywords/reliability-engineering","display_name":"Reliability engineering","score":0.15229561924934387},{"id":"https://openalex.org/keywords/evaluation-methods","display_name":"Evaluation methods","score":0.1519608199596405},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11106228828430176},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.07296887040138245}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8137085437774658},{"id":"https://openalex.org/C9903902","wikidata":"https://www.wikidata.org/wiki/Q3025536","display_name":"DevOps","level":3,"score":0.6763781905174255},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.6306253671646118},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.5854937434196472},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5031587481498718},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.48506370186805725},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.46047985553741455},{"id":"https://openalex.org/C3020001037","wikidata":"https://www.wikidata.org/wiki/Q836575","display_name":"Quality assessment","level":3,"score":0.41441112756729126},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.30398398637771606},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2749270498752594},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.15229561924934387},{"id":"https://openalex.org/C3018395757","wikidata":"https://www.wikidata.org/wiki/Q1379672","display_name":"Evaluation methods","level":2,"score":0.1519608199596405},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11106228828430176},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.07296887040138245},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/978-3-031-25460-4_38","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-031-25460-4_38","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","score":0.4000000059604645,"display_name":"Partnerships for the goals"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1991650436","https://openalex.org/W2008475802","https://openalex.org/W2009848986","https://openalex.org/W2068673775","https://openalex.org/W2080076767","https://openalex.org/W2092254504","https://openalex.org/W2124477160","https://openalex.org/W2147490395","https://openalex.org/W2753691335","https://openalex.org/W2905459693","https://openalex.org/W2963834817","https://openalex.org/W3042680674","https://openalex.org/W3193339215","https://openalex.org/W3194212450"],"related_works":["https://openalex.org/W4220665054","https://openalex.org/W3154253302","https://openalex.org/W3111012486","https://openalex.org/W3101146292","https://openalex.org/W4287554096","https://openalex.org/W4282831387","https://openalex.org/W3113480566","https://openalex.org/W4388640518","https://openalex.org/W4377008314","https://openalex.org/W4313188367"],"abstract_inverted_index":null,"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2023,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}