{"id":"https://openalex.org/W4312236807","doi":"https://doi.org/10.1016/j.procs.2022.09.079","title":"Efficient secure DevOps using process mining and Attack Defense Trees","display_name":"Efficient secure DevOps using process mining and Attack Defense Trees","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4312236807","doi":"https://doi.org/10.1016/j.procs.2022.09.079"},"language":"en","primary_location":{"id":"doi:10.1016/j.procs.2022.09.079","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2022.09.079","pdf_url":"https://www.sciencedirect.com/science/article/pii/S1877050922009528/pdf","source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.sciencedirect.com/science/article/pii/S1877050922009528/pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043970801","display_name":"Takao Okubo","orcid":"https://orcid.org/0000-0002-4490-1420"},"institutions":[{"id":"https://openalex.org/I4210138172","display_name":"Institute of Information Security","ror":"https://ror.org/03rmfrm44","country_code":"JP","type":"education","lineage":["https://openalex.org/I4210138172"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Takao Okubo","raw_affiliation_strings":["Institute of Informtion Security, Tsuruyamachi 2-14-1, Kanagawa-ku, Yokohama, 221-0835, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Informtion Security, Tsuruyamachi 2-14-1, Kanagawa-ku, Yokohama, 221-0835, Japan","institution_ids":["https://openalex.org/I4210138172"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042986574","display_name":"Haruhiko Kaiya","orcid":"https://orcid.org/0000-0001-9816-8001"},"institutions":[{"id":"https://openalex.org/I41802502","display_name":"Kanagawa University","ror":"https://ror.org/02j6c0d67","country_code":"JP","type":"education","lineage":["https://openalex.org/I41802502"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Haruhiko Kaiya","raw_affiliation_strings":["Kanagawa University, 2946 Tsuchiya, Hiratsuka-shi, Kanagawa, 259-1293, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kanagawa University, 2946 Tsuchiya, Hiratsuka-shi, Kanagawa, 259-1293, Japan","institution_ids":["https://openalex.org/I41802502"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5043970801"],"corresponding_institution_ids":["https://openalex.org/I4210138172"],"apc_list":null,"apc_paid":null,"fwci":1.0047,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.77776444,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"207","issue":null,"first_page":"446","last_page":"455"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9905999898910522,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.9886999726295471,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/devops","display_name":"DevOps","score":0.9640225172042847},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8786571025848389},{"id":"https://openalex.org/keywords/countermeasure","display_name":"Countermeasure","score":0.7851656675338745},{"id":"https://openalex.org/keywords/agile-software-development","display_name":"Agile software development","score":0.7401758432388306},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6483737230300903},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6377274990081787},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5701616406440735},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.18840476870536804},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.1282581090927124}],"concepts":[{"id":"https://openalex.org/C9903902","wikidata":"https://www.wikidata.org/wiki/Q3025536","display_name":"DevOps","level":3,"score":0.9640225172042847},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8786571025848389},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.7851656675338745},{"id":"https://openalex.org/C14185376","wikidata":"https://www.wikidata.org/wiki/Q30232","display_name":"Agile software development","level":2,"score":0.7401758432388306},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6483737230300903},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6377274990081787},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5701616406440735},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.18840476870536804},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.1282581090927124},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.procs.2022.09.079","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2022.09.079","pdf_url":"https://www.sciencedirect.com/science/article/pii/S1877050922009528/pdf","source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.procs.2022.09.079","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2022.09.079","pdf_url":"https://www.sciencedirect.com/science/article/pii/S1877050922009528/pdf","source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G137869596","display_name":"Methods and tools for requirements evolution encouraging mutual contribution among several activities","funder_award_id":"18K11249","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G3008957518","display_name":"Supporting tools for exploring mutually contributable business activities using process mining","funder_award_id":"21K11837","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G7396705041","display_name":"Research on technologies for efficient security quality assurance in DevOps.","funder_award_id":"21K11895","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4312236807.pdf","grobid_xml":"https://content.openalex.org/works/W4312236807.grobid-xml"},"referenced_works_count":11,"referenced_works":["https://openalex.org/W1977553727","https://openalex.org/W2158722884","https://openalex.org/W2963834817","https://openalex.org/W3001443755","https://openalex.org/W3042680674","https://openalex.org/W3161918289","https://openalex.org/W4206344432","https://openalex.org/W4246204515","https://openalex.org/W6798343602","https://openalex.org/W6801599460","https://openalex.org/W6812742317"],"related_works":["https://openalex.org/W2525854532","https://openalex.org/W3134988916","https://openalex.org/W2921949489","https://openalex.org/W4313461177","https://openalex.org/W2826547882","https://openalex.org/W4293070325","https://openalex.org/W3008867305","https://openalex.org/W3197098709","https://openalex.org/W3043184350","https://openalex.org/W2993573864"],"abstract_inverted_index":{"In":[0,50,74],"this":[1,75],"paper,":[2,76],"we":[3,77,104,138],"propose":[4,78,105],"a":[5,40,79,106],"method":[6,80,107,143],"to":[7,28,45,47,62,66,108,133],"efficiently":[8],"ensure":[9,20],"security":[10,22,58],"in":[11,23,125],"the":[12,110,115,121,126,141],"DevOps":[13],"lifecycle":[14],"through":[15],"operations":[16],"and":[17,43,64,90,93,101],"development.":[18,34,128],"To":[19],"sufficient":[21,30,56],"DevOps,":[24],"it":[25,119],"is":[26,38],"essential":[27],"perform":[29],"threat":[31,36],"analysis":[32,37],"during":[33],"However,":[35],"generally":[39],"heavy":[41],"task":[42],"difficult":[44],"apply":[46],"agile":[48],"processes.":[49],"addition,":[51],"existing":[52],"technologies":[53],"are":[54,69],"not":[55],"for":[57,81],"feedback":[59],"from":[60,87],"Dev":[61],"Ops":[63,65],"Dev,":[67],"which":[68],"important":[70],"elements":[71],"of":[72,114],"DevOps.":[73],"detecting":[82],"attacks":[83],"using":[84,96],"anomaly":[85],"detection":[86],"operation":[88],"logs,":[89],"extracting":[91],"vulnerabilities":[92],"candidate":[94],"countermeasures":[95],"information":[97],"such":[98],"as":[99],"CAPEC":[100],"CWE.":[102],"Furthermore,":[103],"determine":[109],"excess":[111],"or":[112],"deficiency":[113],"countermeasure":[116],"by":[117],"comparing":[118],"with":[120],"Attack-Defense":[122],"Trees":[123],"created":[124],"previous":[127],"By":[129],"applying":[130],"our":[131],"proposal":[132],"an":[134],"actual":[135],"development":[136],"case,":[137],"confirm":[139],"that":[140],"proposed":[142],"works":[144],"effectively.":[145]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1}],"updated_date":"2026-08-02T14:50:37.381335","created_date":"2025-10-10T00:00:00"}