{"id":"https://openalex.org/W2809926087","doi":"https://doi.org/10.1145/3194760.3194767","title":"Towards continuous security compliance in agile software development at scale","display_name":"Towards continuous security compliance in agile software development at scale","publication_year":2018,"publication_date":"2018-05-29","ids":{"openalex":"https://openalex.org/W2809926087","doi":"https://doi.org/10.1145/3194760.3194767","mag":"2809926087"},"language":"en","primary_location":{"id":"doi:10.1145/3194760.3194767","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3194760.3194767","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th International Workshop on Rapid Continuous Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031864185","display_name":"Fabiola Moy\u00f3n","orcid":"https://orcid.org/0000-0003-0535-1371"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Fabiola Moyon","raw_affiliation_strings":["Technische Universit\u00e4t M\u00fcnchen, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t M\u00fcnchen, Munich, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024651104","display_name":"Kristian Beckers","orcid":null},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Kristian Beckers","raw_affiliation_strings":["Siemens Corporate Technology, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Siemens Corporate Technology, Munich, Germany","institution_ids":["https://openalex.org/I1325886976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058124636","display_name":"Sebastian Klepper","orcid":null},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sebastian Klepper","raw_affiliation_strings":["Technische Universit\u00e4t M\u00fcnchen, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t M\u00fcnchen, Munich, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037306735","display_name":"Philipp Lachberger","orcid":null},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Philipp Lachberger","raw_affiliation_strings":["Siemens Corporate Technology, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Siemens Corporate Technology, Munich, Germany","institution_ids":["https://openalex.org/I1325886976"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024338002","display_name":"Bernd Bruegge","orcid":null},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Bernd Bruegge","raw_affiliation_strings":["Technische Universit\u00e4t M\u00fcnchen, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t M\u00fcnchen, Munich, Germany","institution_ids":["https://openalex.org/I62916508"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":26,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"31","last_page":"34"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/agile-software-development","display_name":"Agile software development","score":0.7145684957504272},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6671781539916992},{"id":"https://openalex.org/keywords/agile-unified-process","display_name":"Agile Unified Process","score":0.5599032640457153},{"id":"https://openalex.org/keywords/business-process-model-and-notation","display_name":"Business Process Model and Notation","score":0.541808009147644},{"id":"https://openalex.org/keywords/requirement","display_name":"Requirement","score":0.5091235041618347},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.4981706142425537},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4732259511947632},{"id":"https://openalex.org/keywords/agile-usability-engineering","display_name":"Agile usability engineering","score":0.4559813141822815},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.42701399326324463},{"id":"https://openalex.org/keywords/business-process","display_name":"Business process","score":0.42597994208335876},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.4083541929721832},{"id":"https://openalex.org/keywords/requirements-engineering","display_name":"Requirements engineering","score":0.3627427816390991},{"id":"https://openalex.org/keywords/software-development-process","display_name":"Software development process","score":0.36089324951171875},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.3539036512374878},{"id":"https://openalex.org/keywords/business-process-modeling","display_name":"Business process modeling","score":0.34475618600845337},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.30279964208602905},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.27854228019714355},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.23690980672836304},{"id":"https://openalex.org/keywords/work-in-process","display_name":"Work in process","score":0.17614397406578064},{"id":"https://openalex.org/keywords/operations-management","display_name":"Operations management","score":0.0872979462146759},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.081165611743927}],"concepts":[{"id":"https://openalex.org/C14185376","wikidata":"https://www.wikidata.org/wiki/Q30232","display_name":"Agile software development","level":2,"score":0.7145684957504272},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6671781539916992},{"id":"https://openalex.org/C87813535","wikidata":"https://www.wikidata.org/wiki/Q956418","display_name":"Agile Unified Process","level":5,"score":0.5599032640457153},{"id":"https://openalex.org/C179299601","wikidata":"https://www.wikidata.org/wiki/Q1017605","display_name":"Business Process Model and Notation","level":5,"score":0.541808009147644},{"id":"https://openalex.org/C135475081","wikidata":"https://www.wikidata.org/wiki/Q774228","display_name":"Requirement","level":4,"score":0.5091235041618347},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4981706142425537},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4732259511947632},{"id":"https://openalex.org/C36837802","wikidata":"https://www.wikidata.org/wiki/Q17011481","display_name":"Agile usability engineering","level":5,"score":0.4559813141822815},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.42701399326324463},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.42597994208335876},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.4083541929721832},{"id":"https://openalex.org/C6604083","wikidata":"https://www.wikidata.org/wiki/Q376937","display_name":"Requirements engineering","level":3,"score":0.3627427816390991},{"id":"https://openalex.org/C180152950","wikidata":"https://www.wikidata.org/wiki/Q2904257","display_name":"Software development process","level":4,"score":0.36089324951171875},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3539036512374878},{"id":"https://openalex.org/C207505557","wikidata":"https://www.wikidata.org/wiki/Q4374012","display_name":"Business process modeling","level":4,"score":0.34475618600845337},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.30279964208602905},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.27854228019714355},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.23690980672836304},{"id":"https://openalex.org/C174998907","wikidata":"https://www.wikidata.org/wiki/Q357662","display_name":"Work in process","level":2,"score":0.17614397406578064},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0872979462146759},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.081165611743927},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3194760.3194767","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3194760.3194767","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th International Workshop on Rapid Continuous Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6000000238418579}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W134752899","https://openalex.org/W806202468","https://openalex.org/W1531704265","https://openalex.org/W1828031262","https://openalex.org/W1839915801","https://openalex.org/W1947959002","https://openalex.org/W1950170189","https://openalex.org/W2042287687","https://openalex.org/W2112657059","https://openalex.org/W2121016257","https://openalex.org/W2157820602","https://openalex.org/W2238332334","https://openalex.org/W2726501037"],"related_works":["https://openalex.org/W2113109691","https://openalex.org/W2167786744","https://openalex.org/W176605658","https://openalex.org/W2518983719","https://openalex.org/W87375379","https://openalex.org/W2218678539","https://openalex.org/W2185525223","https://openalex.org/W2358489570","https://openalex.org/W4312418467","https://openalex.org/W2380928205"],"abstract_inverted_index":{"With":[0],"agile":[1,50],"methodologies":[2],"increasingly":[3],"being":[4],"applied":[5],"in":[6,60,105],"regulated":[7],"environments,":[8],"security":[9,22,46],"and":[10,38,78,83,86],"compliance":[11,58],"emerge":[12],"as":[13],"critical":[14],"issues.":[15],"Combining":[16],"both":[17],"concerns":[18],"is":[19,71],"challenging":[20],"because":[21],"engineering":[23],"techniques":[24],"are":[25],"often":[26],"based":[27],"on":[28],"linear":[29],"development.":[30],"We":[31],"propose":[32],"a":[33,99],"method":[34,70],"for":[35,101],"achieving":[36],"continuous":[37],"secure":[39,102],"development":[40,104],"by":[41,73],"mapping":[42],"the":[43,61,69],"requirements":[44,95],"of":[45,57,63,68,88,96],"standards":[47],"into":[48],"an":[49],"process":[51,65],"model.":[52],"Additionally,":[53],"this":[54],"allows":[55],"verification":[56],"even":[59],"face":[62],"dynamic":[64],"changes.":[66],"Applicability":[67],"demonstrated":[72],"using":[74],"Business":[75],"Process":[76],"Model":[77],"Notation":[79],"(BPMN)":[80],"to":[81,94],"model":[82],"extend":[84],"activities":[85],"artifacts":[87],"Scaled":[89],"Agile":[90],"Framework":[91],"(SAFe)":[92],"according":[93],"IEC":[97],"62443-4-1,":[98],"standard":[100],"product":[103],"industrial":[106],"systems.":[107]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}