{"id":"https://openalex.org/W3088227451","doi":"https://doi.org/10.1145/3387940.3392233","title":"Security as Culture","display_name":"Security as Culture","publication_year":2020,"publication_date":"2020-06-27","ids":{"openalex":"https://openalex.org/W3088227451","doi":"https://doi.org/10.1145/3387940.3392233","mag":"3088227451"},"language":"en","primary_location":{"id":"doi:10.1145/3387940.3392233","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3387940.3392233","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 42nd International Conference on Software Engineering Workshops","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050961429","display_name":"Mary S\u00e1nchez\u2010Gord\u00f3n","orcid":"https://orcid.org/0000-0002-5102-1122"},"institutions":[{"id":"https://openalex.org/I19923696","display_name":"\u00d8stfold University College","ror":"https://ror.org/04gf7fp41","country_code":"NO","type":"education","lineage":["https://openalex.org/I19923696"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Mary S\u00e1nchez-Gord\u00f3n","raw_affiliation_strings":["Department of Computer Sciences, \u00d8stfold University College, Halden, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, \u00d8stfold University College, Halden, Norway","institution_ids":["https://openalex.org/I19923696"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038626586","display_name":"Ricardo Colomo\u2010Palacios","orcid":"https://orcid.org/0000-0002-1555-9726"},"institutions":[{"id":"https://openalex.org/I19923696","display_name":"\u00d8stfold University College","ror":"https://ror.org/04gf7fp41","country_code":"NO","type":"education","lineage":["https://openalex.org/I19923696"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Ricardo Colomo-Palacios","raw_affiliation_strings":["Department of Computer Sciences, \u00d8stfold University College, Halden, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, \u00d8stfold University College, Halden, Norway","institution_ids":["https://openalex.org/I19923696"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I19923696"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":58,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"266","last_page":"269"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9904000163078308,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/devops","display_name":"DevOps","score":0.9581022262573242},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5594741106033325},{"id":"https://openalex.org/keywords/mainstream","display_name":"Mainstream","score":0.5268767476081848},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.447395920753479},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.3885321617126465},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.3790261745452881},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36682870984077454},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.2979114055633545},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.2142324149608612},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.16470280289649963},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.15434527397155762}],"concepts":[{"id":"https://openalex.org/C9903902","wikidata":"https://www.wikidata.org/wiki/Q3025536","display_name":"DevOps","level":3,"score":0.9581022262573242},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5594741106033325},{"id":"https://openalex.org/C2777617010","wikidata":"https://www.wikidata.org/wiki/Q18957","display_name":"Mainstream","level":2,"score":0.5268767476081848},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.447395920753479},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.3885321617126465},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3790261745452881},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36682870984077454},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2979114055633545},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.2142324149608612},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.16470280289649963},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.15434527397155762},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3387940.3392233","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3387940.3392233","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 42nd International Conference on Software Engineering Workshops","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","score":0.5099999904632568,"display_name":"Partnerships for the goals"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W2503060256","https://openalex.org/W2575185183","https://openalex.org/W2753691335","https://openalex.org/W2759187825","https://openalex.org/W2783275449","https://openalex.org/W2884277236","https://openalex.org/W2885987664","https://openalex.org/W2890814227","https://openalex.org/W2896669970","https://openalex.org/W2966181603","https://openalex.org/W2969532846","https://openalex.org/W2977193212","https://openalex.org/W2982485630","https://openalex.org/W4233541444","https://openalex.org/W6755461223"],"related_works":["https://openalex.org/W3154253302","https://openalex.org/W4220665054","https://openalex.org/W4287554096","https://openalex.org/W3111012486","https://openalex.org/W4282831387","https://openalex.org/W3101146292","https://openalex.org/W3113480566","https://openalex.org/W3148697485","https://openalex.org/W4313188367","https://openalex.org/W2502393165"],"abstract_inverted_index":{"DevOps":[0,16,32,73],"goes":[1],"beyond":[2],"automation,":[3],"continuous":[4],"integration":[5],"and":[6,24,47,66],"delivery":[7],"processes,":[8],"since":[9],"it":[10,145],"also":[11,79],"encompasses":[12],"people.":[13],"In":[14,121],"fact,":[15],"promotes":[17],"the":[18,21,25,42,72,100,113,140,147],"collaboration":[19,43],"between":[20,44],"development":[22],"team":[23],"operations":[26],"team.":[27,49],"When":[28],"security":[29,48,51,70,91],"comes":[30],"into":[31,71],"routines,":[33],"people":[34],"play":[35],"an":[36],"even":[37],"more":[38],"relevant":[39,54],"role":[40],"involving":[41],"those":[45],"teams":[46],"Moreover,":[50],"is":[52],"especially":[53],"while":[55],"developing":[56],"critical":[57],"systems":[58],"where":[59],"we":[60],"need":[61,80],"to":[62,81,88,111,131,153],"manage":[63],"goals,":[64],"risks":[65],"evidences.":[67],"After":[68],"implementing":[69],"toolchain,":[74],"work":[75],"only":[76],"starts.":[77],"We":[78],"start":[82],"with":[83],"behavioral":[84],"changes":[85],"in":[86],"order":[87],"create":[89],"a":[90,117,124,133],"culture.":[92],"Several":[93],"authors":[94],"underlined":[95],"DevSecOps,":[96],"as":[97],"one":[98],"of":[99,115,136],"proposals":[101],"for":[102],"solving":[103],"or,":[104],"at":[105],"least,":[106],"minimizing":[107],"this":[108,122,137],"challenge.":[109],"However,":[110],"date,":[112],"characterization":[114],"such":[116],"culture":[118],"remains":[119],"unclear.":[120],"paper,":[123],"Systematic":[125],"Literature":[126],"Review":[127],"was":[128],"carried":[129],"out":[130],"provide":[132],"better":[134],"understanding":[135],"topic":[138],"from":[139],"human":[141],"factor's":[142],"perspective.":[143],"However":[144],"raises":[146],"following":[148],"question:":[149],"Is":[150],"DevSecOps":[151],"going":[152],"become":[154],"mainstream?":[155]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":21},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}