{"id":"https://openalex.org/W3177774072","doi":"https://doi.org/10.1145/3475716.3475776","title":"An Empirical Analysis of Practitioners' Perspectives on Security Tool Integration into DevOps","display_name":"An Empirical Analysis of Practitioners' Perspectives on Security Tool Integration into DevOps","publication_year":2021,"publication_date":"2021-10-06","ids":{"openalex":"https://openalex.org/W3177774072","doi":"https://doi.org/10.1145/3475716.3475776","mag":"3177774072"},"language":"en","primary_location":{"id":"doi:10.1145/3475716.3475776","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3475716.3475776","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM / IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2107.02096","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023498529","display_name":"Roshan Namal Rajapakse","orcid":"https://orcid.org/0000-0002-9258-5784"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Roshan Namal Rajapakse","raw_affiliation_strings":["The University of Adelaide, Cyber Security Cooperative Research Centre, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Adelaide, Cyber Security Cooperative Research Centre, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049386320","display_name":"Mansooreh Zahedi","orcid":"https://orcid.org/0000-0001-6276-9956"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mansooreh Zahedi","raw_affiliation_strings":["The University of Adelaide, Australia","The University of Adelaide,Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Adelaide, Australia","institution_ids":["https://openalex.org/I5681781"]},{"raw_affiliation_string":"The University of Adelaide,Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103075476","display_name":"Muhammad Ali Babar","orcid":"https://orcid.org/0000-0001-9696-3626"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Muhammad Ali Babar","raw_affiliation_strings":["The University of Adelaide, Cyber Security Cooperative Research Centre, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Adelaide, Cyber Security Cooperative Research Centre, Australia","institution_ids":["https://openalex.org/I5681781"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I5681781"],"apc_list":null,"apc_paid":null,"fwci":0.7662,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.6951775,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9860000014305115,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9837999939918518,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/devops","display_name":"DevOps","score":0.9854899644851685},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.7247529029846191},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6851832270622253},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5528794527053833},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5374465584754944},{"id":"https://openalex.org/keywords/thematic-analysis","display_name":"Thematic analysis","score":0.4400615096092224},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.3879149556159973},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.38457849621772766},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.355959415435791},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.20324909687042236},{"id":"https://openalex.org/keywords/qualitative-research","display_name":"Qualitative research","score":0.13660278916358948},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.08232128620147705}],"concepts":[{"id":"https://openalex.org/C9903902","wikidata":"https://www.wikidata.org/wiki/Q3025536","display_name":"DevOps","level":3,"score":0.9854899644851685},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.7247529029846191},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6851832270622253},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5528794527053833},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5374465584754944},{"id":"https://openalex.org/C74196892","wikidata":"https://www.wikidata.org/wiki/Q7781188","display_name":"Thematic analysis","level":3,"score":0.4400615096092224},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3879149556159973},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.38457849621772766},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.355959415435791},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.20324909687042236},{"id":"https://openalex.org/C190248442","wikidata":"https://www.wikidata.org/wiki/Q839486","display_name":"Qualitative research","level":2,"score":0.13660278916358948},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.08232128620147705},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3475716.3475776","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3475716.3475776","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM / IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2107.02096","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2107.02096","pdf_url":"https://arxiv.org/pdf/2107.02096","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:3177774072","is_oa":true,"landing_page_url":"http://arxiv.org/pdf/2107.02096.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2107.02096","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2107.02096","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2107.02096","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2107.02096","pdf_url":"https://arxiv.org/pdf/2107.02096","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6000000238418579}],"awards":[],"funders":[{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3177774072.pdf","grobid_xml":"https://content.openalex.org/works/W3177774072.grobid-xml"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W332076024","https://openalex.org/W1423289960","https://openalex.org/W1969939902","https://openalex.org/W1979290264","https://openalex.org/W2003662123","https://openalex.org/W2033019352","https://openalex.org/W2057366964","https://openalex.org/W2060190987","https://openalex.org/W2064068790","https://openalex.org/W2078393527","https://openalex.org/W2158297335","https://openalex.org/W2297419069","https://openalex.org/W2503060256","https://openalex.org/W2527104146","https://openalex.org/W2546493083","https://openalex.org/W2725103509","https://openalex.org/W2748690817","https://openalex.org/W2753691335","https://openalex.org/W2793789686","https://openalex.org/W2889849786","https://openalex.org/W2890814227","https://openalex.org/W2905459693","https://openalex.org/W2953482317","https://openalex.org/W2953854830","https://openalex.org/W2982485630","https://openalex.org/W3023116132","https://openalex.org/W3033639614","https://openalex.org/W3048896994","https://openalex.org/W3111055825","https://openalex.org/W3112841492","https://openalex.org/W3136814947","https://openalex.org/W3156556445","https://openalex.org/W3176465319","https://openalex.org/W4244757210","https://openalex.org/W6749943152"],"related_works":["https://openalex.org/W3202451838","https://openalex.org/W2993710525","https://openalex.org/W2294859214","https://openalex.org/W2341891100","https://openalex.org/W2765472513","https://openalex.org/W116051878","https://openalex.org/W3041681877","https://openalex.org/W2007888575","https://openalex.org/W2002563179","https://openalex.org/W3012087942","https://openalex.org/W1522330337","https://openalex.org/W3129023747","https://openalex.org/W3159076496","https://openalex.org/W2184936761","https://openalex.org/W3210990339","https://openalex.org/W1512726070","https://openalex.org/W2774190983","https://openalex.org/W2884553123","https://openalex.org/W2969556982","https://openalex.org/W3000069503"],"abstract_inverted_index":{"Background:":[0],"Security":[1],"tools":[2,26,53,80,104,116,135,154,173],"play":[3],"a":[4,55,70,85,148,156],"vital":[5],"role":[6],"in":[7,35,58,81,105,164],"enabling":[8],"developers":[9],"to":[10,20,42,60,93,101,119,188],"build":[11],"secure":[12],"software.":[13],"However,":[14],"it":[15],"can":[16],"be":[17,189],"quite":[18],"challenging":[19],"introduce":[21],"and":[22,97,155],"fully":[23],"leverage":[24],"security":[25,52,79,103,115,134,153,172],"without":[27],"affecting":[28],"the":[29,36,45,65,95,122,126,141,165,170,178],"speed":[30],"or":[31],"frequency":[32],"of":[33,124,133,143,158,177,180],"deployments":[34],"DevOps":[37,56,149],"paradigm.":[38],"Aims:":[39],"We":[40,68,83,110,145],"aim":[41],"empirically":[43],"investigate":[44],"key":[46],"challenges":[47,96],"practitioners":[48],"face":[49],"when":[50],"integrating":[51,78,102],"into":[54],"workflow":[57,150],"order":[59],"provide":[61],"recommendations":[62,163],"for":[63,121],"overcoming":[64],"challenges.":[66],"Method:":[67],"conducted":[69],"study":[71],"involving":[72],"31":[73],"systematically":[74],"selected":[75],"webinars":[76],"on":[77,140],"DevOps.":[82,144],"used":[84],"qualitative":[86],"data":[87],"analysis":[88],"method,":[89],"i.e.,":[90],"thematic":[91],"analysis,":[92],"identify":[94],"emerging":[98],"solutions":[99],"related":[100],"rapid":[106],"deployment":[107],"environments.":[108],"Results:":[109],"find":[111],"that":[112,136,151],"whilst":[113],"traditional":[114],"are":[117,174,183],"unable":[118],"cater":[120],"needs":[123,142],"DevOps,":[125,181],"industry":[127],"is":[128],"moving":[129],"towards":[130],"new":[131],"generations":[132],"have":[137,146],"started":[138],"focusing":[139],"developed":[147],"integrates":[152],"set":[157],"guidelines":[159],"by":[160],"synthesizing":[161],"practitioners'":[162],"analyzed":[166],"webinars.":[167],"Conclusion:":[168],"Whilst":[169],"latest":[171],"addressing":[175],"some":[176],"requirements":[179],"there":[182],"many":[184],"tool-related":[185],"drawbacks":[186],"yet":[187],"adequately":[190],"addressed.":[191]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2026-08-08T01:25:22.217667","created_date":"2025-10-10T00:00:00"}