{"id":"https://openalex.org/W4399668148","doi":"https://doi.org/10.1145/3661167.3661238","title":"Towards People Maturity for Secure Development and Operations: A vision","display_name":"Towards People Maturity for Secure Development and Operations: A vision","publication_year":2024,"publication_date":"2024-06-14","ids":{"openalex":"https://openalex.org/W4399668148","doi":"https://doi.org/10.1145/3661167.3661238"},"language":"en","primary_location":{"id":"doi:10.1145/3661167.3661238","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3661167.3661238","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3661167.3661238","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101426168","display_name":"Muhammad Azeem Akbar","orcid":"https://orcid.org/0000-0002-4906-6495"},"institutions":[{"id":"https://openalex.org/I63548447","display_name":"Lappeenranta-Lahti University of Technology","ror":"https://ror.org/0208vgz68","country_code":"FI","type":"education","lineage":["https://openalex.org/I63548447"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Muhammad Azeem Akbar","raw_affiliation_strings":["Software Engineering, LUT University, Finland"],"raw_orcid":"https://orcid.org/0000-0002-4906-6495","affiliations":[{"raw_affiliation_string":"Software Engineering, LUT University, Finland","institution_ids":["https://openalex.org/I63548447"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078734626","display_name":"Saima Rafi","orcid":"https://orcid.org/0000-0002-9807-6235"},"institutions":[{"id":"https://openalex.org/I251738","display_name":"Edinburgh Napier University","ror":"https://ror.org/03zjvnn91","country_code":"GB","type":"education","lineage":["https://openalex.org/I251738"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Saima Rafi","raw_affiliation_strings":["School of Computing , Engineering and the Built Environment Edinburgh Napier University Edinburgh, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-9807-6235","affiliations":[{"raw_affiliation_string":"School of Computing , Engineering and the Built Environment Edinburgh Napier University Edinburgh, United Kingdom","institution_ids":["https://openalex.org/I251738"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006523717","display_name":"Sami Hyrynsalmi","orcid":"https://orcid.org/0000-0002-5073-3750"},"institutions":[{"id":"https://openalex.org/I63548447","display_name":"Lappeenranta-Lahti University of Technology","ror":"https://ror.org/0208vgz68","country_code":"FI","type":"education","lineage":["https://openalex.org/I63548447"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Sami Hyrynsalmi","raw_affiliation_strings":["Department Software Engineering, LUT University, Finland"],"raw_orcid":"https://orcid.org/0000-0002-5073-3750","affiliations":[{"raw_affiliation_string":"Department Software Engineering, LUT University, Finland","institution_ids":["https://openalex.org/I63548447"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044974108","display_name":"Arif Ali Khan","orcid":"https://orcid.org/0000-0002-8479-1481"},"institutions":[{"id":"https://openalex.org/I98381234","display_name":"University of Oulu","ror":"https://ror.org/03yj89h83","country_code":"FI","type":"education","lineage":["https://openalex.org/I98381234"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Arif Ali Khan","raw_affiliation_strings":["M3S Empirical Software Engineering Research Unit, University of Oulu, Finland"],"raw_orcid":"https://orcid.org/0000-0002-8479-1481","affiliations":[{"raw_affiliation_string":"M3S Empirical Software Engineering Research Unit, University of Oulu, Finland","institution_ids":["https://openalex.org/I98381234"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.2963,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.97608851,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"528","last_page":"533"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11864","display_name":"Supply Chain Resilience and Risk Management","score":0.9484000205993652,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11864","display_name":"Supply Chain Resilience and Risk Management","score":0.9484000205993652,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/maturity","display_name":"Maturity (psychological)","score":0.6368752717971802},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5270816683769226},{"id":"https://openalex.org/keywords/capability-maturity-model","display_name":"Capability Maturity Model","score":0.47217339277267456},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.411376416683197},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.16863957047462463},{"id":"https://openalex.org/keywords/developmental-psychology","display_name":"Developmental psychology","score":0.11185011267662048},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.06733021140098572}],"concepts":[{"id":"https://openalex.org/C101433766","wikidata":"https://www.wikidata.org/wiki/Q3543263","display_name":"Maturity (psychological)","level":2,"score":0.6368752717971802},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5270816683769226},{"id":"https://openalex.org/C85890633","wikidata":"https://www.wikidata.org/wiki/Q929673","display_name":"Capability Maturity Model","level":3,"score":0.47217339277267456},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.411376416683197},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.16863957047462463},{"id":"https://openalex.org/C138496976","wikidata":"https://www.wikidata.org/wiki/Q175002","display_name":"Developmental psychology","level":1,"score":0.11185011267662048},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.06733021140098572},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3661167.3661238","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3661167.3661238","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3661167.3661238","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3661167.3661238","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1563783760","https://openalex.org/W2562157698","https://openalex.org/W2725103509","https://openalex.org/W2735864825","https://openalex.org/W2736884738","https://openalex.org/W2828409123","https://openalex.org/W2900942998","https://openalex.org/W2961618311","https://openalex.org/W2982485630","https://openalex.org/W2986642681","https://openalex.org/W3034173343","https://openalex.org/W3042680674","https://openalex.org/W3045173304","https://openalex.org/W3111055825","https://openalex.org/W3122482990","https://openalex.org/W4237799823","https://openalex.org/W4250433609","https://openalex.org/W6680998773","https://openalex.org/W6743610577","https://openalex.org/W6756970710","https://openalex.org/W6768122846","https://openalex.org/W6776883386"],"related_works":["https://openalex.org/W2563825355","https://openalex.org/W4283172224","https://openalex.org/W2992877076","https://openalex.org/W4382725623","https://openalex.org/W2888066950","https://openalex.org/W2889844859","https://openalex.org/W3217511980","https://openalex.org/W2806063704","https://openalex.org/W4384822944","https://openalex.org/W2912268755"],"abstract_inverted_index":{"DevOps":[0,99,177],"(development":[1],"and":[2,27,51,89,152,170,192,201,244,295],"operations)":[3,90],"is":[4,33,41,116,132,219,261,272],"a":[5,83,111,230],"set":[6],"of":[7,14,37,53,68,82,110,121,203,214,221,229,265,269,291],"collaborative":[8],"practices":[9,96],"that":[10,249],"automate":[11],"continuous":[12,149],"delivery":[13,153],"new":[15],"software":[16,30,123,256],"versions":[17],"with":[18],"an":[19,34,74,181],"aim":[20],"to":[21,59,64,72,92,106,209,274,289],"reduce":[22],"the":[23,48,78,93,98,103,107,119,122,130,143,164,167,187,222,234,266],"development":[24,79,257],"life":[25,80],"cycle":[26,81],"produce":[28],"quality":[29,38],"products.":[31],"Security":[32],"important":[35],"attribute":[36],"software.":[39,84],"Software":[40],"secure":[42],"if":[43],"it":[44,156],"does":[45],"not":[46,140],"allow":[47],"confidentiality,":[49],"integrity,":[50],"availability":[52],"its":[54],"data,":[55],"code,":[56],"or":[57,227],"service":[58],"be":[60],"compromised.":[61],"In":[62,160,195],"order":[63],"take":[65],"full":[66],"advantage":[67],"DevOps,":[69],"security":[70,95,105,114,171,174,193,231,242,270,292],"needs":[71],"play":[73,180],"integral":[75],"part":[76],"in":[77,129,142,252,281],"The":[85,216],"DevSecOps":[86,101,145,162,282],"(development,":[87],"security,":[88],"refers":[91],"integrating":[94],"within":[97],"process.":[100,258],"promotes":[102,163],"shifting":[104],"early":[108],"stages":[109],"project.":[112],"Traditionally,":[113,233],"testing":[115,151],"done":[117],"towards":[118],"end":[120],"lifecycle.":[124],"However,":[125],"fixing":[126],"issues":[127],"later":[128],"process":[131],"more":[133,183],"costly":[134],"than":[135],"making":[136],"sure":[137],"defects":[138],"do":[139],"happen":[141],"beginning.":[144],"goes":[146],"beyond":[147],"automation,":[148],"integration,":[150],"processes,":[154],"since":[155],"also":[157],"encompasses":[158],"people.":[159],"fact,":[161],"collaboration":[165,188],"between":[166,189],"development,":[168],"operations,":[169],"teams.":[172],"When":[173],"comes":[175],"into":[176],"routines,":[178],"people":[179,208],"even":[182],"relevant":[184],"role":[185],"involving":[186],"those":[190],"teams":[191],"team.":[194],"any":[196],"organization":[197],"policies,":[198],"standards,":[199],"procedures":[200],"code":[202],"conducts":[204],"are":[205,212,279],"designed":[206],"for":[207],"follow.":[210],"People":[211],"executers":[213],"policies.":[215],"human":[217,247,276,284],"factor":[218],"one":[220,264],"major":[223,267],"forces":[224],"behind":[225],"effectiveness,":[226],"failure":[228],"system.":[232],"organizations":[235],"focus":[236],"on":[237],"protecting":[238],"their":[239],"infrastructure,":[240],"from":[241],"threats":[243],"they":[245],"ignore":[246],"behavior":[248],"may":[250,285],"result":[251],"malicious":[253,275],"activities":[254],"during":[255],"Human":[259],"aspect":[260],"considered":[262],"as":[263],"reasons":[268],"vulnerability":[271],"due":[273,288],"behavior,":[277],"who":[278],"involved":[280],"process;":[283],"make":[286],"mistakes":[287],"lack":[290],"perceptions,":[293],"skills,":[294],"knowledge.":[296]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}