{"id":"https://openalex.org/W4403325981","doi":"https://doi.org/10.1145/3685651.3686700","title":"Automating Cybersecurity Compliance in DevSecOps with Open Information Model for Security as Code","display_name":"Automating Cybersecurity Compliance in DevSecOps with Open Information Model for Security as Code","publication_year":2024,"publication_date":"2024-10-11","ids":{"openalex":"https://openalex.org/W4403325981","doi":"https://doi.org/10.1145/3685651.3686700"},"language":"en","primary_location":{"id":"doi:10.1145/3685651.3686700","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3685651.3686700","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th Eclipse Security, AI, Architecture and Modelling Conference on Data Space","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3685651.3686700","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090661435","display_name":"Henry Haverinen","orcid":"https://orcid.org/0000-0003-3791-882X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Henry Haverinen","raw_affiliation_strings":["Cyberismo, Finland"],"raw_orcid":"https://orcid.org/0000-0003-3791-882X","affiliations":[{"raw_affiliation_string":"Cyberismo, Finland","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046046339","display_name":"Tomi Janhunen","orcid":"https://orcid.org/0000-0002-2029-7708"},"institutions":[{"id":"https://openalex.org/I166825849","display_name":"Tampere University","ror":"https://ror.org/033003e23","country_code":"FI","type":"education","lineage":["https://openalex.org/I166825849"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Tomi Janhunen","raw_affiliation_strings":["Tampere University, Finland"],"raw_orcid":"https://orcid.org/0000-0002-2029-7708","affiliations":[{"raw_affiliation_string":"Tampere University, Finland","institution_ids":["https://openalex.org/I166825849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072648195","display_name":"Tero P\u00e4iv\u00e4rinta","orcid":"https://orcid.org/0000-0002-7477-0783"},"institutions":[{"id":"https://openalex.org/I98381234","display_name":"University of Oulu","ror":"https://ror.org/03yj89h83","country_code":"FI","type":"education","lineage":["https://openalex.org/I98381234"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Tero P\u00e4iv\u00e4rinta","raw_affiliation_strings":["University of Oulu, Finland"],"raw_orcid":"https://orcid.org/0000-0002-7477-0783","affiliations":[{"raw_affiliation_string":"University of Oulu, Finland","institution_ids":["https://openalex.org/I98381234"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109023610","display_name":"Sami Lempinen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sami Lempinen","raw_affiliation_strings":["Cyberismo, Finland"],"raw_orcid":"https://orcid.org/0009-0007-0980-9980","affiliations":[{"raw_affiliation_string":"Cyberismo, Finland","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109023611","display_name":"Suvi Kaartinen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Suvi Kaartinen","raw_affiliation_strings":["Cyberismo, Finland"],"raw_orcid":"https://orcid.org/0009-0001-6297-376X","affiliations":[{"raw_affiliation_string":"Cyberismo, Finland","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109023612","display_name":"Sami Meril\u00e4","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sami Meril\u00e4","raw_affiliation_strings":["Cyberismo, Finland"],"raw_orcid":"https://orcid.org/0009-0002-0648-2947","affiliations":[{"raw_affiliation_string":"Cyberismo, Finland","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.9621,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.88786063,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"93","last_page":"102"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11010","display_name":"Logic, Reasoning, and Knowledge","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11010","display_name":"Logic, Reasoning, and Knowledge","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9898999929428101,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10215","display_name":"Semantic Web and Ontologies","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.7278704047203064},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7099707126617432},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6974193453788757},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5905070900917053},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.43966910243034363},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.39973726868629456}],"concepts":[{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.7278704047203064},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7099707126617432},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6974193453788757},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5905070900917053},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.43966910243034363},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.39973726868629456},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3685651.3686700","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3685651.3686700","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th Eclipse Security, AI, Architecture and Modelling Conference on Data Space","raw_type":"proceedings-article"},{"id":"pmh:oai:trepo.tuni.fi:10024/211596","is_oa":true,"landing_page_url":"https://trepo.tuni.fi/handle/10024/211596","pdf_url":null,"source":{"id":"https://openalex.org/S4306401860","display_name":"Tampere University Institutional Repository (Tampere University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I150589677","host_organization_name":"Tampere University of Applied Sciences","host_organization_lineage":["https://openalex.org/I150589677"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference"}],"best_oa_location":{"id":"doi:10.1145/3685651.3686700","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3685651.3686700","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th Eclipse Security, AI, Architecture and Modelling Conference on Data Space","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W849075951","https://openalex.org/W1967527902","https://openalex.org/W2037889871","https://openalex.org/W2091138122","https://openalex.org/W2397927460","https://openalex.org/W2542981480","https://openalex.org/W3193339215","https://openalex.org/W4210654156","https://openalex.org/W4214532693","https://openalex.org/W4220949393","https://openalex.org/W4225443032","https://openalex.org/W4226321268","https://openalex.org/W4230094184","https://openalex.org/W4311623322"],"related_works":["https://openalex.org/W2410395228","https://openalex.org/W3125941065","https://openalex.org/W2484615095","https://openalex.org/W4366449942","https://openalex.org/W4366371796","https://openalex.org/W4366371752","https://openalex.org/W4205440829","https://openalex.org/W1489027086","https://openalex.org/W2339265919","https://openalex.org/W4210648132"],"abstract_inverted_index":{"Software":[0],"development":[1,31],"teams":[2],"meet":[3],"increasing":[4],"requirements":[5],"to":[6,36],"implement":[7],"cybersecurity":[8,20,56],"management":[9,21],"in":[10,41],"compliance":[11],"with":[12],"standards":[13],"and":[14,23,39,45,51],"regulations.":[15],"However,":[16],"adopting":[17],"a":[18,29],"compliant":[19,55],"system":[22],"DevSecOps":[24],"practices":[25,53],"as":[26,61],"part":[27],"of":[28],"software":[30],"process":[32],"has":[33],"turned":[34],"out":[35],"be":[37],"tedious":[38],"expensive":[40],"practice.":[42],"Open-source":[43],"communities":[44],"open":[46],"ecosystems,":[47],"which":[48],"lack":[49],"tools":[50],"realistic":[52],"for":[54],"management,":[57],"face":[58],"these":[59],"difficulties":[60],"well.":[62]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}