Creating It from SCRATCh: A Practical Approach for Enhancing the Security of IoT-Systems in a DevOps-Enabled Software Development Environment
Autor: | Krishna Sudhakar, Simon Duque Anton, Tobias Koch, Daniel Fraunholz, Daniel Krohmer, Marcell Marosvölgyi, Morten Larsen, Cédric Bassem, Hans D. Schotten, Franklin Selgert, Daniel Reti, Till Witt |
---|---|
Rok vydání: | 2020 |
Předmět: |
Structure (mathematical logic)
Speedup business.industry Computer science Process (engineering) Margin of error 020207 software engineering 02 engineering and technology Task (project management) 020204 information systems 0202 electrical engineering electronic engineering information engineering Architecture DevOps Software engineering business Set (psychology) |
Zdroj: | Computer Safety, Reliability, and Security. SAFECOMP 2020 Workshops ISBN: 9783030555825 SAFECOMP Workshops |
Popis: | DevOps describes a method to reorganize the way different disciplines in software engineering work together to speed up software delivery. However, the introduction of DevOps-methods to organisations is a complex task. A successful introduction results in a set of structured process descriptions. Despite the structure, this process leaves margin for error: Especially security issues are addressed in individual stages, without consideration of the interdependence. Furthermore, applying DevOps-methods to distributed entities, such as the Internet of Things (IoT) is difficult as the architecture is tailormade for desktop and cloud resources. In this work, an overview of tooling employed in the stages of DevOps processes is introduced. Gaps in terms of security or applicability to the IoT are derived. Based on these gaps, solutions that are being developed in the course of the research project SCRATCh are presented and discussed in terms of benefit to DevOps-environments. |
Databáze: | OpenAIRE |
Externí odkaz: |