Automating Cybersecurity Compliance in DevSecOps with Open Information Model for Security as Code
Software development teams meet increasing requirements to implement cybersecurity management in compliance with standards and regulations. However, adopting a compliant cybersecurity management system and DevSecOps practices as part of a software development process has turned out to be tedious and expensive in practice. Open-source communities and open ecosystems, which lack tools and realistic practices for compliant cybersecurity management, face these difficulties as well.
Authors
- Tomi Janhunen (ORCID: https://orcid.org/0000-0002-2029-7708)
- Tero Päivärinta (ORCID: https://orcid.org/0000-0002-7477-0783)
- Henry Haverinen (ORCID: https://orcid.org/0000-0003-3791-882X)
- Sami Lempinen
- Suvi Kaartinen
- Sami Merilä
Institutions
- Tampere University (FI)
- University of Oulu (FI)
Publication Details
- Published
- 2024-10-11
- DOI
- https://doi.org/10.1145/3685651.3686700
- Citations
- 4
- Primary Topic
- Logic, Reasoning, and Knowledge
- Type
- article
- Field-Weighted Citation Impact
- 1.39