Towards DevSecOps Model for Multi-tier Web Applications

\nDevelopment, Security and Operations (DevSecOps) as part of Continuous Deployment (CD) or Continuous Delivery (CD) are considered a reliable link for communication and collaboration between development, security and operations teams. The philosophy of DevSecOps is defined as the ability to push new releases into production quickly and securely. We assume that DevSecOps brings new challenges, which primarily have a strong impact on decisions and organizational responsibilities within a company. We claim that PHP is the most commonly used back-end programming language for native applications, frameworks-based applications and content management system that implement this language. In addition, multi-tier architecture is one of the main architectures used by many software or web applications. Thereby, there is a significant and necessarily need to understand how DevSecOps on multi-tier PHP web applications could impact delivery accuracy. The goal of this work is to develop a DevSecOps pipeline model for multi-tier web applications that implement PHP.\n