[논문]DevOps와 DevSecOps의 컴포넌트 분석

홍진근

doi:10.15207/jkcs.2019.10.9.047

DevOps와 DevSecOps의 컴포넌트 분석
Component Analysis of DevOps and DevSecOps 원문보기

한국융합학회논문지 = Journal of the Korea Convergence Society, v.10 no.9, 2019년, pp.47 - 53

초록
AI-Helper

본 논문은 소프트웨어 및 제품의 개발운영 및 개발보안운영에 대한 특성을 검토하고 소프트웨어 코드 관점에서 사용 분석도구를 고찰하였다. 또한 보안 설계규칙을 고려할 때 인적인 요소의 중요성과 이를 강화해야 할 필요성이 강조되었다. 본 논문에서는 개발보안운영을 고려할 때 절차적인 요소의 관점에서 신속하고 정확한 의사결정에 중점을 두고 변화를 관리하는 안전한 프로세스에 대해 분석하였다. 또한 본 논문에서는 개발보안운영 특성과 관련하여 성숙도 모델 분석의 필요성을 논의하였고, 이에 따른 동적인 요소와 정적인 요소의 강도 및 통합 요소에 대한 세부 절차를 통해 분석요소의 의미를 분석하였다. 본 논문에서는 위협모델링 및 컴플라이언스 그리고 통제를 위한 스캔 활동이나 코드 분석과 같은 요소에 대해서도 분석하였다.

Abstract ▼ AI-Helper

This paper is analyzed of the characteristics of development operations and development security operations of the software and product, and the use analysis tools from a software code perspective. Also, it is emphasized the importance of human factors and the need to strengthen them, when considering security design rules. In this paper, we consider a secure process for managing change, focusing on fast and accurate decision-making in terms of procedural factors, when considering development security operations. In addition, the paper discussed the need for maturity model analysis in relation to the development security operating characteristics, and analyzed the meaning of the analysis elements through detailed procedures for the strength and integration elements of the dynamic and static elements accordingly. The paper also analyzed factors such as scanning activity and code analysis for threat modeling and compliance and control.

주제어

AI 본문요약
AI-Helper

* AI 자동 식별 결과로 적합하지 않은 문장이 있을 수 있으니, 이용에 유의하시기 바랍니다.

문제 정의

In this paper, we will examine its characteristics from DevOps and DevSecOps perspectives and focus on the testing tools applied to DevSecOps[9-13].
It also focuses on the security analysis tools used in the DevSecOps process, as well as the discussion of secure SDLCs.
This paper is a study of DevOps approach considered in the Mexican government's data center construction.

제안 방법

Metric elements related to security development security are included as a follows: Number of automated tests based on AI, security patches, event information of availability, time to engage in commit code development, implementation or rejection of platform governance, time from code commit to change and patch management, number of deployed platforms, and number of failed deployed platforms. Failed platform, number of published images, logging data, warning number, test (function, integration) number, test (function, approval) number, average recovery point, retention control, instantiation time from request to response, security variation from application to image instantiation, security control number, patch number, patch number, patch time, security compliance number from commencement to completion, operational and maintenance number, test and test and security management number, test and test and test and test and test and security number.
Dynamic analysis refers to the depth of dynamic scan implementations. From a strength perspective, the analysis is to determine whether or not robust the system is from the number of attacks carried out. And from an integrated perspective, it is an analysis that identifies how complete a series of analysis processes are.
In addition, the test items include security tests, integration tests, load and performance tests, system and function tests, regression tests and system acceptance tests.
In addition, integrated security is achieved. In order to ensure the security of performance, an integrated test is conducted during the test phase. During the release phase, a step-by-step test is carried out according to the release schedule.
In this paper, it is analyzed its characteristics with a connection between DevOps and DevSecOps of software and products. This paper considers the need for a maturity model analysis in relation to DevSecOps characteristics, and detailed analysis factors can be described procedure for strength of dynamic and static elements, and integration elements in detail considerations.
In this paper, it is analyzed its characteristics with a connection between DevOps and DevSecOps of software and products. This paper considers the need for a maturity model analysis in relation to DevSecOps characteristics, and detailed analysis factors can be described procedure for strength of dynamic and static elements, and integration elements in detail considerations. Of course, there are emphasized scanning activities or code analysis for threat modeling, and compliance and control.

내보내기 구분	파일저장 인쇄 메일전송
구성항목	기본정보 상세정보 관리번호, 논문명, 저널/프로시딩명, 저자 , 발행년, 권, 호, 시작페이지, 끝페이지, 발행기관 관리번호, 논문명, 대등논문명, 저자 , 저널/프로시딩명, 발행기관, 발행년, 발행언어, 권, 호, 시작페이지, 끝페이지, ISBN, ISSN, 주제분야, 키워드, 초록(한글), 초록(영문), 저자(소속기관)
저장형식	Text(ASCII format) Excel format RefWorks Direct Export RIS format (for Reference Manager, ProCite, EndNote), Scholar's Aids, Mendeley
메일정보	받는사람 (필수) @ 보내는사람 (선택) @ 제목 내용 KISTI 검색결과 이메일 서비스
안내	총 건의 자료가 검색되었습니다. 다운받으실 자료의 인덱스를 입력하세요. (1-10,000) 검색결과의 순서대로 최대 10,000건 까지 다운로드가 가능합니다. 데이타가 많을 경우 속도가 느려질 수 있습니다.(최대 2~3분 소요) 다운로드 파일은 UTF-8 형태로 저장됩니다. 파일의 내용이 제대로 보이지 않을실 때는 웹브라우저 상단의 보기 -> 인코딩 -> 자동선택 여부를 확인하십시오. ~ Text(ASCII format) Excel format

연합인증