DevSecOps: State of the Art and Relevance to the Department of Defense

reportActive / Technical Report | Accesssion Number: AD1224514 | Open PDF

Abstract:

Development-Security-Operations (DevSecOps) is an agile software development method in which developers, operators, and security experts are part of a single team responsible for the entire life cycle of a software product. DevSecOps can help solve many issues with traditional software methods that result in obsolete requirements and late discovery of security flaws after the software is delivered. The Department of Defense is interested in using this method to more rapidly develop and field secure software.

Author(s):
Agre, Jonathan R.
Author Organization(s):
INSTITUTE FOR DEFENSE ANALYSES ALEXANDRIA VA
Funding Organization(s):
Department of Defense, Washigton, DC
Document Type:
Technical Report/Final Report
Publication Date:
2020 Jun 01
Pagination:
22

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution Code:
A - Approved For Public Release
Distribution Statement: Public Release.
Copyright: Not Copyrighted

RECORD

Collection: TRECMS
Identifying Numbers
Contract Number(s):
HQ0034-14-D-0001
 Subject Terms
Keyword(s):
DevOps(development-operations), application security, toolchain, authority to operate, devsecops(agile software development method), continuous integration/continuous delivery cycle, SOFTWARE versions, ENTERPRISE SYSTEMS
Subject Categories:
Military Sciences; Military Sciences
Creation Date:
2024 Mar 26
Update Date:
2024 Mar 27