onr:"swepub:oai:DiVA.org:bth-22104"
Search: onr:"swepub:oai:DiVA.org:bth-22104" > Enterprise-Driven O...
- 1 of 1
- Previous record
- Next record
- To hitlist
Enterprise-Driven Open Source Software : A Case Study on Security Automation
-
- Angermeir, Florian (author)
- Tech Univ Munich, DEU
-
- Voggenreiter, Markus (author)
- Siemens Technol, Mumbai, DEU
-
- Moyon, Fabiola (author)
- Tech Univ Munich, DEU
- show more...
- show less...
- (creator_code:org_t)
- IEEE Computer Society, 2021
- 2021
- English.
- In: 2021 IEEE/ACM 43RD INTERNATIONAL CONFERENCE ON SOFTWARE ENGINEERING: SOFTWARE ENGINEERING IN PRACTICE (ICSE-SEIP 2021). - : IEEE Computer Society. - 9780738146690 ; , s. 278-287
- Conference paper (peer-reviewed)
Abstract
Subject headings
Close
- Agile and DevOps are widely adopted by the industry. Hence, integrating security activities with industrial practices. such as continuous integration (CI) pipelines, is necessary to detect security flaws and adhere to regulators' demands early. In this paper, we analyze automated security activities in CI pipelines of enterprise-driven open source software (OSS). This shall allow us, in the long-run, to better understand the extent to which security activities are (or should be) part of automated pipelines. In particular, we mine publicly available OSS repositories and survey a sample of project maintainers to better understand the role that security activities and their related tools play in their CI pipelines. To increase transparency and allow other researchers to replicate our study (and to take different perspectives), we further disclose our research artefacts. Our results indicate that security activities in enterprise-driven OSS projects are scarce and protection coverage is rather low. Only 6.83% of the analyzed 8,243 projects apply security automation in their CI pipelines, even though maintainers consider security to be rather important. This alerts industry to keep the focus on vulnerabilities of 3rd Party software and it opens space for other improvements or practice which we outline in this manuscript.
Subject headings
- NATURVETENSKAP -- Data- och informationsvetenskap -- Programvaruteknik (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Software Engineering (hsv//eng)
Keyword
- Security
- Secure Software Engineering
- Continuous Integration
- Open Source Software
- DevOps
- Industrial Companies
- DevSecOps
Publication and Content Type
- ref (subject category)
- kon (subject category)
Find in a library
- 2021 IEEE/ACM 43RD INTERNATIONAL CONFERENCE ON SOFTWARE ENGINEERING: SOFTWARE EN... (Search for host publication in LIBRIS)
To the university's database
- 1 of 1
- Previous record
- Next record
- To hitlist
Find more in SwePub
- By the author/editor
- Angermeir, Flori ...
- Voggenreiter, Ma ...
- Moyon, Fabiola
- Mendez, Daniel
- About the subject
-
- NATURAL SCIENCES
- NATURAL SCIENCES
- and Computer and Inf ...
- and Software Enginee ...
- Articles in the publication
- 2021 IEEE/ACM 43 ...
- By the university
- Blekinge Institute of Technology
Search outside SwePub
- Extend your search to:
- Google Book Search
- Google Scholar
Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.
- Copyright © LIBRIS - National Library Systems
- LIBRIS.kb.se
