DevOps revolutionize the software development lifecycle by providing agile and fast-paced solutions. DevOps ignores security prospects since it focuses only on increasing development and speed. DevSecOp is a notion of implanting Security into DevOps operation without distressing its agile nature by discovering contemporary security practices. This research aims to reveal a comprehensive overview of DevSecOp.  Here we presented a brief overview of the research methodology. Afterward, it presented the method of gathering the required information.   This research paper is distributed in the following section. Section II presented the research methodology, while section III provided results from this study. In the end, we conclude our research In this study, we discover essential DevSecOp concepts, leverages of DevSecOp, and potential research challenges in implementing it. We used a Multivocal literature review to explore the aforementioned subjects. For this Multivocal literature review, we searched grey data and, after processed that data, found answers to our research questions. This review concluded that DevSecOp, although challenging to implement, can be a constructive addition to the DevOps paradigm. DevSecOp is a relatively new concept that is not even fully concise in its name and definition. The key idea of DevSecOp is to implant security into DevOps procedures to make them more secure. We presented MLR on DevSecOp, keeping in mind pre-designed research questions. Since DevSecOp is not as popular and does not contain enough academic literature, we had to include grey data for our literature review. This MLR concluded that DevSecOp is mainly defined as integrating Security into DevOps

Computing of clouds provide the admittance to the collection of computational possessions like storage of network and services. These possessions can be resealed and prompt with the minor efforts of the management because they have a scalable and dynamic environment. As a service the cloud computing offers the computing infrastructure, development of the stage as well as software and web applications like the model of pay as you go for the customers. Services are measured as the infrastructures as services (IAAS), Platform as a Service (PAAS), and the service software (SAAS) in diligence. In the research, we deliberate the Assessing the Security of Cloud It Components according to the criterion of obtainable principles. Methodology. In the advancement of the cloud computing metrics hierarchy, we covenant with the cloud computing management security with the GQM methodology. The main intention of the hierarchy proposed is to develop index for the security which entirely explained the security level in an estimate computing cloud environment. On the stride of the index for the security, we compute the index for the security to compute the allocation index. This allocation index will help in the management of the priorities set with a strong security prejudice. In this, we elucidate the slant for computingcloud management by use of security as a standard. Scientific review. The most enviable prerequisite of the computing of the cloud is to shun waste the underused possessions and mount the point of the response rate in the shortage of resources. In the latest literature in the administration field prioritization provision of the resources, we noticed that algorithm is preferred for the energy proficient management of the computing cloud environments. The metrics for the security use as instrument to provide the status about the information of security. Conclusion. In this editorial, we projected a management method for the computingcloud  by using the criteria for the security. We accessible the 2 approaches to resource management. These strategies pact with the granularity and scalability in the computing cloud system. The security index covey the level of the security in the cloud computing environment in the modeled with metrics hierarchy. The biggest gain of using this approach is that it ropes the hierarchical decomposition that makes the model more scalable and disseminated.

No abstract

The article reveals the principles of automation of organizations using cloud technologies through the prism without the peak aspect. The main stages of development of cloud technologies are characterized, the advantages of using these systems in everyday work are revealed (low consumption of financial resources, possibility of universal access to information, constant improvement of software and technologies). At the same time, attention is drawn to the main challenges facing users of cloud services: the need for a constant and uninterrupted Internet, the inability to recover information in case of loss. Security remains a major issue, therefore. The purpose of the article is to analyze the risks and possible ways to overcome them in the work of organizations with cloud technologies. It is established that the system that affects the reliable storage of information from customers can be exposed to such threats as cross-site-scripting, fishing, Trojans, viruses. This is due to the fact that, as a rule, consumers working with the cloud computing service, use an Internet browser. In order to optimize information security at this level, you need to use licensed anti-virus software packages, personal firewall tools, tools to encrypt data or information on disk, a properly configured Internet browser. It is proved that the security of virtualization mechanisms also affects the reliability of the virtual environment. For example, if the attack is organized on the monitor of virtual machines, the attacker may unnoticed by the security system, which are in the virtual machines can edit, copy or block the flow of information. Thus, if a hacker gains access to control capabilities, he will not only be able to edit data, but also steal it throughout the virtual network. Therefore, to avoid this situation, you need to protect the administration or servers of virtual machines. In addition, you need to create specialized information security tools that can monitor traffic inside the required server. At the same time, compliance with basic fire safety rules is also important for the safe operation of servers.