Towards a Secure DevOps Approach for Cyber-Physical Systems

Abrahamsson, Pekka; Botterweck, Goetz; Ghanbari, Hadi; Jaatun, Martin Gilje; Kettunen, Petri; Mikkonen, Tommi; Mjeda, Anila; Münch, Jürgen; Nguyen-Duc, Anh; Russo, Barbara

doi:10.4018/ijsssp.2020070103

Cited by 10 publications

(5 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We will also study means for them to connect with each other to create Systems-of-Systems (SoS) that can be changed at run-time to dynamically introduce, change, reorder, and/or remove production steps. Such capacities can be developed based on secure-enhanced flexible, reliable and timely completion of IT-related processes, known as DevSecOps [6], combined with concepts introduced by Eclipse Arrowhead [7], [8]. With these capacities, we aim at facilitating modular and flexible production systems that can easily be adapted in response to varying customer demands and disrupted supply chains.…”

Section: Methodology a Architecturementioning

confidence: 99%

Towards Adaptive Quality Assurance in Industrial Applications

Thomay

Bodin

Isakovic³

et al. 2022

NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium

View full text Add to dashboard Cite

We propose the AQUILA framework (Adaptive Quality Assurance in Industrial Applications) for digitalization in Industry 4.0 to support the entire industrial manufacturing chain, laying the groundwork for adaptive quality assurance in times of disrupted supply chains and, due to the COVID-19 pandemic, restricted travel possibilities. To that end, our proposed framework allows for the definition and description of industrial processes, quality assurance and testing protocols, and training scenarios in a comprehensive notation based on BPMN, and supports users in task execution, documentation, and evaluation by providing smart glass-based HCI with eye tracking technology, delivering a combination of process documentation, contextsensitive AR visualization, gaze-based interaction schemes, and remote maintenance and assistance functionality.

show abstract

Section: Methodology a Architecturementioning

confidence: 99%

Towards Adaptive Quality Assurance in Industrial Applications

Thomay

Bodin

Isakovic³

et al. 2022

NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium

View full text Add to dashboard Cite

show abstract

“…This data needs to be properly managed, stored, and analyzed to extract meaningful insights from it. 35,36 Data management in CPS engineering involves handling different versions of subsystems and components, which may have different data formats, storage requirements, and update schedules. This requires a systematic approach to data management, which involves defining data models, data integration strategies, and data governance policies.…”

Section: Datamentioning

confidence: 99%

“…With the increasing complexity of CPSs, the amount of data being generated is also increasing exponentially. This data needs to be properly managed, stored, and analyzed to extract meaningful insights from it 35,36 …”

Section: Challenge Areas In Developing Cpsmentioning

confidence: 99%

Experiences and challenges from developing cyber‐physical systems in industry‐academia collaboration

Cederbladh,

Eramo,

Muttillo

et al. 2024

Softw Pract Exp

View full text Add to dashboard Cite

SummaryCyber‐physical systems (CPSs) are increasing in developmental complexity. Several emerging technologies, such as Model‐based engineering, DevOps, and Artificial intelligence, are expected to alleviate the associated complexity by introducing more advanced capabilities. The AIDOaRt research project investigates how the aforementioned technologies can assist in developing complex CPSs in various industrial use cases. In this paper, we discuss the experiences of industry and academia collaborating to improve the development of complex CPSs through the experiences in the research project. In particular, the paper presents the results of two working groups that examined the challenges of developing complex CPSs from an industrial and academic perspective when considering the previously mentioned technologies. We present five identified challenge areas from developing complex CPSs and discuss them from the perspective of industry and academia: data, modeling, requirements engineering, continuous software and system engineering, as well as intelligence and automation. Furthermore, we highlight practical experience in collaboration from the project via two explicit use cases and connect them to the challenge areas. Finally, we discuss some lessons learned through the collaborations, which might foster future collaborative efforts.

show abstract

“…Secure DevOps and Continuous Security: As organizations increasingly adopt DevOps practices, there is a need for research on integrating security seamlessly into DevOps processes [209]. This involves developing methodologies and tools for continuous security testing, vulnerability management, and secure deployment pipelines.…”

Section: Security Of Emerging Technologiesmentioning

confidence: 99%

Theory and practice in secure software development lifecycle: A comprehensive survey

Otieno¹,

Odera²,

Ounza³

2023

World J. Adv. Res. Rev.

View full text Add to dashboard Cite

Software development security refers to the practice of integrating security measures and considerations throughout the software development lifecycle to ensure the confidentiality, integrity, and availability of software systems. It involves identifying, mitigating, and eliminating security vulnerabilities and threats that could be exploited by attackers. The goal of this paper is to survey the various concepts and methodologies directed towards software security, and the identification of any missing gaps. Based on the findings, it is noted that the development of secure software requires a proactive and comprehensive approach. It begins with establishing secure design principles and incorporating security requirements from the initial stages of development. Here, secure coding practices, such as input validation, output encoding, and secure authentication and authorization mechanisms, are employed to prevent common security vulnerabilities. In addition, regular security testing, including penetration testing and vulnerability scanning, helps identify and address potential weaknesses in the software. Normally, code reviews and security audits are conducted to ensure adherence to secure coding practices and identify any security flaws. It is important that security training and awareness programs be provided to developers and other stakeholders to foster a security-conscious culture. To minimize potential vulnerabilities, secure configuration management, which involves properly configuring servers, networks, and dependencies may be utilized. On the other hand, regular updates and patching are essential to address known security vulnerabilities in software components. To guide their software development security practices, organizations may follow established security standards and frameworks such as ISO 27001 or NIST Cybersecurity Framework. By prioritizing software development security, organizations can protect sensitive data, prevent unauthorized access, and mitigate the risk of security breaches and incidents. In the long run, this helps build trust with users and stakeholders, enhances the reputation of the software, and reduces the potential impact of security incidents on the organization.

show abstract

Towards a Secure DevOps Approach for Cyber-Physical Systems

Cited by 10 publications

References 30 publications

Towards Adaptive Quality Assurance in Industrial Applications

Towards Adaptive Quality Assurance in Industrial Applications

Experiences and challenges from developing cyber‐physical systems in industry‐academia collaboration

Theory and practice in secure software development lifecycle: A comprehensive survey

Contact Info

Product

Resources

About