DevOps Methodology Research Articles

Web Application Firewalls (WAF) Integration in DevOps Practices: A Scholarly Exploration of Security, Automation and Continuous Protection

This paper presents a comprehensive examination of the integration of Web Application Firewalls (WAF) within DevOps practices, underscoring the pivotal role of WAFs in fortifying security, enabling automation, and ensuring continuous protection. As DevOps methodologies advocate for rapid development and deployment cycles, robust security mechanisms that can keep pace with these accelerated processes are paramount. This study explores how integrating WAFs into the DevOps pipeline enhances the security posture of applications without impeding the agility and efficiency that DevOps promotes. It delves into the complexities of this integration, discusses strategies for seamless implementation, and addresses the challenges encountered in aligning WAF capabilities with the continuous and automated nature of DevOps workflows.

DevOps Model Appproach for Monitoring Smart Energy Systems

Energy systems are often socio-technical complex systems that are facing new challenges regarding technological and environmental changes. Because of their complex nature, they cannot be approached solely through analytical modeling, hence the inefficiency of most classical modeling approaches. In this article, a Hybrid Approach based on both systemic and analytical modeling is presented and applied to a case study. From this novel approach, a model—the Multi-Institution Building Energy System—is presented. It allowed us to highlight and detail the need for greater governance of energy systems. The socio-technical solutions identified to answer the issues of governance (Accuracy, Reliability and Fairness) were DevOps methodology and the use of Distributed Microservices Architecture. Based on this framework, the design of a Decision Support System assuring and exploiting state-of-the-art scalable tools for data management and machine learning factories is described in this article. Moreover, we wish to set up the conceptual basis necessary for the design of a generic theoretical framework of optimization applicable to complex socio-technical systems in the context of the management of a shared resource.

Perses: A framework for the continuous evaluation of the QoS of distributed mobile applications

The increasing capabilities of mobile devices have led to the emergence of new paradigms exploiting them. These paradigms foster the onload and distribution of functionalities on mobile devices, allowing the development of distributed mobile applications. This distribution reduces the latency and the data traffic overhead and improves privacy. As in any other mobile application, their success largely depends on the quality of service (QoS) they offer. Nevertheless, the evaluation of distributed mobile applications is particularly complex due to the number, heterogeneity, and interactions between the devices involved. Current techniques allow developers to assess the quality of a single device, but they are not designed for highly heterogeneous, distributed, and collaborative environments. This paper presents a framework called Perses, which allows the creation of virtual scenarios with multiple heterogeneous mobile devices to launch end-to-end tests to evaluate not only each device but also the interactions among them. The framework was evaluated against a real deployment, showing that the behavior and the quality attributes measured are similar to those of the real deployment, allowing developers to evaluate these applications before launching them. Finally, Perses was integrated into a DevOps methodology to automate its execution and further facilitate its adoption by software companies.

Software security risk management in DEVOPS methodology

It’s impossible to talk about cloud technologies, modern applications and, in general, digital transformation, and not to mention security. The same applies to software development, in particular the DevOps methodology. DevOps is a software development methodology that focuses on communication, integration, and collaboration between IT professionals ensuring rapid product deployment. DevOps practice reflects the idea of continuous improvement and automation. Many practices are designed for one or more stages of the development cycle. Three hundred hours spent on software development can be wasted in just 30 seconds, if only one defect during operation is detected. This, subsequently, can ruin reputation of the whole product, and as a result there will be no choice but to simply remove it from the market. And this establishes the importance and necessity of quality control [1].
 To ensure quality of software products during development risk management should be used at every stage of the DevOps lifecycle. Implementing DevOps without paying attention to security will definitely increase risks of attacks. Risk is the occurrence of an uncertain event that positively or negatively affects measured criteria of project success. These can be events that have happened in the past or current events, or something that may happen in the future. These uncertain events can affect target, business, technical and qualitative objectives of the project [2].
 Main stages of risk management include:
 
 risk identification;
 risk analysis and assessment;
 risk response;
 risk monitoring and control.
 
 The purpose of the article is to choose the method of risk analysis and assessment in the DevOps methodology. When using risk management model in DevOps, it is important to choose risk assessment method that is optimal for the criteria relevant to DevOps. To such criteria authors attribute cost of resources, time spent, accuracy of evaluation. Therefore, the choice of risk assessment method is an important component of the process of creating secure software. Risk assessment methods such as PRisMA, PRAM, FMEA, DREAD and FTA were considered in this work.

DevOps Enabled Agile: Combining Agile and DevOps Methodologies for Software Development

The Agile and DevOps software development methodologies have made revolutionary advancements in software engineering. These methodologies vastly improve software quality and also speed up the process of developing software products. However, several limitations have been discovered in the practical implementation of Agile and DevOps, including the lack of collaboration between the development, testing and delivery sectors of different software projects and high skill requirements. This paper presents a solution to bridge the existing gaps between Agile and DevOps methodologies by integrating DevOps principles into Agile to devise a hybrid DevOps Enabled Agile for software development. This study includes the development of a small-scale, experimental pilot project to demonstrate how software development teams can combine the advantages of Agile and DevOps methodologies to fulfill the gaps and provide further improvements to the speed and quality of software development process while maintaining feasible skill requirements.

DEVSECOPS METHODOLOGY FOR NG-IOT ECOSYSTEM DEVELOPMENT LIFECYCLE – ASSIST-IOT PERSPECTIVE

Current software projects require continuous integration during their whole lifetime. In this context, different approaches regarding introduction of DevOps and DevSecOps strategies have been proposed in the literature. While DevOps proposes an agile methodology for the development and instantiation of software platforms with minimal impact in any kind of operations environment, this contribution proposes the introduction of DevOps methodology for Next Generation IoT deployments. Moreover, novelty of the proposed approach lies in leveraging DevSecOps in different stages and layers of the architecture. In particular, the present work describes the different DevSecOps methodology tasks, and how the security is included on pre-design activities such as planning, creation or adaptation, the design and implementation, as well as on post-implementation activities such as detection, response. Without proper consideration of security and privacy best practices identified in this article, the continuous delivery of services using DevOps methodologies may create risks and introduce different vulnerabilities for Next Generation IoT deployments.

DevSecOps: A Boon to the IT Industry

DevSecOps is a combination of development, security, and operations that ensure security integrated with DevOps. There have been many new advances in IT that make it easier to include the DevOps methodology into application design, but these innovations come with a downside. As a result, many compliance monitoring tools have not kept pace with the new developments. Threat problems manifest after app release, where the public as well as the client is affected and the company’s reputation takes a hit. Continuous Integration and continuous deployment do not embrace security checks which impose threat to application. So, there is a need to convert CI/CD (Continuous Integration/Continuous Deployment) to CI/CD/CS (Continuous Integration/Continuous Deployment/Continuous Security).This can be implemented by integrating the AppSec pipeline to DevOps pipeline. Introducing security after Integration Testing in DevOps pipeline provides the facility to detect any vulnerability existing in the product.

Optimize Continuous Integration and Continuous Deployment in Azure DevOps for a controlled Microsoft .NET environment using different techniques and practices

Delivering a software is not a simple process, even if it is a completely new software created from the scratch, the enhancement of an existing software or fixing the bugs of an existing application. As per the new industrial standard most of the companies follow the DevOps methodologies to deliver the software products, which leverage the flexibilities of the software delivery with expected quality on time with minimal errors. One of the most important factors of the DevOps methodology is Continuous Integration and Continuous Deployment. As the entire software industry is moving towards Cloud Computing one of the most powerful, cost effective and easily maintainable environment to host the software applications. There are various Cloud computing providers available in the industry now. Most of them have its own advantage and dis-advantages. There are many researches going on various topics on these areas and the importance of these topics are getting more relevant in the industry now. There are lot of gaps on the Continuous Integration and Continuous Deployment concepts and more improvement options have to be identified and certified throughout the various researches. To understand the importance of this platform, we decided to concentrate the research on the Continuous Integration and Continuous Deployment in Azure DevOps for a controlled Microsoft .NET environment using different techniques and practices. Here our intention is to identify the various factors which helps the industry to do a better Continuous Integration and Continuous Deployment in the Azure DevOps for a controlled Microsoft .NET environment using different techniques and practices. Among the “n” number of factors identified on this subject, only couple of factors are considered as part of this research.

Гибкие подходы к разработке программного обеспечения: эволюция и перспективы развития

The article is devoted to the study of fiexible approaches (Agile) to the design of information systems software. Much attention is paid to the comparative analysis of currently popular fiexible methodologies, including the DevOps (Development and Operation) methodology [4], [5], which covers the entire life cycle of creating a software product. In conclusion, based on the conducted research, the author reveals the global and Russian trends in the development of Agile and formulates their development prospects.

Quality Maintenance and Monitoring using Azure CI pipeline and .Net Technologies

<p>The paper is about how the application is maintained and monitored using Azure CI pipeline. Maintaining and monitoring the quality of the software plays an important role in company’s growth and performance. This is achieved using DevOps. Few years back agile methodology was playing a major role in the industry, software were deployed in monthly, quarterly or annual basis, which is time consuming. However, now industries are moving towards DevOps methodology where in the software deployed multiple times a day. This methodology provides the organization to constantly and reliably add new features and automatically deploy them across various platforms or environment in order to gain high performance and quality assurance products. Continuous integration and Continuous delivery/ Continuous deployment are the pillars of DevOps. Continuous integration, Continuous delivery and Continuous deployment are the continuous software development practices of industry. By automating the build, test and deployment of software, CI/CD bridges the space between development and operation teams. This paper also concentrates on how the Test Driven Development features of .Net technologies supports the quality maintenance and monitoring of the application.</p>

The analysis of changes in the payroll of information system support specialists during the Devops methodology implementing

For a wide range of tasks, especially in the field of software development, the use of modern platforms for virtualization and containerization of applications can significantly increase the density of computing nodes (virtual machines and containers) on the equipment. In addition, the use of CI and CD practices can save the working time of employees responsible for supporting such IT infrastructure. At the same time, specialists supporting such IT infrastructure should have a number of additional competencies. The purpose of this article is to analyze the cost of specialists supporting information systems built using virtualization technologies, cloud computing in the context of CI and CD practices. This article presents an analysis of all available relevant vacancies in Saint Petersburg and Moscow from the HeadHunter site. Also, the difference between the required competencies and the level of salaries of specialists supporting classical and virtualized, automated IT infrastructure is shown.

Security Assurance in DevOps Methodologies and Related Environments

The biggest software development companies conduct daily more than hundreds deployments which influence currently operating IT (Information Technology) systems. This is possible due to the availability of automatic mechanisms which are providing their functional testing and later applications deployment. Unfortunately, nowadays, there are no tools or even a set of good practices related to the problem on how to include IT security issues into the whole production and deployment processes. This paper describes how to deal with this problem in the large mobile telecommunication operator environment.

Инновационная роль стандартов программирования в развитии методологии DevOps

Инновационная роль стандартов программирования в развитии методологии DevOps

Is DevOps another Project Management Methodology?

In this paper, the authors aim to present the concept of DevOps (Development & Operations), considering its degree of novelty in the area of project management. Firstly, the authors will bring theoretical arguments to support the idea that DevOps is an early-stage methodology, built on the Agile principles, but coming with its own contributions in project management for software development and implementation. Therefore, we believe that after a short time, DevOps will replace its predecessors. Secondly, we experienced this methodology by developing a small project in academic environment by three teams of master students, using VersionOne software. The Conclusions will emphasize the relevance and the future expected effects of DevOps methodology in the project management domain.

Enable cloud DevOps approach for industry and higher education

SummaryInnovation in both industry and academia increasingly depends on the fast evolution of software and software services. Adoption of agile software development methodologies has reduced time to market and improved success rates; however, deployment obstacles often impede the quick delivery of the new and improved features to end users. This paper deals with DevOps, a new methodology that extends agile processes to include operations. DevOps methodology adopted with cloud computing could immediately benefit current practitioners from various software development parties while a focus on the young will ensure that DevOps ideals and processes will be taken forward into the longer‐term future. Moving towards clouds, adopting DevOps culture, and implementing DevOps tools will produce more innovative services at lower cost and with higher quality. Wider adoption of the cloud DevOps will bring cloud DevOps features, and the benefit of agile software development, automation, and elastic resource provisioning. Additionally, teaching cloud DevOps in university will help to overcome the barriers to its adoption and maximize its indirect socioeconomic impact.

The Small Batches Principle

The small batches principle is part of the DevOps methodology. It comes from the lean manufacturing movement, which is often called just-in-time manufacturing. It can be applied to just about any kind of process. It also enables the MVP (minimum viable product) methodology, which involves launching a small version of a service to get early feedback that informs the decisions made later in the project.