Securing a Deployment Pipeline

No abstract is available for this paper.

• Publication year

  2015

• Venue

  2015 IEEE/ACM 3rd International Workshop on Release Engineering

• Publication date

  2015-05-16

• Fields of study

  Computer Science, Engineering

• Identifiers
  DOI 10.1109/RELENG.2015.11
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Composing Patterns to Construct Secure Systems

  2015cited by this paper
• Modelling Access Propagation in Dynamic Systems

  2013cited by this paper
• Evaluating and Mitigating Software Supply Chain Security Risks

  2010cited by this paper

• Securing DevOps by Identifying the Most Common Vulnerabilities in CI/CD Pipelines

  2025cites this paper
• A Threat-Oriented Study of API Security Challenges in CI/CD Pipelines

  2025influential citation
• A Systematic Literature Review on Continuous Integration and Deployment (CI/CD) for Secure Cloud Computing

  2025cites this paper
• A Defence-Oriented Study of API Security in CI/CD Pipelines

  2025influential citation
• Secure Crowdsource-Based Open-Source Code Verification (SC)^2V

  2024cites this paper
• Software supply chain security: a systematic literature review

  2024cites this paper
• OSSIntegrity: Collaborative open-source code integrity verification

  2024cites this paper
• Computer Security: ESORICS 2020 International Workshops, DETIPS, DeSECSys, MPS, and SPOSE, Guildford, UK, September 17–18, 2020, Revised Selected Papers

  2023cites this paper
• Developers' Approaches to Software Supply Chain Security: An Interview Study

  2023cites this paper
• Practices and challenges of threat modelling in agile environments

  2023cites this paper
• From DevOps to DevSecOps is not enough. CyberDevOps: an extreme shifting-left architecture to bring cybersecurity within software security lifecycle pipeline

  2023cites this paper
• An Integrity-Focused Threat Model for Software Development Pipelines

  2022influential citation
• SoK: Taxonomy of Attacks on Open-Source Software Supply Chains

  2022cites this paper
• Monitoring a CI/CD Workflow Using Process Mining

  2021cites this paper
• P2ISE: Preserving Project Integrity in CI/CD Based on Secure Elements

  2021cites this paper
• A Review on DevOps Adoption in Continuous Delivery Process

  2021cites this paper
• Problems of CI/CD and DevOps on Security Compliance

  2021cites this paper
• Research Findings in the Domain of CI/CD and DevOps on Security Compliance

  2021cites this paper
• SecDocker: Hardening the Continuous Integration Workflow

  2021cites this paper
• A Survey of DevOps in the South African Software Context

  2021cites this paper
• Towards detection of software supply chain attacks by forensic artifacts

  2020cites this paper
• Multicriteria decision‐making taxonomy for DevOps challenging factors using analytical hierarchy process

  2020cites this paper
• LockChain Technology as One Source of Truth for Cyber, Information Security and Privacy

  2020cites this paper
• ICITPM: Integrity Validation of Software in Iterative Continuous Integration Through the Use of Trusted Platform Module (TPM)

  2020cites this paper
• Modelagem de Ameaças em Pipelines de Desenvolvimento

  2020cites this paper
• A Continuous Certification Methodology for DevOps

  2019cites this paper
• DevOps in practice: A multiple case study of five companies

  2019cites this paper
• A framework for detecting and preventing security vulnerabilities in continuous integration/continuous delivery pipelines

  2019influential citation
• Critical Success Factors of Continuous Practices in a DevOps Context

  2019cites this paper
• Continuous integration and delivery applied to large-scale software-intensive embedded systems

  2019cites this paper
• Vulnerabilities in Continuous Delivery Pipelines? A Case Study

  2019cites this paper
• Adoption Issues in DevOps from the Perspective of Continuous Delivery Pipeline

  2019cites this paper
• Problems and Solutions of Continuous Deployment: A Systematic Review

  2018cites this paper
• DevOps Reference Architecture for Multi-cloud IOT Applications

  2018cites this paper
• Multivendor Deployment Integration for Future Mobile Networks

  2018cites this paper
• Exploiting DevOps Practices for Dependable and Secure Continuous Delivery Pipelines

  2018cites this paper
• An Analysis of Multi-domain Command and Control and the Development of Software Solutions through DevOps Toolsets and Practices

  2018cites this paper
• Continuous practices and devops: beyond the buzz, what does it all mean?

  2017cites this paper
• Security Support in Continuous Deployment Pipeline

  2017influential citation
• Continuous Integration, Delivery and Deployment: A Systematic Review on Approaches, Tools, Challenges and Practices

  2017cites this paper
• SecDevOps: Is It a Marketing Buzzword? - Mapping Research on Security in DevOps

  2016influential citation
• SecDevOps: Is It a Marketing Buzzword?

  2016cites this paper
• Security for Devops Deployment Processes: Defenses, Risks, Research Directions

  2016cites this paper
• Developing Dependable and Secure Cloud Applications

  2016influential citation
• Advantages of Docker

  2015cites this paper
• This paper is included in the Proceedings of the 31st USENIX Security

  year unknowncites this paper
• Repositório ISCTE-IUL

  year unknowncites this paper