To main content

Towards a Secure DevOps Approach for Cyber-Physical Systems: An Industrial Perspective

Towards a Secure DevOps Approach for Cyber-Physical Systems: An Industrial Perspective

Category
Academic article
Abstract
With the expansion of cyber-physical systems (CPSs) across critical and regulated industries, systems must be continuously updated to remain resilient. At the same time, they should be extremely secure and safe to operate and use. The DevOps approach caters to business demands of more speed and smartness in production, but it is extremely challenging to implement DevOps due to the complexity of critical CPSs and requirements from regulatory authorities. In this study, expert opinions from 33 European companies expose the gap in the current state of practice on DevOps-oriented continuous development and maintenance. The study contributes to research and practice by identifying a set of needs. Subsequently, the authors propose a novel approach called Secure DevOps and provide several avenues for further research and development in this area. The study shows that, because security is a cross-cutting property in complex CPSs, its proficient management requires system-wide competencies and capabilities across the CPSs development and operation.
Client
  • Research Council of Norway (RCN) / 247678
  • Research Council of Norway (RCN) / 285821
Language
English
Author(s)
  • Pekka Kalevi Abrahamsson
  • Goetz Botterweck
  • Hadi Ghanbari
  • Martin Gilje JAATUN
  • Petri Kettunen
  • Tommi Mikkonen
  • Anila Mjeda
  • Jürgen Münch
  • Anh Nguyen Duc
  • Barbara Russo
  • Xiaofeng Wang
Affiliation
  • University of Jyväskylä
  • Ireland
  • Aalto University
  • SINTEF Digital / Software Engineering, Safety and Security
  • University of Helsinki
  • Fachhochschule Reutlingen - Hochschule für Technik und Wirtschaft
  • University of South-Eastern Norway
  • Free University of Bozen-Bolzano
Year
2020
Published in
International Journal of Systems and Software Security and Protection (IJSSSP)
ISSN
2640-4265
Publisher
IGI Global
Volume
11
Issue
2
Page(s)
38 - 57