Integrating security scans into CI/CD pipelines
Ενσωμάτωση ελέγχων ασφαλείας σε συστήματα συνεχής ενσωμάτωσης και εκτέλεσης με μέσα πληροφορίας
View/
Keywords
Συνεχής Ενσωμάτωση και Συνεχής Παράδοση/Ανάπτυξη ; Continuous integration ; Continuous delivery / deployment ; Software development lifecycle ; Static application security testing ; Dynamic application security testing ; Συνεχής ενσωμάτωση ; Συνεχής παράδοση / ανάπτυξη ; Κύκλος ζωής ανάπτυξης λογισμικού ; Στατική δοκιμή ασφαλείας εφαρμογών ; Δυναμική δοκιμή ασφαλείας εφαρμογώνAbstract
Over the last few decades, technology has advanced rapidly, becoming accessible to individuals
on a scale previously unimaginable. Today almost every adult possesses at least one smart
device. These devices host applications containing a wide range of personal data, from
photos to e-banking information. Ensuring the security of these data involves protecting the
medium through which they are transferred—namely, the applications themselves. Robust
security measures for these applications are essential to safeguard sensitive information
from potential threats. Companies have struggled in the past , and some still do, with the
balance of quality and speed when trying to deliver.
That's where Continuous Integration and Continuous Delivery/Deployment (CI/CD) aims to
streamline and accelerate the software development lifecycle (SDLC), the ability to build
reliable, secure and maintainable applications without sacrificing the delivery speed to
market. The goal of this thesis is to provide steps for a complete environment along with two
CI/CD pipelines, one that emphasizes on Static Application Security Testing (SAST) and one
on Dynamic Application Security Testing (DAST). An insecure application will be used in
order to show results of those pipelines.
Security should be the most crucial aspect of the development cycle of an application because it
can define the available tools to the developers and the structure of the application. That's
why security must be integrated into the CI/CD pipelines.
Department
Σχολή Τεχνολογιών Πληροφορικής και Επικοινωνιών. Τμήμα ΠληροφορικήςNumber of pages
93Language
EnglishCollections
Except where otherwise noted, this item's license is described as
Αναφορά Δημιουργού 3.0 Ελλάδα
Αναφορά Δημιουργού 3.0 Ελλάδα