• DOI:10.1007/978-3-319-67383-7_2
• Corpus ID: 4212022

DevSecOps: A Multivocal Literature Review

@inproceedings{Myrbakken2017DevSecOpsAM,
  title={DevSecOps: A Multivocal Literature Review},
  author={H{\aa}vard Myrbakken and Ricardo Colomo Palacios},
  booktitle={SPICE},
  year={2017}
}

• Håvard Myrbakken, Ricardo Colomo Palacios
• Published in SPICE 4 October 2017
• Computer Science

Involving security in DevOps has been a challenge because traditional security methods have been unable to keep up with DevOps’ agility and speed. DevSecOps is the movement that works on developing and integrating modernized security methods that can keep up with DevOps. This study is meant to give an overview of what DevSecOps is, what implementing DevSecOps means, the benefits gained from DevSecOps and the challenges an organization faces when doing so. To that end, we conducted a multivocal literature review, where we reviewed a selection of grey literature. We found that implementing security that can keep up with DevOps is a challenge, but it can gain great benefits if done correctly.