TY - JOUR A1 - Sen, Abhijit A1 - Falter, Sandro A1 - Mayer, Nicolas T1 - Using DevOps paradigm to deploy web applications JF - Issues of Information Systems N2 - DevOps paradigm is widely used in industry to develop software faster, deploy high quality frequent releases of features by integrating and harmonizing the Development and IT Operations activities. Industries are taking strategic decisions to remove the barriers that existed between Development and Operational teams by encouraging collaborations among these teams throughout System Development Life Cycle (SDLC). These strategic decisions to implement DevOps paradigm resulted in the development and emergence of large arrays of tool chains to support, monitor, and automate activities of various SDLC stages. In this paper authors attempt to give practical insights on how the using of DevOps can speed up the management, development and deployment process of a simple web application. Widely used DevOps model consisting of eight stages is used to implement the example application. A toolchain consisting of state of arts tools is used at various DevOps stages. A detailed explanation of each tool, including details to their implementation and a short evaluation concludes the study. The results revealed that the usage of DevOps enables to accelerate the development process of web applications, as most steps during the build and testing process can be automated. Especially the outsourcing of operational overhead to an external cloud provider can lead to economic advantages, which will impact the future of software development. KW - KPIs KW - SDLC KW - DevOps KW - Continuous Monitoring KW - Continuous integration KW - Continuous Deployment KW - Continuous delivery Y1 - 2022 U6 - https://doi.org/10.48009/4_iis_2022_113 VL - 23 IS - 4 SP - 142 EP - 156 PB - IACIS ER - TY - CHAP A1 - Falter, Sandro A1 - Brunkh, Gerald A1 - Wess, Max A1 - Fischer, Sebastian T1 - Automated Vulnerability Scanner for the Cyber Resilience Act T2 - CLOUD COMPUTING 2024 : The Fifteenth International Conference on Cloud Computing, GRIDs, and Virtualization, 15, 2024, Venice N2 - This paper explores the mitigation of the compliance burdens faced by manufacturers of digital products under the Cyber Resilience Act. After providing a concise overview of the Cyber Resilience Act and pinpointing pivotal areas where tool-based interventions could reduce the regulatory strain on manufacturers, we introduce two prototypes: a digital checklist for product classification and a prototype to streamline the analysis and monitoring of the security state of software along the software development life cycle. As the second prototype is based on Static Application Software Testing and Software Component Analysis, we validate the approach through benchmark tests. While Static Application Software Testing tools show promise in identifying vulnerabilities, additional tests are needed for full compliance with the Cyber Resilience Act. In general, the prototypes serve as an entry point for identifying possible automation potential to alleviate the compliance burdens of manufacturers. KW - cra KW - cyber resilience act KW - vulnerability scanner KW - reporting KW - iot KW - cloud Y1 - 2024 UR - https://www.thinkmind.org/library/CLOUD_COMPUTING/CLOUD_COMPUTING_2024/cloud_computing_2024_1_40_28004.html SN - 978-1-68558-156-5 SP - 13 EP - 18 PB - IARIA ER -