Adopting DevSecOps practices is critical for modern software development, yet small businesses face significant barriers such as high tooling costs, limited expertise, and integration challenges. This paper presents a cost-efficient DevSecOps framework specifically designed for small teams, emphasizing open-source tools, risk-based prioritization, and scalable practices. The proposed framework is validated through real-world implementations in Spring Boot, Laravel, Flask, and Express.js environments, achieving cost reductions of up to 93% while maintaining security standards. By addressing key adoption challenges, this framework empowers resource-constrained teams to integrate security seamlessly into their development workflows. Future work includes enhancing automation, industry-specific adaptations, and fostering community collaboration to address emerging security needs.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Cost-Efficient Security Practices Framework for Small DevSecOps Teams

  • Belouaddane Lahcen,
  • Ait Said Mehdi,
  • Marzouk Abderrahim,
  • Benmakhlouf Amine,
  • Raouf Anas

摘要

Adopting DevSecOps practices is critical for modern software development, yet small businesses face significant barriers such as high tooling costs, limited expertise, and integration challenges. This paper presents a cost-efficient DevSecOps framework specifically designed for small teams, emphasizing open-source tools, risk-based prioritization, and scalable practices. The proposed framework is validated through real-world implementations in Spring Boot, Laravel, Flask, and Express.js environments, achieving cost reductions of up to 93% while maintaining security standards. By addressing key adoption challenges, this framework empowers resource-constrained teams to integrate security seamlessly into their development workflows. Future work includes enhancing automation, industry-specific adaptations, and fostering community collaboration to address emerging security needs.