A Cost-Efficient Security Practices Framework for Small DevSecOps Teams
摘要
Adopting DevSecOps practices is critical for modern software development, yet small businesses face significant barriers such as high tooling costs, limited expertise, and integration challenges. This paper presents a cost-efficient DevSecOps framework specifically designed for small teams, emphasizing open-source tools, risk-based prioritization, and scalable practices. The proposed framework is validated through real-world implementations in Spring Boot, Laravel, Flask, and Express.js environments, achieving cost reductions of up to 93% while maintaining security standards. By addressing key adoption challenges, this framework empowers resource-constrained teams to integrate security seamlessly into their development workflows. Future work includes enhancing automation, industry-specific adaptations, and fostering community collaboration to address emerging security needs.