The Seven Sins: Security Smells in Infrastructure as Code Scripts

Practitioners use infrastructure as code (IaC) scripts to provision servers and development environments. While developing IaC scripts, practitioners may inadvertently introduce security smells. Security smells are recurring coding patterns that are indicative of security weakness and can potentiall...

Full description

Bibliographic Details

Published in:	Proceedings / International Conference on Software Engineering pp. 164 - 175
Main Authors:	Rahman, Akond, Parnin, Chris, Williams, Laurie
Format:	Conference Proceeding
Language:	English
Published:	IEEE 01.05.2019
Subjects:	devops devsecops empirical study Encoding infrastructure as code Password puppet security Servers smell Software Static analysis
ISSN:	1558-1225
Online Access:	Get full text
Tags:	Add Tag No Tags, Be the first to tag this record!