The Seven Sins: Security Smells in Infrastructure as Code Scripts

Practitioners use infrastructure as code (IaC) scripts to provision servers and development environments. While developing IaC scripts, practitioners may inadvertently introduce security smells. Security smells are recurring coding patterns that are indicative of security weakness and can potentiall...

Ausführliche Beschreibung

Bibliographische Detailangaben

Veröffentlicht in:	Proceedings / International Conference on Software Engineering S. 164 - 175
Hauptverfasser:	Rahman, Akond, Parnin, Chris, Williams, Laurie
Format:	Tagungsbericht
Sprache:	Englisch
Veröffentlicht:	IEEE 01.05.2019
Schlagworte:	devops devsecops empirical study Encoding infrastructure as code Password puppet security Servers smell Software Static analysis
ISSN:	1558-1225
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!