P2ISE: Preserving Project Integrity in CI/CD Based on Secure Elements

During the past decade, software development has evolved from a rigid, linear process to a highly automated and flexible one, thanks to the emergence of continuous integration and delivery environments. Nowadays, more and more development teams rely on such environments to build their complex projec...

Celý popis

Uloženo v:
Podrobná bibliografie
Vydáno v:Information (Basel) Ročník 12; číslo 9; s. 357
Hlavní autoři: Muñoz, Antonio, Farao, Aristeidis, Correia, Jordy Ryan Casas, Xenakis, Christos
Médium: Journal Article
Jazyk:angličtina
Vydáno: Basel MDPI AG 01.09.2021
Témata:
Automation
CI/CD pipeline
code integrity
Integrity
Pipelines
Security
Servers
Software
Software development
Source code
TPM
trusted computing
ISSN:2078-2489, 2078-2489
On-line přístup:Získat plný text
Tagy: Přidat tag
Žádné tagy, Buďte první, kdo vytvoří štítek k tomuto záznamu!
Popis
Shrnutí:During the past decade, software development has evolved from a rigid, linear process to a highly automated and flexible one, thanks to the emergence of continuous integration and delivery environments. Nowadays, more and more development teams rely on such environments to build their complex projects, as the advantages they offer are numerous. On the security side however, most environments seem to focus on the authentication part, neglecting other critical aspects such as the integrity of the source code and the compiled binaries. To ensure the soundness of a software project, its source code must be secured from malicious modifications. Yet, no method can accurately verify that the integrity of the project’s source code has not been breached. This paper presents P2ISE, a novel integrity preserving tool that provides strong security assertions for developers against attackers. At the heart of P2ISE lies the TPM trusted computing technology which is leveraged to ensure integrity preservation. We have implemented the P2ISE and quantitatively assessed its performance and efficiency.
Bibliografie:ObjectType-Article-1
SourceType-Scholarly Journals-1
ObjectType-Feature-2
content type line 14
ISSN:2078-2489
2078-2489
DOI:10.3390/info12090357