Context: Security as a key non-functional requirement of software development is often
ignored and devalued in DevOps programs, with security seen as an inhibitor to high …

Network-based attacks and their mitigation are of increasing importance in our ever-
connected world. Often network-based attacks address valuable data, which the attacker …

Automatic vulnerability detection is of paramount importance to promote the security of an
application and should be exercised at the earliest stages within the software development …

The concept of security left-shifting focuses on integrating security processes, traditionally
occurring later in the Software Development Life Cycle, into the early development phase …

The state of cloud security is evolving. Many organizations are migrating their on-premises
data centers to cloud networks at a rapid pace due to the benefits like cost-effectiveness …

Integrating shift-left security practices and automated vulnerability detection in container
images is imperative for modern software development, given the dynamics and …

Software vulnerabilities are commonly detected via static analysis, penetration testing, and
fuzzing. They can also be found by running unit tests-so-called vulnerability-witnessing tests …

While the concept of containerization has existed for a few decades, the use application
containers skyrocketed with the introduction of Docker. Containers facilitate a microservice …

Software developers must not only be capable of producing secure code, but must also
possess the ability to identify security vulnerabilities when evaluating their peers' work. The …

In the context of modern DevOps, application security and the implementation of the
principle of least privilege (PoLP) are becoming critical elements aimed at minimizing risks …