The seven sins: Security smells in infrastructure as code scripts

A Rahman, C Parnin, L Williams - 2019 IEEE/ACM 41st …, 2019 - ieeexplore.ieee.org
Practitioners use infrastructure as code (IaC) scripts to provision servers and development
environments. While developing IaC scripts, practitioners may inadvertently introduce …

On the usage, co-usage and migration of CI/CD tools: A qualitative analysis

P Rostami Mazrae, T Mens, M Golzadeh… - Empirical Software …, 2023 - Springer
Continuous integration, delivery and deployment (CI/CD) is used to support the collaborative
software development process. CI/CD tools automate a wide range of activities in the …

Uncovering the benefits and challenges of continuous integration practices

O Elazhary, C Werner, ZS Li, D Lowlind… - IEEE Transactions …, 2021 - ieeexplore.ieee.org
In 2006, Fowler and Foemmel defined ten core Continuous Integration (CI) practices that
could increase the speed of software development feedback cycles and improve software …

Security smells in ansible and chef scripts: A replication study

A Rahman, MR Rahman, C Parnin… - ACM Transactions on …, 2021 - dl.acm.org
Context: Security smells are recurring coding patterns that are indicative of security
weakness and require further inspection. As infrastructure as code (IaC) scripts, such as …

A deep dive into the impact of covid-19 on software development

PAMS Neto, UA Mannan, ES de Almeida… - IEEE Transactions …, 2021 - ieeexplore.ieee.org
The COVID-19 pandemic is considered as the most crucial global health calamity of the
century. It has impacted different business sectors around the world and software …

Security misconfigurations in open source kubernetes manifests: An empirical study

A Rahman, SI Shamim, DB Bose… - ACM Transactions on …, 2023 - dl.acm.org
Context: Kubernetes has emerged as the de-facto tool for automated container
orchestration. Business and government organizations are increasingly adopting …

Gang of eight: A defect taxonomy for infrastructure as code scripts

A Rahman, E Farhana, C Parnin… - Proceedings of the ACM …, 2020 - dl.acm.org
Defects in infrastructure as code (IaC) scripts can have serious consequences, for example,
creating large-scale system outages. A taxonomy of IaC defects can be useful for …

On the impact of continuous integration on refactoring practice: An exploratory study on travistorrent

I Saidani, A Ouni, MW Mkaouer, F Palomba - Information and Software …, 2021 - Elsevier
Context: The ultimate goal of Continuous Integration (CI) is to support developers in
integrating changes into production constantly and quickly through automated build process …

An empirical study on ML DevOps adoption trends, efforts, and benefits analysis

DE Rzig, F Hassan, M Kessentini - Information and Software Technology, 2022 - Elsevier
Abstract Context: Machine Learning (ML), including Deep Learning (DL), based systems,
have become ubiquitous in today's solutions to many real-world problems. ML-based …

An empirical study on continuous integration trends, topics and challenges in stack overflow

A Ouni, I Saidani, E Alomar, MW Mkaouer - Proceedings of the 27th …, 2023 - dl.acm.org
During the last few years, Continuous Integration (CI) has become a common practice in
open-source and industrial environments to reduce the scope for errors and increase the …