Automated Security Vulnerability Backlog Management
Year: 2024
Type: article
Abstract: In today’s fast-paced development environments, security vulnerabilities often emerge at the same rapid rate as code updates. Security teams and developers face challenges in addressing these vulnerabilities while maintaining operational efficiency. Managing a security backlog manually can be cumbersome, slow, and prone to human error. Automating the security vulnerability backlog allows organizations to track, prioritize, and mitigate security risks more efficiently and effectively, ensuring a secure software development lifecycle (SDLC) without sacrificing agility. This white paper outlines the need for an automated security backlog, the benefits it provides, and strategies for implementing it using modern DevSecOps tools. Keywords — Automated security backlog, vulnerability management, CI/CD, DevSecOps, risk- based prioritization, SAST, DAST, software composition analysis, continuous security, vulnerability tracking, security remediation, cybersecurity automation, security risk management
DOI: 10.55041/ijsrem16818
Author: Kamalakar Reddy Ponaka
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: hybrid
OpenAlex ID: W4403239698