Research on Security Challenges in Cloud Environments and Solutions based on the “Security-as-Code” Approach
Year: 2023
Type: conference-paper
Abstract: “Security as code” is an approach to security organization in cloud environments, which is based on the method of integrating security controls, policies, and best practices directly into the software development and deployment processes. The integration process includes the transformation of security requirements and configurations into software code, which in turn is considered an integral part of the full software development life cycle. By embedding security measures into code, scripts, templates, and automated workflows, an organization ensures that there are well-defined security controls that will be consistently enforced across all operational phases of software creation (development, testing, implementation, and support). This article examines the main problems of building security in cloud environments and their causes, also considers the components and principles of the “Security as Code” approach, implementation examples with an explanation, of the advantages of this approach, as well as the role of DevSecOps. This article aims to help readers understand the importance of the security-as-code approach as one of the most effective methods for managing security in cloud environments. As cloud environments continue to evolve and proliferate, and threats become more sophisticated, the Security as Code approach represents a core strategy for proactively protecting digital assets. This publication serves as a guide to understanding, implementing, and benefiting from a security-as-code approach, providing insight into the future cloud security landscape and the critical role of automation and integration in addressing today’s security challenges. To support the research, an extensive review of literature and articles providing information on the Security as Code approach and its application was conducted.
Institution: Lviv Polytechnic National University
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: bronze
OpenAlex ID: W7166301342