Variammattu Sasi, Arjun (2024) Enhancing Web App Security in CI/CD Pipeline: A DevSecOps Framework with Open-Source Tools. Masters thesis, Dublin, National College of Ireland.
Preview |
PDF (Master of Science)
Download (874kB) | Preview |
Preview |
PDF (Configuration Manual)
Download (831kB) | Preview |
Abstract
The thesis provides a well thought-out DevSecOps framework for web applications that specifically addresses the urgent need to integrate security into CI/CD pipeline in an unobtrusive manner. The framework automates the process of security testing through SAST, DAST while at the same time adopting manual penetration testing approaches. Implemented on AWS platforms through the GitLab CI/CD pipeline, it simplifies security assessment and improves deployment effectiveness. This is facilitated by a major aspect of the framework which is its capability to combine tool outputs thereby enabling unified security audit report generation. Empirical evaluation and case studies demonstrate the practicality and efficacy of the proposed solution in enhancing the security posture of web applications. By developing an exhaustive approach to security testing based on tools, this thesis advances DevSecOps practices thus filling an important void in existing literature for developers and stakeholders with concrete takeaways.
Item Type: | Thesis (Masters) |
---|---|
Supervisors: | Name Email Pantridge, Michael UNSPECIFIED |
Subjects: | Q Science > QA Mathematics > Electronic computers. Computer science T Technology > T Technology (General) > Information Technology > Electronic computers. Computer science Q Science > QA Mathematics > Computer software T Technology > T Technology (General) > Information Technology > Computer software Q Science > QA Mathematics > Computer software > Computer Security T Technology > T Technology (General) > Information Technology > Computer software > Computer Security |
Divisions: | School of Computing > Master of Science in Cyber Security |
Depositing User: | Ciara O'Brien |
Date Deposited: | 05 Jun 2025 11:06 |
Last Modified: | 05 Jun 2025 11:06 |
URI: | https://norma.ncirl.ie/id/eprint/7753 |
Actions (login required)
![]() |
View Item |