AUTOMATION OF DEVSECOPS PROCESSES IN THE CONTEXT OF THE TRANSITION TO DOMESTIC SOFTWARE: PROBLEMS AND SOLUTIONS

Bondar Denis

one of the current urgent issues in the field of development and integration of innovative information technologies is ensuring data security and interaction with them. The presented article is devoted to the study of issues related to the integration of DevSecOps in modern conditions of transition to domestic software. The main purpose of the work is to form and highlight the most pressing problems of process automation through DevSecOps. Because of the work, the author systematized the key problems and presented the author's options for their solution. The materials of the article reveal a number of problems related to the threat of targeted attacks on the DevSecOps infrastructure in conditions of limited access to foreign security systems. Attention also focused on the problem of the lack of qualified information security specialists, especially in the context of domestic software and DevSecOps. The problem of the risk of data leakage and violation of confidentiality in the process of automation of DevSecOps also presented, and a practical implementation of the CI/CD pipeline configuration proposed, which contributes to monitoring and protection. The materials of the work can be useful for the modern field of information security, revealing key security issues in the automation of DevSecOps processes.

Keywords:information security, software, DevSecOps, threat, DDoS attack, monitoring, protection.