Search

By adopting agile and lean practices, DevOps aims to achieve rapid value delivery by speeding up development and deployment cycles, which however lead to more security concerns that cannot be fully addressed by an isolated security role only in the final stage of development. DevSecOps promotes security as a shared responsibility integrated into the DevOps process that seamlessly intertwines development, operations, and security from the start throughout to the end of cycles. While some companies have already begun to embrace this new strategy, both industry and academia are still seeking a common understanding of the DevSecOps movement. The goal of this study is to report the state‐of‐the‐practice of DevSecOps, including the impact of DevOps on security, practitioners' understanding of DevSecOps, and the practices associated with DevSecOps as well as the challenges of implementing DevSecOps. The authors used a mixed‐methods approach for this research. The authors carried out a grey literature review on DevSecOps, and surveyed the practitioners of DevSecOps in industry of China. The status quo of DevSecOps in industry is summarized. Three major software security risks are identified with DevOps, where the establishment of DevOps pipeline provides opportunities for security‐related activities. The authors classify the interpretations of DevSecOps into three core aspects of DevSecOps capabilities, cultural enablers, and technological enablers. To materialise the interpretations into daily software production activities, the recommended DevSecOps practices from three perspectives—people, process, and technology. Although a preliminary consensus is that DevSecOps is regarded as an extension of DevOps, there is a debate on whether DevSecOps is a superfluous term. While DevSecOps is attracting an increasing attention by industry, it is still in its infancy and more effort needs to be invested to promote it in both research and industry communities. [ABSTRACT FROM AUTHOR]

Software development projects have undergone remarkable changes with the arrival of agile development approaches. Many firms are facing a need to use these approaches to manage entities consisting of multiple projects (i.e. programs) simultaneously and efficiently. New technologies such as big data provide a huge power and rich demand for the IT application system of the commercial bank which has the characteristics of multiple sub-projects, strong inter-project correlation, and numerous project participating teams. Hence, taking the IT program management of a bank in China as a case, we explore the methods to solve the problems in multi-project concurrent development practice through integrating the ideas of program and batch management. First, to coordinate the multi-project development process, this paper presents the batch-based agile program management approach that synthesizes concurrent engineering with agile methods. And we compare the application of batch management between software development projects and manufacturing process. Further, we analyze the concurrent multi-project development practice in the batch-based agile program management, including the overlapping between stages, individual project's activities, and multiple projects based on common resources and environment to stimulate the knowledge transfer. Third, to facilitate the communication and coordination of batch-based program management, we present the double-level responsibility organizational structure of batch management. [ABSTRACT FROM AUTHOR]

Container terminals are playing an increasingly important role in the global logistics network; however, the programming, planning, scheduling, and decision of the container terminal handling system (CTHS) all are provided with a high degree of nonlinearity, coupling, and complexity. Given that, a combination of computational logistics and deep learning, which is just about container terminal-oriented neural-physical fusion computation (CTO-NPFC), is proposed to discuss and explore the pattern recognition and regression analysis of CTHS. Because the liner berthing time (LBT) is the central index of terminal logistics service and carbon efficiency conditions and it is also the important foundation and guidance to task scheduling and resource allocation in CTHS, a deep learning model core computing architecture (DLM-CCA) for LBT prediction is presented to practice CTO-NPFC. Based on the quayside running data for the past five years at a typical container terminal in China, the deep neural networks model of the DLM-CCA is designed, implemented, executed, and evaluated with TensorFlow 2.3 and the specific feature extraction package of tsfresh. The DLM-CCA shows agile, efficient, flexible, and excellent forecasting performances for LBT with the low consuming costs on a common hardware platform. It interprets and demonstrates the feasibility and credibility of the philosophy, paradigm, architecture, and algorithm of CTO-NPFC preliminarily. [ABSTRACT FROM AUTHOR]

With the launch of the Education Informatization 2.0 action plan by the Ministry of Education, a large number of college information systems have been born in China. Most of these systems are single page web applications (SPA) based on traditional MVC structures. Due to the complex logic and high coupling between educational businesses, developers need to write a lot of code. The education information system has many businesses and high coupling between businesses that the system often face problems such as bloated frontend businesses, iterative system updates, and difficult incremental function developments. Combined with the idea of service-oriented architecture, this paper proposes a micro frontends solution and applies it to the new generation of graduate information platform of East China Normal University, which has better agile development capabilities. From the aspects of service separation, efficient development, and incremental upgrade, this paper verifies that the architecture can well adapt to the needs of future educational management information system. The design of the micro frontends provides a new idea for the development of a new generation of education information system. [ABSTRACT FROM AUTHOR]

Global Software Development (GSD) has gained great attention during the past decade or so, and it is also being adopted by most of the software development organizations. The GSD approach is practiced by the software development organizations in China and a wide range of firms have established its operations in various Chinese cities. However, GSD practices becomes more challenging for the projects based on the agile concepts. The aim of this study is to develop a taxonomy of the factors that could positively impact the scaling process of agile methods in the Chinese GSD industry. The factors are identified by exploring the available literature and conducting industrial study with the Chinese agile and GSD practitioners. The finally reported factors are categorized, prioritized and developed their taxonomy using the multi-criterion decision making (MCDM) Fuzzy AHP approach. The given taxonomy is significant and progressive for GSD industry to assess and improve the scaling process of agile methods. • Explore the factors that could positively impact the agile scaling process in Chinese global software development (GSD) industry. • Develop the conceptual mapping of the identified factors. • Conceptual mapping is empirically validated. • The fuzzy AHP approach used to priorities the identified factors and the respective categories. • Develop the recommendation taxonomy of the factors based on the fuzzy AHP findings. [ABSTRACT FROM AUTHOR]