From continuous integration to continuous assurance
From continuous integration to continuous assurance
复制标题
从持续集成到持续保证
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
J. Burger
中科院分区：
文献类型：
--
作者：
J. Kupsch;B. Miller;V. Basupalli;J. Burger
持续保证将持续集成的概念扩展到软件保证领域。其目标是自然地将软件的安全评估集成到软件开发工作流中。软件保障市场(SWAMP)[1]是为了支持持续保证而建立的，有助于简化和自动化运行代码分析工具的过程，特别是静态代码分析(SCA)工具。我们描述了如何轻松地将SWAMP集成到持续保证工作流中，从而提供从集成开发环境(IDE)(如Eclipse)、源代码管理系统(如Git和Subversion)以及持续集成系统(如Jenkins)的直接访问。
Continuous assurance extends the concept of continuous integration into the software assurance space. The goal is to naturally integrate the security assessment of software into the software development workflow. The Software Assurance Marketplace (SWAMP) [1] was established to support continuous assurance, helping to simplify and automate the process of running code analysis tools, especially static code analysis (SCA) tools. We describe how the SWAMP can be integrated easily into the continuous assurance workflow, providing direct access from integrated development environments (IDEs) such as Eclipse, source code management systems such as git and Subversion, and continuous integration systems such as Jenkins.