Estrategias para implementar el enfoque Devsecops en el ciclo de vida de desarrollo de software ágil

Akbar, M. A., Smolander, K., Mahmood, S., & Alsanad, A. (2022). Toward successful DevSecOps in software development organizations: A decision-making framework. Information and Software Technology, 147(October 2021), 106894. https://doi.org/10.1016/j.infsof.2022.106894

Amazon Web Services, I. (n.d.). Amazon SQS. https://aws.amazon.com/sqs/?nc1=h_ls

Apisec. (2022). Shift Left Security: The Ultimate Guide. https://www.apisec.ai/blog/shift-left-security#:~:text=Shifting left means integrating testing,in the lifecycle as possible

Aqua. (n.d.). “What is Shift Left Testing & Security?” https://www.aquasec.com/cloud-native-academy/devsecops/shift-left-devops/

Atlassian. (n.d.). Kubernetes vs. Docker. https://www.atlassian.com/microservices/microservices-architecture/kubernetes-vs-docker

Cynoteck. (2020). An Introduction to Security Testing. https://cynoteck.com/blog-post/introduction-to-security-testing/

Diaz Diaz, S. M. (2014). Pruebas de Seguridad en Aplicaciones Web como Imperativo en la Calidad de Desarrollo del Software. 8. https://www.unab.edu.co/sites/default/files/MemoriasGrabadas/papers/capitulo7_paper_13.pdf

Google Cloud. (n.d.-a). What are Containers? https://cloud.google.com/learn/what-are-containers

Google Cloud. (n.d.-b). What is Pub/Sub? https://cloud.google.com/pubsub/docs/overview

IBM - Deutschland | IBM. (n.d.). What is DevSecOps? https://www.ibm.com/cloud/learn/devsecops

ISTQB. (2018). Certified Tester Foundation Level Syllabus International Software Testing Qualifications Board. 96. https://www.istqb.org/downloads/send/51-ctfl2018/208-ctfl-2018-syllabus.html

Menejías García, Roberto; Hidalgo Reyes, Noel Harrinso; Marín Díaz, Aymara ; Trujillo Casañola, Y. (2021). Procedure for evaluating security of software products. Revista Cubana de Ciencias Informáticas, 15, 333–349. https://www.redalyc.org/journal/3783/378370462020/html/

Mishra, A., & Otaiwi, Z. (2020). DevOps and software quality: A systematic mapping. Computer Science Review, 38, 100308. https://doi.org/10.1016/j.cosrev.2020.100308

PORTAL ISO 25000. (n.d.). ISO 25010. https://iso25000.com/index.php/normas-iso-25000/iso- 25010

Redhat. (2021). Advantages of Kubernetes-native security. https://www.redhat.com/en/topics/containers/advantages-of-kubernetes-native-security

Ruparelia, N. B. (2010). Software development lifecycle models. ACM SIGSOFT Software Engineering Notes, 35(3), 8–13. https://doi.org/10.1145/1764810.1764814

Vijayakumar, K., & Arun, C. (2019). Continuous security assessment of cloud based applications using distributed hashing algorithm in SDLC. Cluster Computing, 22(s5), 10789–10800. https://doi.org/10.1007/s10586-017-1176-x