Professional Documents
Culture Documents
26 DevOps - A Historical Review and Future Works
26 DevOps - A Historical Review and Future Works
IBM India Pvt Ltd, Manyata Tech Park, IBM India Pvt Ltd, Subramanya Arcade,
Bangalore, India Bangalore, India
Authorized licensed use limited to: Raytheon Technologies. Downloaded on May 16,2021 at 09:18:06 UTC from IEEE Xplore. Restrictions apply.
2021 International Conference on Computing, Communication, and Intelligent Systems (ICCCIS)
was reported that continuous delivery should be adopted as small The serverless model uses Cloud in its architecture [26]. The
increments and repetitive tasks should be automated. The benefits qualitative data showed that DevOps practices are strongly
of adopting continuous delivery are accelerated time to market, affected by the new cloud computing model [26]. For cloud
building the right product, improved productivity and efficiency, applications, lightweight languages were used [27]. Cloud helps
reliable releases, improved product quality and customer in iterative software development, monitoring the running
satisfaction [18]. The code infrastructure helps in fast releases. applications on the client-side and to get feedback about the
Before the emergence of DevOps, there was no shared process [20]. The use of a cloud environment also increases the
infrastructure for software development in a firm and so the security of the software applications [28]. The DevOps artifacts
employees used to work individually in their environment and so are classified as Node-centric artifacts and Environmental centric
the delivery process gets delayed due to increased time for artifacts. The TOSCA was used in cloud applications to make the
integration. artifacts interoperable [30].
DevOps itself represents the integration between DevSecOps or SecDevOps are the terms associated with
Development and Operations teams. DevOps enables the Secured DevOps. The continuous security model was proposed
continuous integration of all processes involved in product in [31], which used open-source software over the cloud to
development and so all the process is done by a single team provide security throughout the product development. The
throughout the cycle [5]. Inadequate communication is the key security practices used in DevOps [32] are 1)Automation
problem that triggers the need for DevOps to be implemented. Activities including automated testing, monitoring, code review,
DevOps enables the software firm to provide more features and software-defined firewall and software licensing 2) Increased
continuously improve it based on the feedback within a short collaboration between development and security teams 3) Non-
period [19]. DevOps not only integrates the teams, but also the automated security activities are security requirements analysis,
tools used in various stages of product development [20]. The performing security configurations, performing security policies,
new framework was proposed in [2], to implement the process of design review, input validation, risk analysis, etc. A Dynamic
continuous integration and deployment over the existing Scrum model was proposed in [33] to rectify the security issues in both
product cycle. The versions of the software tools should be the development and operational activities of the multi-cloud
maintained to be compatible with other tools. The version control application and the proposed model were validated using the real-
strategy was proposed to control different artifacts like Source time application. The framework of the MUSA Dynamic model
code, configuration files, deployment scripts and binary code of is shown in figure 3. The cloud security options include serverless
the application in [21]. Automation is necessary for continuous computing, Infrastructure as code and security centralization
integration and certain tools like Git repository are used to keep [28].
track of the changes [14]. HARNESS is a multi-partner research
project, which aims at integrating multiple non-homogeneous
resources by using version control techniques [22]. A new tool
was proposed in [23] called Filling Gap (FG) tool which bridges
Development and Operations teams gap and provides quick
feedback on the performance to the Development team.
3.3 Cloud:
367
Authorized licensed use limited to: Raytheon Technologies. Downloaded on May 16,2021 at 09:18:06 UTC from IEEE Xplore. Restrictions apply.
2021 International Conference on Computing, Communication, and Intelligent Systems (ICCCIS)
5. Proposed Models:
368
Authorized licensed use limited to: Raytheon Technologies. Downloaded on May 16,2021 at 09:18:06 UTC from IEEE Xplore. Restrictions apply.
2021 International Conference on Computing, Communication, and Intelligent Systems (ICCCIS)
A technology transfer model shown in figure 7 was proposed in The Fuzzy TOPSIS approach was used for the quality assessment
[48] and it was proposed for a scalable multi-party organization, in DevOps [45].
academy and industry, multi-party team. It was reported in [49]
that DevOps performance increases with an increase in integrity
between DevOps and Knowledge management. Volunteer 7. Future works on DevOps:
knowledge sharing should be encouraged in the companies.
By changing the configuration of the existing model, the
upcoming model can be developed as multi-dimensional [34].
The DevOps team will possess desirable qualities or skills, full-
stack development, analysis, functional, decision-making, social,
testing, and advisory skills [53]. In the future, most IT firms will
adopt a continuous deployment strategy [15]. The new metrics
will be found to evaluate the quality of the DevOps development
cycle [19]. Tools like agile consolidator aimed at improving the
quality of the process should be built [39]. The auto-scaling
policies in the combination of both container and node level will
be developed [35]. Some future works that can be done on
working with Docker containers are Networking, Eclipse Plugin,
Port management and Clustering capabilities [38]. External
clients are eager to collaborate with focused groups inside the
solution providing enterprises to develop mixed solution assets in
Fig. 7. Technology Transfer Model [48] an agile fashion [50].
References:
The concept of Composable DevOps architecture was proposed
in [50]. The composable nature is to break up things into smaller
fragments and then to integrate the entire development pipeline. [1] Lwakatare, Lucy Ellen, Pasi Kuvaja, and Markku
The composable DevOps is an iterative way to make Oivo. "Dimensions of devops." In International
collaboration between development and Operations. conference on agile software development, pp. 212-
217. Springer, Cham, 2015.
[2] Samarawickrama, Saliya Sajith, and Indika Perera.
6. Quality: "Continuous scrum: A framework to enhance scrum
In software product development using new techniques, with DevOps." In 2017 Seventeenth International
the quality of the developed product should also be maintained Conference on Advances in ICT for Emerging
properly. The quality assurance of the product is improved by the Regions (ICTer), pp. 1-7. IEEE, 2017.
use of an automated DevOps pipeline. The releases are made [3] Hüttermann, Michael. "Beginning devops for
more often to improve the features of the product [19]. The set of developers." In DevOps for Developers, pp. 3-13.
metrics used to assess and evaluate the DevOps practices were Apress, Berkeley, CA, 2012.
discussed in. The proposed organizational metrics to track the [4] Hüttermann, Michael. "Infrastructure as code." In
continuous improvement are Truck-Factor, Socio-Technical DevOps for Developers, pp. 135-156. Apress,
Congruence, Core-Periphery Ratio, Community Member Berkeley, CA, 2012.
Turnover and Smelly-Quitters. The Technical metrics are Lines [5] Ebert, Christof, Gorka Gallardo, Josune Hernantes,
of Code, Coupling Between Object Classes, – Code Change and Nicolas Serrano. "DevOps." Ieee Software
Process, developer-related Factors, Runtime Maintainability 33, no. 3 (2016): 94-100.
Measures and Operations Factors. In a fraud detection system [6] Strode, Diane E., Sid L. Huff, and Alexei Tretiakov.
designed in [40], the Simtool was used to evaluate the metrics. "The impact of organizational culture on agile
method use." In 2009 42nd Hawaii International
369
Authorized licensed use limited to: Raytheon Technologies. Downloaded on May 16,2021 at 09:18:06 UTC from IEEE Xplore. Restrictions apply.
2021 International Conference on Computing, Communication, and Intelligent Systems (ICCCIS)
Conference on System Sciences, pp. 1-9. IEEE, EU research project." In Proceedings of the 1st
2009. International Workshop on Quality-Aware DevOps,
[7] Nerur, Sridhar, RadhaKanta Mahapatra, and George pp. 1-6. 2015.
Mangalaraj. "Challenges of migrating to agile [23] Pérez, Juan F., Weikun Wang, and Giuliano Casale.
methodologies." Communications of the ACM 48, "Towards a devops approach for software quality
no. 5 (2005): 72-78. engineering." In Proceedings of the 2015 Workshop
[8] Hüttermann, Michael. "Introducing DevOps." In on Challenges in Performance Methods for Software
DevOps for Developers, pp. 15-31. Apress, Development, pp. 5-10. 2015.
Berkeley, CA, 2012. [24] Borgenholt, Gaute, Kyrre Begnum, and Paal
[9] Rodríguez, Christian Adrián, Lía Hebe Molinari, and Engelstad. "Audition: a DevOps-oriented service
Francisco Javier Díaz. "The hard way to virtual optimization and testing framework for cloud
machine administration: towards DevOps." Journal environments." (2013).
of Computer Science & Technology 13 (2013). [25] Syed, Madiha H., and Eduardo B. Fernandez. "Cloud
[10] Hemon, Aymeric, Barbara Lyonnet, Frantz Rowe, ecosystems support for Internet of Things and
and Brian Fitzgerald. "From agile to DevOps: Smart DevOps using patterns." In 2016 IEEE First
skills and collaborations." Information Systems International Conference on Internet-of-Things
Frontiers 22, no. 4 (2020): 927-945. Design and Implementation (IoTDI), pp. 301-304.
[11] Jabbari, Ramtin, Nauman bin Ali, Kai Petersen, and IEEE, 2016.
Binish Tanveer. "What is DevOps? A systematic [26] Ivanov, Vitalii, and Kari Smolander.
mapping study on definitions and practices." In "Implementation of a DevOps pipeline for serverless
Proceedings of the Scientific Workshop Proceedings applications." In International Conference on
of XP2016, pp. 1-11. 2016. Product-Focused Software Process Improvement, pp.
[12] Mohamed, Samer I. "DevOps shifting software 48-64. Springer, Cham, 2018.
engineering strategy-value based perspective." [27] Hosono, Shigeru. "A DevOps framework to shorten
International Journal of Computer Engineering 17, delivery time for cloud applications." International
no. 2 (2015): 51-57. Journal of Computational Science and Engineering 7,
[13] Bass, Len. "The software architect and DevOps." no. 4 (2012): 329-344.
IEEE Software 35, no. 1 (2017): 8-10. [28] van der Houven MSc, Wouter. "Security principles
[14] Schaefer, Andreas, Marc Reichenbach, and Dietmar for DevOps and cloud."
Fey. "Continuous integration and automation for [29] Yasar, Hasan, and Kiriakos Kontostathis. "Where to
DevOps." In IAENG Transactions on Engineering integrate security practices on DevOps platform."
Technologies, pp. 345-358. Springer, Dordrecht, International Journal of Secure Software Engineering
2013. (IJSSE) 7, no. 4 (2016): 39-50.
[15] Rahman, Akond Ashfaque Ur, Eric Helms, Laurie [30] Wettinger, Johannes, Uwe Breitenbücher, Oliver
Williams, and Chris Parnin. "Synthesizing Kopp, and Frank Leymann. "Streamlining DevOps
continuous deployment practices used in software automation for Cloud applications using TOSCA as
development." In 2015 Agile Conference, pp. 1-10. standardized metamodel." Future Generation
IEEE, 2015. Computer Systems 56 (2016): 317-332.
[16] Mohammad, Sikender Mohsienuddin. "DevOps [31] Kumar, Rakesh, and Rinkaj Goyal. "Modeling
Automation Advances IT Sectors with the Strategy continuous security: A conceptual model for
of Release Management." International Journal of automated DevSecOps using open-source software
Computer Trends and Technology (IJCTT)–Volume over cloud (ADOC)." Computers & Security 97
67 (2019). (2020): 101967.
[17] Edwards, D. "Introducing DevOps to the Traditional [32] Ur Rahman, Akond Ashfaque, and Laurie Williams.
Enterprise." (2014). "Security practices in DevOps." In Proceedings of
[18] Chen, Lianping. "Continuous delivery: Overcoming the Symposium and Bootcamp on the Science of
adoption challenges." ournal of Systems and Security, pp. 109-111. 2016.
Software 128 (2017): 72-86. [33] Rios, Erkuden, Eider Iturbe, Wissam Mallouli, and
[19] Riungu-Kalliosaari, Leah, Simo Mäkinen, Lucy Massimiliano Rak. "Dynamic security assurance in
Ellen Lwakatare, Juha Tiihonen, and Tomi Männistö. multi-cloud DevOps." In 2017 IEEE Conference on
"DevOps adoption benefits and challenges in Communications and Network Security (CNS), pp.
practice: a case study." In International Conference 467-475. IEEE, 2017.
on Product-Focused Software Process Improvement, [34] Arulkumar, V., and R. Lathamanju. "Start to Finish
pp. 590-597. Springer, Cham, 2016. Automation Achieve on Cloud with Build Channel:
[20] Bruneo, Dario, Thomas Fritz, Sharon Keidar-Barner, By DevOps Method." Procedia Computer Science
Philipp Leitner, Francesco Longo, Clarissa 165 (2019): 399-405.
Marquezan, Andreas Metzger et al. "CloudWave: [35] Bahadori, Kiyana, and Tullio Vardanega. "DevOps
Where adaptive cloud management meets DevOps." meets dynamic orchestration." In International
In 2014 IEEE Symposium on Computers and Workshop on Software Engineering Aspects of
Communications (ISCC), pp. 1-6. IEEE, 2014. Continuous Development and New Paradigms of
[21] Paez, Nicolás. "Versioning Strategy for DevOps Software Production and Deployment, pp. 142-154.
Implementations." In 2018 Congreso Argentino de Springer, Cham, 2018.
Ciencias de La Informática y Desarrollos de [36] Laukkarinen, Teemu, Kati Kuusinen, and Tommi
Investigación (CACIDI), pp. 1-6. IEEE, 2018. Mikkonen. "Regulated software meets DevOps."
[22] Stillwell, Mark, and Jose GF Coutinho. "A DevOps Information and Software Technology 97 (2018):
approach to integration of software components in an 176-178.
370
Authorized licensed use limited to: Raytheon Technologies. Downloaded on May 16,2021 at 09:18:06 UTC from IEEE Xplore. Restrictions apply.
2021 International Conference on Computing, Communication, and Intelligent Systems (ICCCIS)
[37] Morris, Dave, S. Voutsinas, Nigel C. Hambly, and [52] Morales, Jose Andre, Hasan Yasar, and Aaron
Robert G. Mann. "Use of Docker for deployment and Volkman. "Implementing DevOps practices in highly
testing of astronomy software." Astronomy and regulated environments." In Proceedings of the 19th
computing 20 (2017): 105-119. International Conference on Agile Software
[38] Sandoval, Robert. "A case study in enabling DevOps Development: Companion, pp. 1-9. 2018.
using Docker." PhD diss., 2015. [53] Wiedemann, Anna, and Manuel Wiesche. "Are you
[39] Doukoure, Gaoussou Abdel Kader, and Ernest ready for Devops? Required skill set for Devops
Mnkandla. "Facilitating the Management of Agile teams." (2018).
and Devops Activities: Implementation of a Data
Consolidator." In 2018 International Conference on
Advances in Big Data, Computing and Data
Communication Systems (icABCD), pp. 1-6. IEEE,
2018.
[40] Perez-Palacin, Diego, Youssef Ridene, and José
Merseguer. "Quality assessment in DevOps:
automated analysis of a tax fraud detection system."
In Proceedings of the 8th ACM/SPEC on
International Conference on Performance
Engineering Companion, pp. 133-138. 2017.
[41] Spinellis, Diomidis. "Don't install software by hand."
IEEE software 29, no. 4 (2012): 86-87.
[42] Orr, Anthony. "Maximize the synergies between
ITIL and DevOps." BMC Software (2012).
[43] Bucena, Ineta, and Marite Kirikova. "Simplifying the
DevOps Adoption Process." In BIR Workshops, pp.
1-15. 2017.
[44] Khan, Muhammad Owais, Awais Khan Jumani, and
Waqas Ahmed Farhan. "Fast Delivery, Continuously
Build, Testing and Deployment with DevOps
Pipeline Techniques on Cloud." INDIAN JOURNAL
OF SCIENCE AND TECHNOLOGY 13, no. 05
(2020): 552-575.
[45] Rafi, Saima, Wu Yu, Muhammad Azeem Akbar,
Ahmed Alsanad, and Abdu Gumaei. "Multicriteria
based decision making of DevOps data quality
assessment challenges using fuzzy TOPSIS." IEEE
Access 8 (2020): 46958-46980.
[46] Luz, Welder Pinheiro, Gustavo Pinto, and Rodrigo
Bonifácio. "Adopting DevOps in the real world: A
theory, a model, and a case study." Journal of
Systems and Software 157 (2019): 110384.
[47] Heinrich, Robert, Reiner Jung, Christian Zirkelbach,
Wilhelm Hasselbring, and Ralf Reussner. "An
Architectural Model-Based Approach to Quality-
Aware DevOps in Cloud Applicationsc." In Software
Architecture for Big Data and the Cloud, pp. 69-89.
Morgan Kaufmann, 2017.
[48] Mikkonen, Tommi, Casper Lassenius, Tomi
Männistö, Markku Oivo, and Janne Järvinen.
"Continuous and collaborative technology transfer:
Software engineering research with real-time
industry impact." Information and Software
Technology 95 (2018): 34-45.
[49] Solouki, Soha. "Knowledge Management Practices
in DevOps." PhD diss., Université
d'Ottawa/University of Ottawa, 2020.
[50] McCarthy, Matthew A., Lorraine M. Herger, Shakil
M. Khan, and Brian M. Belgodere. "Composable
DevOps: automated ontology-based DevOps
maturity analysis." In 2015 IEEE International
Conference on Services Computing, pp. 600-607.
IEEE, 2015.
[51] Airaj, Mohammed. "Enable cloud DevOps approach
for industry and higher education." Concurrency and
Computation: Practice and Experience 29, no. 5
(2017): e3937.
371
Authorized licensed use limited to: Raytheon Technologies. Downloaded on May 16,2021 at 09:18:06 UTC from IEEE Xplore. Restrictions apply.