Diseño e implementación de un enfoque de seguridad DevSecOps en el desarrollo de aplicaciones orientadas a microservicios

Abstract

Abstract: In this thesis, a DevSecOps security approach is proposed for the development of microservices-oriented applications. The approach was implemented in the application VenceYa and focused on how to integrate security into the development life cycle of each microservice, including automated and integrated security testing across all phases, as well as the recommendation of tools to use. DevSecOps is an approach that addresses culture, automation and platform design, and integrates security as a shared responsibility throughout the IT lifecycle. This approach proposed is based on the early identification of vulnerabilities and threats, which allows developers to address security issues before they occur become bigger problems. Implementing the DevSecOps approach in VenceYa proved to be effective in improving security and reducing associated risks with the development of applications oriented to microservices.