{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,9]],"date-time":"2026-01-09T19:06:43Z","timestamp":1767985603966,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":31,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T00:00:00Z","timestamp":1693267200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,8,29]]},"DOI":"10.1145\/3600160.3605466","type":"proceedings-article","created":{"date-parts":[[2023,8,9]],"date-time":"2023-08-09T22:54:41Z","timestamp":1691621681000},"page":"1-9","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["Experiences with Secure Pipelines in Highly Regulated Environments"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-6154-6924","authenticated-orcid":false,"given":"Jose Andre","family":"Morales","sequence":"first","affiliation":[{"name":"Carnegie Mellon University - SEI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-9274-1202","authenticated-orcid":false,"given":"Hasan","family":"Yasar","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University - SEI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,8,29]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"427","article-title":"Software engineering methodologies: a review of the waterfall model and object-oriented approach","volume":"4","author":"Adenowo AA","year":"2013","unstructured":"Adetokunbo\u00a0AA Adenowo and Basirat\u00a0A Adenowo. 2013. Software engineering methodologies: a review of the waterfall model and object-oriented approach. International Journal of Scientific & Engineering Research 4, 7 (2013), 427\u2013434.","journal-title":"International Journal of Scientific & Engineering Research"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/1137627.1137630"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3047307"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/362686.362693"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1080\/095373299107483"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2016.12"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2022.3142338"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.5555\/512620.512621"},{"key":"e_1_3_2_1_9_1","first-page":"43","article-title":"SneakerNet: Getting a grip on the world\u2019s largest network","volume":"8","author":"Hiller JB","year":"1992","unstructured":"JB Hiller. 1992. SneakerNet: Getting a grip on the world\u2019s largest network. Computer Security Journal 8 (1992), 43\u201343.","journal-title":"Computer Security Journal"},{"key":"e_1_3_2_1_10_1","volume-title":"Hands-On Security in DevOps: Ensure continuous security, deployment, and delivery with DevSecOps","author":"Hsiang-Chih Hsu Tony","unstructured":"Tony Hsiang-Chih Hsu. 2018. Hands-On Security in DevOps: Ensure continuous security, deployment, and delivery with DevSecOps. Packt Publishing Ltd."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSECC51444.2020.9557509"},{"key":"e_1_3_2_1_12_1","first-page":"77","article-title":"Best practices in systems development lifecycle: An analyses based on the waterfall model","volume":"9","author":"Kramer Mitch","year":"2018","unstructured":"Mitch Kramer. 2018. Best practices in systems development lifecycle: An analyses based on the waterfall model. Review of Business & Finance Studies 9, 1 (2018), 77\u201384.","journal-title":"Review of Business & Finance Studies"},{"key":"e_1_3_2_1_13_1","volume-title":"Inter-package dependency networks in open-source software. arXiv preprint cs\/0411096","author":"LaBelle Nathan","year":"2004","unstructured":"Nathan LaBelle and Eugene Wallingford. 2004. Inter-package dependency networks in open-source software. arXiv preprint cs\/0411096 (2004)."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","first-page":"221","DOI":"10.1111\/1540-5885.1730221","article-title":"Investigation of factors contributing to the success of cross-functional teams","volume":"17","author":"F","year":"2000","unstructured":"Edward\u00a0F McDonough\u00a0III. 2000. Investigation of factors contributing to the success of cross-functional teams. Journal of Product Innovation Management: An International Publication of the Product Development & Management Association 17, 3 (2000), 221\u2013235.","journal-title":"Journal of Product Innovation Management: An International Publication of the Product Development & Management Association"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2018.1451662"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3409186"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3234152.3234188"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.4018\/IJSSSP.2018010102"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-67383-7_2"},{"key":"e_1_3_2_1_20_1","volume-title":"ECCWS 2022 21st European Conference on Cyber Warfare and Security","author":"Naidoo Rennie","unstructured":"Rennie Naidoo and Nicolaas M\u00f6ller. 2022. Building Software Applications Securely With DevSecOps: A Socio-Technical Perspective. In ECCWS 2022 21st European Conference on Cyber Warfare and Security. Academic Conferences and publishing limited."},{"key":"e_1_3_2_1_21_1","volume-title":"A procedure-oriented generic bill of materials. Computers & industrial engineering 32, 1","author":"Olsen A","year":"1997","unstructured":"Kai\u00a0A Olsen, Per S\u00e6tre, and Anders Thorstenson. 1997. A procedure-oriented generic bill of materials. Computers & industrial engineering 32, 1 (1997), 29\u201345."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-02152-7_29"},{"key":"e_1_3_2_1_23_1","volume-title":"The compact disc handbook. Vol.\u00a05. AR Editions","author":"Pohlmann C","unstructured":"Ken\u00a0C Pohlmann. 1992. The compact disc handbook. Vol.\u00a05. AR Editions, Inc."},{"key":"e_1_3_2_1_24_1","volume-title":"Collaborative Application Security Testing for DevSecOps: An Empirical Analysis of Challenges, Best Practices and Tool Support. arXiv preprint arXiv:2211.06953","author":"Rajapakse Roshan\u00a0Namal","year":"2022","unstructured":"Roshan\u00a0Namal Rajapakse, Mansooreh Zahedi, and Muhammad\u00a0Ali Babar. 2022. Collaborative Application Security Testing for DevSecOps: An Empirical Analysis of Challenges, Best Practices and Tool Support. arXiv preprint arXiv:2211.06953 (2022)."},{"key":"e_1_3_2_1_25_1","volume-title":"Electronic and Automation Control Conference (IMCEC), Vol.\u00a04. IEEE, 532\u2013535","author":"Sun Xiaohan","year":"2021","unstructured":"Xiaohan Sun, Yunchang Cheng, Xiaojie Qu, and Hang Li. 2021. Design and Implementation of Security Test Pipeline Based on DevSecOps. In 2021 IEEE 4th Advanced Information Management, Communicates, Electronic and Automation Control Conference (IMCEC), Vol.\u00a04. IEEE, 532\u2013535."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29193-8_7"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecPODS.2019.8884935"},{"key":"e_1_3_2_1_28_1","volume-title":"Leadership and trust facilitating cross-functional team success. Journal of management development","author":"Webber Sheila\u00a0Simsarian","year":"2002","unstructured":"Sheila\u00a0Simsarian Webber. 2002. Leadership and trust facilitating cross-functional team success. Journal of management development (2002)."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2556420.2556483"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME52107.2021.00048"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2019.2947982"}],"event":{"name":"ARES 2023: The 18th International Conference on Availability, Reliability and Security","location":"Benevento Italy","acronym":"ARES 2023"},"container-title":["Proceedings of the 18th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605466","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3600160.3605466","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:37:38Z","timestamp":1750178258000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605466"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,29]]},"references-count":31,"alternative-id":["10.1145\/3600160.3605466","10.1145\/3600160"],"URL":"https:\/\/doi.org\/10.1145\/3600160.3605466","relation":{},"subject":[],"published":{"date-parts":[[2023,8,29]]},"assertion":[{"value":"2023-08-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}