The Practice and Application of a Novel DevSecOps Platform on Security

With the increasing demand for rapid deployment of secure and reliable software output, industry and academic interest in DevSecOps (development, security and operations) continues to grow. The core of DevSecOps is to prioritize security and add principles of security controls and practices throughout the DevOps cycle. However, there are relatively few reports on the investigations into the market oriented commercial DevSecOps platform. In the present work, the practice cloud internet integration in China Telecom was presented by highlighting the DevSecOps platform. The overall architecture of the self-developed Cloud platform and the security center was introduced and discussed. The extensive application of the self-developed DevSecOps platform not only indicates the successful use of the entire platform, but also indicates the high credibility of the entire security system. This work provides a paradigm for the tailoring and development of large-scale commercial DevSecOps platform.