DevSecOps for the construction of Cyber-Physical Software & Systems Prof. Pekka Abrahamsson pekkaa@ntnu.no DevSecOps

Problem While security is critical for CPSS, the traditional security approaches are costly, time-consuming and unfit for a world which is iterative, online and connected. Security is owned by specialists and the concern is not shared in the CPSS construction organization We can not defer fixing security problems to upcoming releases, we must fix them as they appear.

Solution: Beyond DEV OPS

Innovation & Business Impact Achieving the benefits of Continuous Delivery and DevOps securely -> Increased delivery speed & smartness. CPSS has not been able to embrace the “fail fast and often” paradigm due to constraints. An organization wide, new mode of intense collaboration -> More secure systems with better development control. Development of design methods, practices and tools that support and enable DevSecOps in CPSS

Current status & seeking of new collaborations Norway: Powel (ind), Telenor (ind), NTNU (res), SINTEF (res); Finland: Univ. Jyväskylä (res); Ireland: United Technologies Res Centre (ind); Czech Republic: IMA (sme); Italy: Free Uni of Bz (res) We are looking for industry partners within Cyber- Physical Software & Systems domain. We are also looking for new academic partners with expertise in DevOps, security, continuous delivery and automation areas.

Thank You! Questions, Comments? Prof. Pekka Abrahamsson pekka.abrahamsson@ntnu.no