![](bg6.png)
4 CONCLUSIONS
The main objectives of Metrics-driven DevOps ap-
proch presented in this paper is to design and de-
velop a centralized platform provided as PaaS to be
deployed on the users premises or in a public/private
cloud for building trustworthy software that rapidly
adapts to changing requirements while maintaining
key qualities indicators (e.g. reliability, availability,
performance, security, privacy). This platform gath-
ers measurements from the different software devel-
opment lifecycle phases and during the production
in order to detect/predict potential issues and pre-
vent them. This verification relies on different soft-
ware engineering tools (like risk analysis, intrusion
and anomaly detection etc.) and allows providing real
time recommendations to the DevOps team to im-
prove the security/privacy of their software as well as
resiliency. Different ready-to-deploy security mecha-
nisms are needed to support such a platform.
ACKNOWLEDGEMENTS
This work is partially funded by the ongoing Euro-
pean project ITEA3-MEASURE started in Dec. 1st,
2015 (https://itea3.org/project/measure.html), and the
H2020 ENACT project started in Jan. 1st, 2018
(https://www.enact-project.eu/).
REFERENCES
Bagnato, A., Sadovykh, A., Dahab, S., Maag, S., Cavalli,
A. R., Stefanescu, A., Rocheteau, J., Mallouli, S., and
Mallouli, W. (2017). Modeling OMG SMM metrics
using the Modelio modeling tool in the MEASURE
project. G
´
enie logiciel, (120):46 – 52.
Card, D. N. (2003). Practical software measurement. In
Clarke, L. A., Dillon, L., and Tichy, W. F., edi-
tors, Proceedings of the 25th International Conference
on Software Engineering, May 3-10, 2003, Portland,
Oregon, USA, pages 738–739. IEEE Computer Soci-
ety.
Casola, V., Benedictis, A. D., Rak, M., and Villano, U.
(2017). A security metric catalogue for cloud applica-
tions. In Barolli, L. and Terzo, O., editors, Complex,
Intelligent, and Software Intensive Systems - Proceed-
ings of the 11th International Conference on Complex,
Intelligent, and Software Intensive Systems (CISIS-
2017), Torino, Italy, July 10-12, 2017, volume 611
of Advances in Intelligent Systems and Computing,
pages 854–863. Springer.
Dahab, S., Maag, S., Mallouli, W., and Cavalli, A. (2019).
Smart measurements and analysis for software quality
enhancement. In van Sinderen, M. and Maciaszek,
L. A., editors, Software Technologies, pages 194–219,
Cham. Springer International Publishing.
Forsgren, N. and Kersten, M. (2018). Devops metrics. Com-
mun. ACM, 61(4):44–48.
Koziolek, H. (2005). Goal, question, metric. In Eusgeld,
I., Freiling, F. C., and Reussner, R. H., editors, De-
pendability Metrics: Advanced Lectures [result from
a Dagstuhl seminar, October 30 - November 1, 2005],
volume 4909 of Lecture Notes in Computer Science,
pages 39–42. Springer.
Medeiros, N. P. D. S., Ivaki, N., Costa, P., and Vieira,
M. (2017). Software metrics as indicators of secu-
rity vulnerabilities. In 28th IEEE International Sym-
posium on Software Reliability Engineering, ISSRE
2017, Toulouse, France, October 23-26, 2017, pages
216–227. IEEE Computer Society.
Myrbakken, H. and Palacios, R. C. (2017). Devsecops: A
multivocal literature review. In Mas, A., Mesquida,
A. L., O’Connor, R. V., Rout, T., and Dorling, A.,
editors, Software Process Improvement and Capabil-
ity Determination - 17th International Conference,
SPICE 2017, Palma de Mallorca, Spain, October 4-5,
2017, Proceedings, volume 770 of Communications
in Computer and Information Science, pages 17–29.
Springer.
Tounsi, W. and Rais, H. (2018). A survey on technical threat
intelligence in the age of sophisticated cyber attacks.
Comput. Secur., 72:212–233.
Metrics-driven DevSecOps
233