Orchestration for Secure Software Development Lifecycle

Student: Elaev Sergey

Faculty: HSE Tikhonov Moscow Institute of Electronics and Mathematics (MIEM HSE)

Educational Programme: Cybersecurity (Master)

Year of Graduation: 2024

Author: student at the National Research University Higher School of Economics, Sergei Yuryevich Elaev, Department of Information Security of Cyber-Physical Systems. In Russia, starting from 2025, mandatory certification of secure software development processes will be introduced, and companies will need to modify their existing software development processes. This thesis aims to design process schemes for secure software development and create practical training tasks related to secure software development. The thesis includes a review and analysis of scientific and technical literature, methodologies for secure software development, and theoretical foundations. It examines existing approaches to software lifecycle management and orchestration, as well as compares standards and international methods for ensuring security in software development. Additionally, automation tools, including resource and process management within the secure software development lifecycle, will reduce the occurrence of unacceptable events and enhance efficiency. The obtained results include the design of secure software development process schemes, considering the requirements of standard GOST R 56939–2016 and project GOST R 56939–202X. Practical educational materials for secure software development on the GitLab platform have also been developed. The thesis contains 80 pages, 29 figures, 3 tables, 44 sources, and 13 appendices. Keywords: Secure Software Development, Software, Orchestration, Software Lifecycle, Containerization

Student Theses at HSE must be completed in accordance with the University Rules and regulations specified by each educational programme.

Summaries of all theses must be published and made freely available on the HSE website.

The full text of a thesis can be published in open access on the HSE website only if the authoring student (copyright holder) agrees, or, if the thesis was written by a team of students, if all the co-authors (copyright holders) agree. After a thesis is published on the HSE website, it obtains the status of an online publication.

Student theses are objects of copyright and their use is subject to limitations in accordance with the Russian Federation’s law on intellectual property.

In the event that a thesis is quoted or otherwise used, reference to the author’s name and the source of quotation is required.

Search all student theses