检索结果-内蒙古大学图书馆

18th Symposium and Summer School on Service Oriented Computing

作者： Nasiri, Roya Kumara, Indika Tamburri, Damian Andrew van den Heuvel, Willem-Jan Tilburg Univ Jheronimus Acad Data Sci Shertogenbosch Netherlands Eindhoven Univ Technol Jheronimus Acad Data Sci Eindhoven Netherlands

ISBN: (纸本)9783031725777;9783031725784

infrastructure as code (IaC) enables the management and provisioning of infrastructure using code instead of manual processes. While the IaC approach can simplify and automate infrastructure management, the configuration errors (i.e., misconfigurations) in the IaC scripts can significantly hinder achieving the benefits of the automation, incur undue costs, and leave the system faulty and insecure. In this paper, we present a taxonomy of IaC misconfigurations to assist practitioners and researchers in building tools for detecting misconfigurations. The user manuals of the IaC frameworks describe configuration parameters and their usage constraints, and provide recommendations on configuring certain parameters correctly. Hence, we systemically collected and analyzed 100 user manuals of the Ansible IaC language to compile a catalog of 25 configuration errors. We also developed a proofo-f-concept tool for using the information in the user manuals to generate misconfiguration detection rules.

关键词： infrastructure as code IaC Misconfiguration Misuse Ansible

来源：评论

学校读者我要写书评

暂无评论

infrastructure as code for Dynamic Deployments 2022

Infrastructure as Code for Dynamic Deployments

引用

30th ACM Joint European Software Engineering Conference / Symposium on the Foundations of Software Engineering (ESEC/FSE)

作者： Sokolowski, Daniel Univ St Gallen St Gallen Switzerland

ISBN: (纸本)9781450394130

Modern DevOps organizations require a high degree of automation to achieve software stability at frequent changes. Further, there is a need for flexible, timely reconfiguration of the infrastructure, e.g., to use pay-per-use infrastructure efficiently based on application load. infrastructure as code (IaC) is the DevOps tool to automate infrastructure. However, modern static IaC solutions only support infrastructures that are deployed and do not change afterward. To implement infrastructures that change dynamically over time, static IaC programs have to be (updated and) re-run, e.g., in a CI/CD pipeline, or configure an external orchestrator that implements the dynamic behavior, e.g., an autoscaler or Kubernetes operator. Both do not capture the dynamic behavior in the IaC program and prevent analyzing and testing the infrastructure configuration jointly with its dynamic behavior. To fill this gap, we envision dynamic IaC, which augments static IaC with the ability to define dynamic behavior within the IaC program. In contrast to static IaC programs, dynamic IaC programs run continuously. They re-evaluate program parts that depend on external signals when these change and automatically adjust the infrastructure accordingly. We implement DIaC as the first dynamic IaC solution and demonstrate it in two realistic use cases of broader relevance. With dynamic IaC, ensuring the program's correctness is even harder than for static IaC because programs may define many target configurations in contrast to only a few. However, for this reason, it is also more critical. To solve this issue, we propose automated, specialized property-based testing for IaC programs and implement it in ProTI.

关键词： DevOps infrastructure as code Cloud Software Evolution Testing

来源：评论

学校读者我要写书评

暂无评论

infrastructure as code for Business Continuity in Institutions of Higher Learning

Infrastructure as Code for Business Continuity in Institutio...

引用

IEEE International Conference on Electrical, Computer, and Energy Technologies (ICECET)

作者： Muthoni, Sofie Okeyo, George Chemwa, Geoffrey Jomo Kenyatta Univ Agr & Technol Dept Comp & Informat Technol Nairobi Kenya

ISBN: (纸本)9781665442312

Running and operating physical secondary back up sites can be expensive. But using the cloud, organizations can lean out some of these associated costs by adopting infrastructure-as-code (IaC) for business continuity. Business organizations that adopt cloud for business continuity stand to enjoy a number of benefits. These benefits include faster provisioning of computing services, workflow automation, consistency and faster deployment during the cloud migration journey. In spite of the advantages that cloud offers, institutions of higher learning (IHL) in Africa and Kenya in particular, have been slow in adopting it due to various challenges. Therefore, the purpose of this study is to assess the challenges of current configurations and factors that hinder the adoption of cloud for business continuity in institutions of higher learning in Kenya. The paper proposes a framework leveraging on infrastructure as code and considerations that they must evaluate before adopting cloud for business continuity. Data was collected by use of questionnaires. The questionnaires were given to 92 university staff that had intricate knowledge on cloud computing and analyzed through SPSS. A conceptual framework based on People, Process and Technology (PPT) was used. An experimental study that draws largely from infrastructure as code (IaC) was carried out to simulate a recovery from a local data Centre to Amazon Web Service (AWS) using two cloud formation tools Ansible and Terraform. The experimental results were presented and indicate that, IaC addressed key challenges faced by current setups such as high human resource cost, cumbersome effort, time, higher risk of human error and high maintenance costs. It is hoped the proposed framework will shed light on how IHL can increase their success rates to seamlessly adopt cloud for business continuity.

关键词： cloud computing business continuity infrastructure as code

来源：评论

学校读者我要写书评

暂无评论

A systematic mapping study of infrastructure as code research

引用

INFORMATION AND SOFTWARE TECHNOLOGY 2019年 108卷 65-77页

作者： Rahman, Akond Mandavi-Hezaveh, Rezvan Williams, Laurie North Carolina State Univ Raleigh NC 27695 USA

Context: infrastructure as code (IaC) is the practice to automatically configure system dependencies and to provision local and remote instances. Practitioners consider IaC as a fundamental pillar to implement DevOps practices, which helps them to rapidly deliver software and services to end-users. Information technology (IT) organizations, such as GitHub, Mozilla, Facebook, Google and Netflix have adopted IaC. A systematic mapping study on existing IaC research can help researchers to identify potential research areas related to IaC, for example defects and security flaws that may occur in IaC scripts. Objective: The objective of this paper is to help researchers identify research areas related to infrastructure as code (IaC) by conducting a systematic mapping study of IaC-related research. Method We conduct our research study by searching five scholar databases. We collect a set of 31,498 publications by using seven search strings. By systematically applying inclusion and exclusion criteria, which includes removing duplicates and removing non-English and non peer-reviewed publications, we identify 32 publications related to IaC. We identify topics addressed in these publications by applying qualitative analysis. Results: We identify four topics studied in IaC-related publications: (i) framework/tool for infrastructure as code;(ii) adoption of infrastructure as code;(iii) empirical study related to infrastructure as code;and (iv) testing in infrastructure as code. According to our analysis, 50.0% of the studied 32 publications propose a framework or tool to implement the practice of IaC or extend the functionality of an existing IaC tool. Conclusion: Our findings suggest that framework or tools is a well-studied topic in IaC research. As defects and security flaws can have serious consequences for the deployment and development environments in DevOps, we observe the need for research studies that will study defects and security flaws for IaC.

关键词： Devops Configuration as code Configuration script Continuous deployment infrastructure as code Software engineering Systematic mapping study

来源：评论

学校读者我要写书评

暂无评论

Decentralizing infrastructure as code

引用

IEEE SOFTWARE 2023年第1期40卷 50-55页

作者： Sokolowski, Daniel Weisenburger, Pascal Salvaneschi, Guido Univ St Gallen Programming Grp CH-9000 St Gallen Switzerland Univ St Gallen Programming CH-9000 St Gallen Switzerland

infrastructure as code (IaC) automates deployments for single teams, falling short of decentralized deployments across groups. We need mature IaC solutions that embrace and consolidate software engineering principles ... 详细信息

关键词： Authentication Software Organizations Manuals Automation Testing Software measurement DevOps infrastructure as code Cloud

来源：评论

学校读者我要写书评

暂无评论

On the Effectiveness of Tools to Support infrastructure as code: Model-Driven Versus code-Centric

引用

IEEE ACCESS 2020年 8卷 17734-17761页

作者： Sandobalin, Julio Insfran, Emilio Abrahao, Silvia Escuela Politec Nacl Dept Informat & Ciencias Computac Quito 17012759 Ecuador Univ Politecn Valencia Inst Univ Mixto Tecnol Informat E-46022 Valencia Spain

infrastructure as code (IaC) is an approach for infrastructure automation that is based on software development practices. The IaC approach supports code-centric tools that use scripts to specify the creation, updating and execution of cloud infrastructure resources. Since each cloud provider offers a different type of infrastructure, the definition of an infrastructure resource (e.g., a virtual machine) implies writing several lines of code that greatly depend on the target cloud provider. Model-driven tools, meanwhile, abstract the complexity of using IaC scripts through the high-level modeling of the cloud infrastructure. In a previous work, we presented an infrastructure modeling approach and tool (Argon) for cloud provisioning that leverages model-driven engineering and supports the IaC approach. The objective of the present work is to compare a model-driven tool (Argon) with a well-known code-centric tool (Ansible) in order to provide empirical evidence of their effectiveness when defining the cloud infrastructure, and the participants & x2019;perceptions when using these tools. We, therefore, conducted a family of three experiments involving 67 Computer Science students in order to compare Argon with Ansible as regards their effectiveness, efficiency, perceived ease of use, perceived usefulness, and intention to use. We used the AB/BA crossover design to configure the individual experiments and the linear mixed model to statistically analyze the data collected and subsequently obtain empirical findings. The results of the individual experiments and meta-analysis indicate that Argon is more effective as regards supporting the IaC approach in terms of defining the cloud infrastructure. The participants also perceived that Argon is easier to use and more useful for specifying the infrastructure resources. Our findings suggest that Argon accelerates the provisioning process by modeling the cloud infrastructure and automating the generation of scripts for differen

关键词： infrastructure as code DevOps model-driven engineering controlled experiments crossover design linear mixed model

来源：评论

学校读者我要写书评

暂无评论

The 'as code' activities: development anti-patterns for infrastructure as code

引用

EMPIRICAL SOFTWARE ENGINEERING 2020年第5期25卷 3430-3467页

作者： Rahman, Akond Farhana, Effat Williams, Laurie Tennessee Technol Univ Dept Comp Sci Cookeville TN 38505 USA North Carolina State Univ Dept Comp Sci Raleigh NC USA

Context: The 'as code' suffix in infrastructure as code (IaC) refers to applying software engineering activities, such as version control, to maintain IaC scripts. Without the application of these activities, defects that can have serious consequences may be introduced in IaC scripts. A systematic investigation of the development anti-patterns for IaC scripts can guide practitioners in identifying activities to avoid defects in IaC scripts. Development anti-patterns are recurring development activities that relate with defective IaC scripts. Goal: The goal of this paper is to help practitioners improve the quality of infrastructure as code (IaC) scripts by identifying development activities that relate with defective IaC scripts. Methodology: We identify development anti-patterns by adopting a mixed-methods approach, where we apply quantitative analysis with 2,138 open source IaC scripts and conduct a survey with 51 practitioners. Findings: We observe five development activities to be related with defective IaC scripts from our quantitative analysis. We identify five development anti-patterns namely, 'boss is not around', 'many cooks spoil', 'minors are spoiler', 'silos', and 'unfocused contribution'. Conclusion: Our identified development anti-patterns suggest the importance of 'as code' activities in IaC because these activities are related to quality of IaC scripts.

关键词： Anti-pattern Bugs Configuration script Continuous deployment Defect Devops infrastructure as code Practice Puppet Quality

来源：评论

学校读者我要写书评

暂无评论

Kief Morris on infrastructure as code

引用

IEEE SOFTWARE 2017年第1期34卷 117-120页

作者： Johann, Sven InnoQ Monheim Germany

Cloud specialist Kief Morris joins Software Engineering Radio host Sven Johann to discuss the benefits of infrastructure as code, including security, auditability, testing, documentation, and traceability.

关键词： Servers Software Engineering Automation Software Testing Computer Security Kief Morris infrastructure as code infrastructure Automation Software Engineering Radio Software Engineering Software Development

来源：评论

学校读者我要写书评

暂无评论

Test-suite-guided discovery of least privilege for cloud infrastructure as code

引用

AUTOMATED SOFTWARE ENGINEERING 2024年第1期31卷 1-39页

作者： Shimizu, Ryo Nunomura, Yuna Kanuka, Hideyuki Hitachi Ltd Res & Dev Grp Yokohama Kanagawa Japan

infrastructure as code (IaC) for the cloud, which automatically configures a system's cloud environment from source code, is an important practice thanks to its efficient, reproducible provisioning. On a cloud IaC definition (template), developers must carefully manage permission settings to minimize the risk of cyber-attacks. To this end, least privilege on IaC templates, i.e., the assignment of a necessary and sufficient set of permissions, is widely regarded as a best practice. However, the discovery of least privilege can be an error-prone, burdensome task for developers. This is partially because the execution of an action on the cloud sometimes implicitly requires permissions of other services, and since these are difficult to recognize without actual execution, developers are forced to manually iterate the execution of an action and the modification of permissions. In this work, we present an approach to automatically discover least privilege. Our approach utilizes a test suite, which represents what a system should achieve on the cloud, as an indicator of least privilege, and it iterates testing on the cloud and (re)configuration of permissions on the basis of the test results. We also propose a stepwise filtering technique that utilizes the co-occurrences of cloud services/actions and clustering-based pruning to efficiently rule out unnecessary permissions. Our experiments demonstrate that this filtering reduces the number of iterations compared to naive approaches, which directly affects the time and cost to discover least privilege. Moreover, three case studies show that our approach can identify least privilege on Amazon Web Services within a practical time.

关键词： Cloud computing infrastructure as code Least privilege Software testing

来源：评论

学校读者我要写书评

暂无评论

Source code properties of defective infrastructure as code scripts

引用

INFORMATION AND SOFTWARE TECHNOLOGY 2019年 112卷 148-163页

作者： Rahman, Akond Williams, Laurie North Carolina State Univ 890 Oval Dr Raleigh NC 27606 USA

Context: In continuous deployment, software and services are rapidly deployed to end-users using an automated deployment pipeline. Defects in infrastructure as code (IaC) scripts can hinder the reliability of the automated deployment pipeline. We hypothesize that certain properties of IaC source code such as lines of code and hard-coded strings used as configuration values, show correlation with defective IaC scripts. Objective: The objective of this paper is to help practitioners in increasing the quality of infrastructure as code (IaC) scripts through an empirical study that identifies source code properties of defective IaC scripts. Methodology: We apply qualitative analysis on defect-related commits mined from open source software repositories to identify source code properties that correlate with defective IaC scripts. Next, we survey practitioners to assess the practitioner's agreement level with the identified properties. We also construct defect prediction models using the identified properties for 2439 scripts collected from four datasets. Results: We identify 10 source code properties that correlate with defective IaC scripts. Of the identified 10 properties we observe lines of code and hard-coded string i.e. putting strings as configuration values, to show the strongest correlation with defective IaC scripts. According to our survey analysis, majority of the practitioners show agreement for two properties: include, the property of executing external modules or scripts, and hard-coded string. Using the identified properties, our constructed defect prediction models show a precision of 0.70 similar to 0.78, and a recall of 0.54 similar to 0.67. Conclusion: Based on our findings, we recommend practitioners to allocate sufficient inspection and testing efforts on IaC scripts that include any of the identified 10 source code properties of IaC scripts.

关键词： Configuration as code Continuous deployment Defect prediction Devops Empirical study infrastructure as code Puppet

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：