SECURING DEPLOYMENT: STRATEGIES AND BEST PRACTICES IN THE SSDLC
DOI:
https://doi.org/10.34132/mspc2025.01.06.40Keywords:
SSDLC, secure deployment, continuous deployment, DevSecOps, deployment strategies, Infrastructure-as-Code, software security, CI/CD, deployment automation.Abstract
The thesis represents a focused exploration of the Deployment phase in the Secure Software Development Life Cycle (SSDLC) as a critical component of modern software engineering. As organizations shift toward agile and DevSecOps practices, deployment is no longer a static handoff but a dynamic, repeatable process with significant implications for security, availability, and compliance. This paper explores the contemporary importance of secure deployment, evaluates a spectrum of deployment strategies (e.g., blue-green, canary, rolling), and compares traditional methods with continuous deployment pipelines and Infrastructure-as-Code approaches. The security aspect is examined, with recommendations on best practices. Ultimately, this paper highlights how a well-executed deployment strategy can serve as both a technical and organizational safeguard, reinforcing security and operational excellence at the most critical juncture of software delivery.
References
Alghamdi A., Niazi M. Toward Successful Secure Software Deployment: An Empirical Study [Електронний ресурс]. – 2023. – Режим доступу: https://dl.acm.org/doi/10.1145/3593434.3593966
Wen Z., Cala J., Watson P., Romanovsky A. Cost Effective, Reliable, and Secure Workflow Deployment over Federated Clouds [Електронний ресурс]. – 2015. – Режим доступу: https://ieeexplore.ieee.org/document/7214096
Kao T.-C., Mao C.-H., Chang C.-Y., Chang K.-C. Cloud SSDLC: Cloud Security Governance Deployment Framework in Secure System Development Life Cycle [Електронний ресурс]. – 2012. – Режим доступу: https://ieeexplore.ieee.org/document/6296105
Umeugo W. Secure Software Development Lifecycle: A Case for Adoption in Software SMEs [Електронний ресурс]. – 2023. – Режим доступу: https://ijarcs.info/index.php/Ijarcs/article/view/6949
Kim S., Lee J., Park H. Secure Deployment Strategies for Web Applications // Journal of Software Security. – 2019. – Vol. 15, No. 2. – С. 101–115.
Chen Y., Huang X. Mitigating Backdoor Risks in Software Deployment // Proceedings of the International Conference on Software Engineering and Security. – 2021. – С. 234–245.
Smith A., Jones R. Balancing Simplicity and Availability in Deployment Approaches // Software Maintenance Review. – 2020. – Vol. 28, No. 4. – С. 312–327.
