Dynamic security assurance in multi-cloud DevOps

Development and operation of multi-cloud applications, i.e. applications which consume and orchestrate services from multiple independent Cloud Service Providers, are challenging topics nowadays. Systematically addressing security assurance in such applications is an additional issue, unsolved at state of art. This paper introduces the MUSA DevOps approach to holistic security assurance in multi-cloud applications and details particularly the proposed approach to dynamic assurance at operation phase, which enables to early feed back the application security status to the development phase in order to take corrective actions as soon as possible, whenever they are needed.