Quality in software is often understood as "execution according to design purpose" whereas security means that "software will not put data or computing systems at risk of unauthorized access." There seems to be a connection between these two aspects but, how do we integrate both of them in the robotics development cycle? In this article we introduce DevSecOps in Robotics, a set of best practices designed to help roboticists implant security deep in the heart of their development and operations processes. First, we briefly describe DevOps, introduce the value added with DevSecOps and describe and illustrate how these practices may be implemented in the robotics field. We finalize with a discussion on the relationship between security, quality and safety, open problems and future research questions.
翻译:软件的质量通常被理解为“按照设计目的执行”,而安全则意味着“软件不会将数据或计算机系统置于未经授权的进入风险中”。 这两个方面之间似乎有联系,但是,我们如何将两者都纳入机器人开发周期?在本篇文章中,我们引入机器人系统DevsecOps,这是一套最佳做法,旨在帮助机器人学家将安全植入其开发和操作过程的核心。首先,我们简单描述DevOps,向DevsecOps介绍增加值,并描述和说明在机器人领域如何实施这些做法。我们最后讨论了安全、质量和安全、开放问题和今后研究问题之间的关系。