SIGNAL+DRAHT | Ausgabe 05/2025
DevSecOps: The secure implementation of OT applications in the cloud
This article shows how DevSecOps practices support the integration of cloud technologies such as Kubernetes in OT environments. This is discussed using a case study for an ATO-TS system as an example. Given that the connection of OT systems to the cloud increases the attack surface, the integration of security measures is crucial from the outset. DevSecOps enables this through automated code scans and continuous security checks in automated CI/CD pipelines. Thus, secure cloud migration is also possible in compliance with current standards...