Journal of
Systemics, Cybernetics and Informatics
HOME   |   CURRENT ISSUE   |   PAST ISSUES   |   RELATED PUBLICATIONS   |   SEARCH     CONTACT US
 



ISSN: 1690-4524 (Online)


Peer Reviewed Journal via three different mandatory reviewing processes, since 2006, and, from September 2020, a fourth mandatory peer-editing has been added.

Indexed by
DOAJ (Directory of Open Access Journals)Benefits of supplying DOAJ with metadata:
  • DOAJ's statistics show more than 900 000 page views and 300 000 unique visitors a month to DOAJ from all over the world.
  • Many aggregators, databases, libraries, publishers and search portals collect our free metadata and include it in their products. Examples are Scopus, Serial Solutions and EBSCO.
  • DOAJ is OAI compliant and once an article is in DOAJ, it is automatically harvestable.
  • DOAJ is OpenURL compliant and once an article is in DOAJ, it is automatically linkable.
  • Over 95% of the DOAJ Publisher community said that DOAJ is important for increasing their journal's visibility.
  • DOAJ is often cited as a source of quality, open access journals in research and scholarly publishing circles.
JSCI Supplies DOAJ with Meta Data
, Academic Journals Database, and Google Scholar


Listed in
Cabell Directory of Publishing Opportunities and in Ulrich’s Periodical Directory


Published by
The International Institute of Informatics and Cybernetics


Re-Published in
Academia.edu
(A Community of about 40.000.000 Academics)


Honorary Editorial Advisory Board's Chair
William Lesso (1931-2015)

Editor-in-Chief
Nagib C. Callaos


Sponsored by
The International Institute of
Informatics and Systemics

www.iiis.org
 

Editorial Advisory Board

Quality Assurance

Editors

Journal's Reviewers
Call for Special Articles
 

Description and Aims

Submission of Articles

Areas and Subareas

Information to Contributors

Editorial Peer Review Methodology

Integrating Reviewing Processes


Smart Cities: Challenges and Opportunities
Mohammad Ilyas
(pages: 1-6)

Bridging the Gap: Communicating to Increase the Visibility and Impact of Your Academic Work
Erin Ryan
(pages: 7-12)

Cross-Cultural Online Networking Based on Biomedical Engineering to Motivate Transdisciplinary Communication Skills
Shigehiro Hashimoto
(pages: 13-17)

Interdisciplinary Approaches to Learning Informatics
Masaaki Kunigami
(pages: 18-22)

The Impact of Artificial Intelligence and the Importance of Transdisciplinary Research
R. Cherinka, J. Prezzama, P. O'Leary
(pages: 23-28)

Emotional Communication as Complex Phenomenon in Musical Interpretation – Proposal for a Systemic Model That Promotes a Transdisciplinary Process of Self-Formation and Reflection Around Expressiveness as a Lived Experience
Fuensanta Fernández de Velazco, Eduardo Carpinteyro-Lara, Saúl Rodríguez-Luna
(pages: 29-33)

A Multi-Disciplinary Cybernetic Approach to Pedagogic Excellence
Russell Jay Hendel
(pages: 34-41)

The Ethics of Artificial Intelligence in the Era of Generative AI
Vassilka D. Kirova, Cyril S. Ku, Joseph R. Laracy, Thomas J. Marlowe
(pages: 42-50)

Trans-Disciplinary Communication: Context and Semantics
Maurício Vieira Kritz
(pages: 51-57)

A Brave New World: AI as a Nascent Regime?
Jasmin Cowin, Birgit Oberer, Cristo Leon
(pages: 58-66)

The Role of Art and Science – Relational Dynamics in Human Ecology
Giorgio Pizziolo, Rita Micarelli
(pages: 67-75)

Advancing Entrepreneurship Education: An Integrated Approach to Empowering Future Innovators
Birgit Oberer, Alptekin Erkollar
(pages: 76-81)

Harmonizing Horizons: The Symphony of Human-Machine Collaboration in the Age of AI
Birgit Oberer, Alptekin Erkollar
(pages: 82-86)

How Do Students Learn Artificial Intelligence in Interdisciplinary Field of Biomedical Engineering?
Shigehiro Hashimoto
(pages: 87-91)

What is ChatGPT and its Present and Future for Artificial Intelligence in Trans-Disciplinary Communications?
Richard Segall
(pages: 92-98)


 

Abstracts

 


ABSTRACT


DevSecOps Pipeline for Complex Software-Intensive Systems: Addressing Cybersecurity Challenges

Carol Woody, Timothy A. Chick, Aaron Reffett, Scott Pavetti, Richard Laughlin, Brent Frye, Michael Bandor


A major challenge for cybersecurity comes from new technology approaches that focus primarily on the benefits of implementation rather than on defining the governance and risk management changes necessary to establish and enforce appropriate protections. This challenge is especially important for the adoption of technology that impacts critical infrastructure and shared services, such as voting and defense. Researchers examined the challenges and the effective cybersecurity options facing Department of Defense (DoD) programs delivering cyber-physical systems and adopting DevSecOps. These researchers found a lack of broad understanding about the level of management and governance responsibility needed to define and use the DevSecOps pipeline. Adopting DevSecOps is a socio-technical decision that links technology with operational process and practice. Researchers identified several areas that require cross-functional and organizational management attention to fit the pipeline for mission use and considerations to address for producing the system. This paper describes the case study and lessons learned to date.

When a program adopts DevSecOps, it creates and supports two major systems concurrently: (1) the product the program was assigned to produce, and (2) the pipeline the program uses to develop and operationalize the product. Both systems need effective built-in security. In addition, neither the product nor the pipeline can remain static, so the cybersecurity of each must change to ensure sufficiency. The product expands with added functionality, which includes added vulnerabilities that tools and developers must address. The pipeline should be continually refined and improved as new tools and techniques better enable the consistent throughput of new features and capabilities. The focus on functionality and throughput is not sufficient for either system because the threat landscape changes constantly with new attacker capabilities. As a result, the need for improved tools to avoid and remove vulnerabilities from the product become critical. These tools must also be patched since they are software and contain vulnerabilities. As more data about the product is collected through the pipeline, it is critical to tap this information to improve the product and pipeline. However, the pipeline is not a single entity. It is a collection of highly configurable pieces built independently and assembled to perform together.

The increased use of the DevSecOps pipeline to automate software assurance, cybersecurity, and safety compliance transfers the responsibilities for identifying and addressing pipeline and product risks to roles that were not involved in the past. For example, acquirers and maintainers of pipeline tools may now be responsible for the level of verification performed on the product and its associated effectiveness. If the criteria for tool selection remains focused only on cost, availability, and compliance, the expectations for this new responsibility could fall short of stakeholder expectations, especially if structuring the pipeline does not include stakeholder requirements. There is a lack of broad understanding about the level of management and governance responsibility needed to define and assure the responsible use of a DevSecOps pipeline. Our work is focused on bringing these under-addressed areas to light.

Full Text