Abstract
DevSecOps, which integrates security practices into every phase of DevOps, is increasingly adopted to balance rapid delivery with security needs. Artificial Intelligence (AI) and Machine Learning (ML) techniques are frequently applied in DevSecOps pipelines to automate security checks, improve threat detection, and enforce compliance. Yet, most existing research examines these techniques in isolation without comparing approaches. To address that gap, we performed a systematic literature review (SLR) of AI-driven security solutions in DevSecOps. We evaluated each approach's technical capabilities, implementation challenges, and operational impact. Our review found notable shortcomings in current approaches - particularly in real-world validation, scalability, and seamless integration of AI into development pipelines. We also highlight best practices observed in the literature, identify open research questions, and suggest directions for future work in order to advance AI-enabled DevSecOps.
| Original language | English |
|---|---|
| Title of host publication | Proceedings of the 29th International Conference on Evaluation and Assessment in Software Engineering , EASE, 2025 edition, EASE Companion 2025 |
| Editors | Muhammad Ali Babar, Ayse Tosun, Stefan Wagner, Viktoria Stray |
| Publisher | Association for Computing Machinery, Inc |
| Pages | 142-151 |
| Number of pages | 10 |
| ISBN (Electronic) | 9798400718328 |
| DOIs | |
| State | Published - 23 Dec 2025 |
| Event | 29th International Conference on Evaluation and Assessment of Software Engineering, EASE 2025 - Istanbul, Turkey Duration: 17 Jun 2025 → 20 Jun 2025 |
Publication series
| Name | Proceedings of the 29th International Conference on Evaluation and Assessment in Software Engineering , EASE, 2025 edition, EASE Companion 2025 |
|---|
Conference
| Conference | 29th International Conference on Evaluation and Assessment of Software Engineering, EASE 2025 |
|---|---|
| Country/Territory | Turkey |
| City | Istanbul |
| Period | 17/06/25 → 20/06/25 |
Bibliographical note
Publisher Copyright:© 2025 Copyright held by the owner/author(s).
Keywords
- AI
- Comparative Analaysis
- DevSecOps
- Machine Learning
- Security automation
- Software Security
- Systematic Literarture Review
ASJC Scopus subject areas
- Software
Fingerprint
Dive into the research topics of 'Comparative Analysis of AI-Driven Security Approaches in DevSecOps: Challenges, Solutions, and Future Directions'. Together they form a unique fingerprint.Cite this
- APA
- Author
- BIBTEX
- Harvard
- Standard
- RIS
- Vancouver