Comparative Analysis of AI-Driven Security Approaches in DevSecOps: Challenges, Solutions, and Future Directions

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

DevSecOps, which integrates security practices into every phase of DevOps, is increasingly adopted to balance rapid delivery with security needs. Artificial Intelligence (AI) and Machine Learning (ML) techniques are frequently applied in DevSecOps pipelines to automate security checks, improve threat detection, and enforce compliance. Yet, most existing research examines these techniques in isolation without comparing approaches. To address that gap, we performed a systematic literature review (SLR) of AI-driven security solutions in DevSecOps. We evaluated each approach's technical capabilities, implementation challenges, and operational impact. Our review found notable shortcomings in current approaches - particularly in real-world validation, scalability, and seamless integration of AI into development pipelines. We also highlight best practices observed in the literature, identify open research questions, and suggest directions for future work in order to advance AI-enabled DevSecOps.

Original languageEnglish
Title of host publicationProceedings of the 29th International Conference on Evaluation and Assessment in Software Engineering , EASE, 2025 edition, EASE Companion 2025
EditorsMuhammad Ali Babar, Ayse Tosun, Stefan Wagner, Viktoria Stray
PublisherAssociation for Computing Machinery, Inc
Pages142-151
Number of pages10
ISBN (Electronic)9798400718328
DOIs
StatePublished - 23 Dec 2025
Event29th International Conference on Evaluation and Assessment of Software Engineering, EASE 2025 - Istanbul, Turkey
Duration: 17 Jun 202520 Jun 2025

Publication series

NameProceedings of the 29th International Conference on Evaluation and Assessment in Software Engineering , EASE, 2025 edition, EASE Companion 2025

Conference

Conference29th International Conference on Evaluation and Assessment of Software Engineering, EASE 2025
Country/TerritoryTurkey
CityIstanbul
Period17/06/2520/06/25

Bibliographical note

Publisher Copyright:
© 2025 Copyright held by the owner/author(s).

Keywords

  • AI
  • Comparative Analaysis
  • DevSecOps
  • Machine Learning
  • Security automation
  • Software Security
  • Systematic Literarture Review

ASJC Scopus subject areas

  • Software

Fingerprint

Dive into the research topics of 'Comparative Analysis of AI-Driven Security Approaches in DevSecOps: Challenges, Solutions, and Future Directions'. Together they form a unique fingerprint.

Cite this