Litoiu, Marin2018-11-212018-11-212018-09-062018-11-21http://hdl.handle.net/10315/35592Applications in today's software development environment evolve at a rapid rate, constantly providing their users with new functionalities. As a result, it becomes increasingly complex to understand the entire application. The security team and the developers may not completely understand each others approaches, resulting in a less secure system with vulnerabilities. In addition, there is large amount of security data to be analyzed. To mitigate these issues, we propose a platform to support the SecDevOps framework, a hierarchical distributed architecture for security control that uses a Business Rules Engine (BRE). The BRE simplifies security rules by allowing the teams to write them at an operational level rather than at the network level, which requires specialized knowledge. Business rules are universally understood by the different teams, resulting in effective inter-team communication. Additionally, the platform can expand and scale with new security rules and data sources at runtime in a systematic manner.enAuthor owns copyright, except where explicitly noted. Please contact the author directly with licensing requests.Computer engineeringElectronic Thesis or Dissertation2018-11-21Software securityCloud computingBig dataDevOpsSecDevOpsBusiness rules