Integrated & Automated Development, Security, and Operations (IA DEVSECOPS)

Vigilant Cyber Systems, Inc. (VCS) proposes to design and develop Integrated & Automated Testing System (IATS) for use in Development, Security, and Operations (DevSecOps) tool chains. IATS will provide a single, streamlined environment for DevSecOps testing, including enhanced automated software development and qualification testing for rapid deployment of high quality and cyber-secured capabilities to the warfighter. IATS will provide an integrated testing and evaluation (T&E) environment for software developers. With each new iteration in the software development process a new testing series can be spawned, allowing for easy source identification with regard to issues, bugs, or failed tests encountered. When a new testing series is created the source code and compiled executables are packaged with available Model-based systems engineering (MBSE) artifacts, pertinent threat models, seed inputs, and virtual run time environment (RTE). All of these inputs are analyzed with an initial test and the result is a queue of tests that will be run on the given software, to include performance qualification tests and cyber vulnerability tests. As each test in the queue is executed results are documented and the testing queue updated as some test results may indicate the need for additional tests. Using this parallel conveyor belt analogy, testing performance qualification testing and cyber vulnerability testing can be executed on the same platform regularly in a semi-automated to automated process. IATS maintains a master test queue and multiple sets of tests can be run concurrently with IATS spawning new tests from the queue are resources are available. The end result will be tested software delivered to the warfighter in a quicker and more efficient manner. In addition, IATS will maintain a record of all tests performed that can be provided to the community for planning official testing. Approved for Public Release | 22-MDA-11215 (27 Jul 22)