Security-Based Workforce Selection for Microservice Deployment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software development methodologies fail to ensure that software deployment teams possess the necessary security skills and expertise to manage and mitigate risks associated with software code, particularly in dynamic and evolving environments.
Innovation Solution
A framework that integrates security weights of application programming interfaces (APIs) with workforce selection policies, automating the selection and compliance checking of team members based on their security skillsets to ensure they meet the requirements of the software codebase, using a workforce compliance engine that monitors and adapts to changing security threats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If automated workforce selection based on security skillsets is implemented, then security compliance is improved, but system complexity increases
Solution Approach 1:
The patent introduces a workforce compliance engine as an intermediary component that mediates between the CI/CD pipeline and the workforce personnel database. This engine automatically evaluates security skillsets, assigns compliance scores, and enforces policy restrictions, thereby improving security compliance while managing system complexity through modular design rather than monolithic implementation.
Solution Approach 2:
The system implements self-service mechanisms where the workforce compliance engine automatically performs security assessments, policy evaluations, and compliance determinations without requiring manual intervention. The engine autonomously queries workforce databases, compares skillsets against policies, and enforces restrictions, reducing the burden on human operators while maintaining high security standards.
2Object-affected harmful factors
If security-based policy selection is enforced during CI/CD, then security risk is reduced, but deployment time increases
Solution Approach 1:
The patent implements preliminary action by pre-configuring workforce selection policies with defined security skillset requirements before CI/CD operations commence. The compliance engine pre-evaluates available workforce personnel against these policies and maintains ready lists of compliant individuals, so that when deployment tasks arise, compliant personnel can be rapidly assigned without time-consuming security assessments during the actual deployment process.
Solution Approach 2:
The system incorporates feedback mechanisms where the workforce compliance engine continuously monitors deployment activities and security compliance status. When compliance issues are detected, the engine provides real-time feedback by identifying alternative compliant personnel or adjusting task assignments, enabling rapid correction without halting the entire deployment process and minimizing time loss.
3Adaptability or versatility
If manual workforce selection is used, then flexibility is maintained, but security compliance cannot be ensured
Solution Approach 1:
The patent implements dynamics by designing the workforce compliance engine to dynamically adapt to changing security policies and workforce skillsets. The engine automatically updates compliance evaluations when policies are modified or when workforce personnel acquire new certifications and skills. This dynamic approach maintains flexibility in responding to changing requirements while ensuring continuous security compliance through automated enforcement.
Data Source
AI summary
Techniques are provided for software deployment workforce selection using security-based policy selection. One method comprises obtaining security skillset grades for workforce personnel associated with a software deployment pipeline; obtaining workforce selection policies that specify a security skillset grade required for workforce personnel; identifying, for a given microservice of an application, a given workforce selection policy applicable to the given microservice, wherein the given workforce selection policy is identified based on a security weight assigned to the given microservice, by aggregating one or more security weights for application programming interfaces of the given microservice; selecting workforce personnel to perform tasks related to the given microservice based on a comparison of the security skillset grades for the workforce personnel and the security skillset grade required for workforce personnel specified in the given workforce selection policy; and initiating at least one automated action based on a result of the selecting.