SECURING ENTERPRISE CLOUD APPLICATIONS WITH DEVSECOPS AND ZERO TRUST

Abstract

The use of cloud-native applications in the telecommunications industry has drastically
increased the attack surface of the enterprise systems, subjecting them to advanced
cyberattacks. Conventional security frameworks tend to fail on dynamic, distributed, and
multitenant clouds. The paper provides a review of the adoption of Zero Trust Architecture and
DevSecOps to strengthen the security of cloud applications in the telecommunications industry.
The most popular types of threats, including insider attacks, API vulnerabilities, and
misconfigurations, can be resolved with the help of automated security testing, ongoing
compliance, and identity-based access controls. The paper combines the knowledge of the
literature, industry knowledge, and case studies to provide a holistic approach to attain an
effective security posture that facilitates agile development and resilient operations, and
discusses the future challenges and directions, such as AI-driven security solutions