Modern application lifecycle management approaches

• Autorzy: Zajączkowska Patrycja

Identyfikatory

DOI

10.34739/si.2025.32.03

• Języki publikacji: EN

Abstrakty

EN

Effective application lifecycle management (ALM) relies on modern tools and practices that streamline development while ensuring security and stability. This article examines key components of a modern ALM strategy, including DevOps culture, CI/CD pipelines, Infrastructure as Code, containerization, orchestration, monitoring, observability, and the growing role of AI. Special attention is given to the integration of security into the CI/CD process, particularly through automated testing techniques such as Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST). These practices help identify vulnerabilities early in the development cycle, reducing risk and enhancing application reliability.Adopting these technologies involves initial investments in licenses, training, and team restructuring. However, these efforts are rewarded through automation of repetitive tasks, accelerated deployment cycles, improved scalability, and proactive issue detection. AI-driven tools further enhance development efficiency through intelligent code suggestions, predictive analytics, and automated bug detection. By embracing these modern approaches, organizations can achieve a more secure, efficient, and agile development process, better equipped to adapt to a rapidly evolving technological landscape.

Słowa kluczowe

EN

DevOps; CI/CD; IaC; Containerization; Orchestration; Monitoring

• Wydawca: Wydawnictwo Uniwersytetu Przyrodniczo-Humanistycznego w Siedlcach
• Czasopismo: Studia Informatica : systems and information technology
• Rocznik: 2025
• Tom: vol. 1(32)
• Strony: 31--45
• Opis fizyczny: Bibliogr. 34 poz., rys.

Twórcy

autor

Zajączkowska Patrycja

• University of Siedlce, Faculty of Exact and Natural Sciences, Institute of Computer Science, ul. 3 Maja 54, 08-110 Siedlce, Poland

• https://orcid.org/0009-0001-9275-6467

Bibliografia

• 1. Avi Networks, : Container Orchestration Definition, https://avinetworks.com/glossary/container-orchestration/. Last accessed: 12 Jul 2024.
• 2. Amazon Web Services, Inc., : What is Container Orchestration?, https://aws.amazon.com/what-is/container-orchestration/. Last accessed: 12 Jul 2024.
• 3. Ballav S., : Top five cloud monitoring challenges, https://www.site24x7.com/blog/cloud-monitoring-challenges. Last accessed: 25 Aug 2024.
• 4. Barney D., : Infrastructure Provisioning vs. Configuration Management vs. Configuration Orchestration: How IaC Makes Them All Better, https://www.chef.io/blog/infrastructure-provisioning-vs-configuration-management-vs-configuration-orchestration-how-iac-makes-them-all-better. Last accessed: 11 Jul 2024.
• 5. Belfiore R., : Pros and Cons of CI/CD Pipelines, https://www.bairesdev.com/blog/pros-and-cons-of-ci-cd-pipelines/ Last accessed: 25 Aug 2024.
• 6. Bigelow S. J., : The definitive guide to enterprise IT monitoring, https://www.techtarget.com/searchitoperations/The-definitive-guide-to-enterprise-IT-monitoring. Published: 25 Jan 2024.
• 7. Check Point Software Technologies Ltd., : What is CI/CD Security?, https: //www.checkpoint.com/cyber-hub/cloud-security/what-is-ci-cd-security. Last accessed: 27 Apr 2025.
• 8. Cisco Systems, Inc., : What Is High Availability?, https://www.cisco.com/c/en/us/solutions/hybrid-work/what-is-high-availability.html. Last accessed: 10 Jul 2024.
• 9. Claire D., : What is scrum and how to get started, https://www.atlassian.com/agile/scrum. Last accessed: 10 Jul 2024.
• 10. Datadog, : Docs: Anomaly Monitor, https://docs.datadoghq.com/monitors/types/anomaly. Last accessed: 12 Jun 2024.
• 11. Docker Inc., : Use containers to Build, Share and Run your applications, https://www.docker.com/resources/what-container/. Last accessed: 12 Jun 2024.
• 12. GitLab B.V., : What is CI/CD? https://about.gitlab.com/topics/ci-cd/. Last accessed: 10 Jul 2024.
• 13. GitHub, Inc., : What is CI/CD?, https://github.com/marketplace/actions/ai-code-review-action. Last accessed: 12 Jun 2024.
• 14. Gowdy M., : Common observability challenges and steps to overcome them, https://blog.quest.com/common-observability-challenges-and-steps-to-overcome-them/. Published: 4 Jan 2024.
• 15. Smalley I., Susnjara S., : What is containerization?, https://www.ibm.com/topics/containerization. Last accessed: 11 Jul 2024.
• 16. Kazlouskaya K., : Kubernetes Advantages and Disadvantages, https://ostridelabs.com/kubernetes-advantages-and-disadvantages/. Updated: 13 May 2024.
• 17. Kimachia K., : Benefits and Drawbacks of Infrastructure as Code (IaC), https: //www.enterprisenetworkingplanet.com/data-center/infrastructure-as-code/Published: 6 Jun 2022.
• 18. Krief M.: Learning DevOps: A comprehensive guide to accelerating DevOps culture adoption with Terraform, Azure DevOps, Kubernetes, and Jenkins, 2nd edn., Packt Publishing (2023).
• 19. Livens J., : Observability vs. monitoring: What’s the difference?, https://www.dynatrace.com/news/blog/observability-vs-monitoring/. Last accessed: 12 Jul 2024.
• 20. Magnusson A., : Observability vs. Monitoring: Understanding the Difference, https://www.strongdm.com/blog/observability-vs-monitoring. Last accessed: 12 Jul 2024.
• 21. Microsoft, : What is DevOps?, https://azure.microsoft.com/resources/cloud-computing-dictionary/what-is-devops. Last accessed: 10 Jul 2024.
• 22. R. Mijuskovic, S. Borthakur, T. O. Morsh, S. Tschiatschek, and C. Gkantsidis, : A Framework for Cognitive, Decentralized Container Orchestration (CODECO), IEEE Access, vol. 12, pp. 112345–112360, 2024.
• 23. Pająk T., : Co to jest DevOps?, https://blog.conlea.pl/co-to-jest-devops. Last accessed: 10 Jul 2024.
• 24. Radigan D., : What is kanban?, https://www.atlassian.com/agile/kanban. Last accessed: 10 Jul 2024.
• 25. Rehkopf M., : What is continuous improvement?, https://www.atlassian.com/agile/project-management/continuous-improvement. Last accessed: 12 Jul 2024.
• 26. Red Hat Inc., : What is container orchestration?, https: //www.redhat.com/en/topics/containers/what-is-container-orchestration. Last accessed: 12 Jun 2024.
• 27. SonarSource SA., : A developer’s guide to AI-assisted software development, https://www.sonarsource.com/learn/ai-assisted-software-development. Last accessed: 12 Jun 2024.
• 28. Splunk Inc., https://www.splunk.com/en_us/solutions/splunk-artificial-intelligence.html. Last accessed: 12 Jun 2024.
• 29. Schmitt J., : DAST: A guide to dynamic application security testing https://circleci.com/blog/dynamic-application-security-testing-dast. Last accessed: 27 Apr 2025.
• 30. Schmitt J., : SAST: A guide to static application security testing https://circleci.com/blog/static-application-security-testing-sast/#c-consent-modal. Last accessed: 27 Apr 2025.
• 31. Subramanian P. S., : 10 Major DevOps Challenges And Issues, https://www.ideas2it.com/blogs/devops-challenges. Last accessed: 21 Jul 2024.
• 32. Trend Micro Incorporated, : What Is Infrastructure as Code? https://www.trendmicro.com/en_us/what-is/cloud-security/infrastructure-as-code.html. Last accessed: 11 Jul 2024.
• 33. Zhong Z., Wang J., Xiang T., Xu C., : Machine Learning-based Orchestration of Containers: A Taxonomy and Future Directions, arXiv preprint arXiv:2106.12739 (2021).
• 34. [x]cube LABS, : The Advantages and Disadvantages of Containers, https: //www.xcubelabs.com/blog/the-advantages-and-disadvantages-of-containers/. Published: 23 Feb 2023.