On November 17 and 18, 2023, the team of the European project PIACERE (Programming trustworthy Infrastructure As Code in a sEcuRE framework), in which a research group coordinated by Prof. Elisabetta Di Nitto (Galia Novakova Nedeltcheva, Andrea Franchini, and Sergio Canzoneri) from the Department of Electronics, Information and Bioengineering – Politecnico di Milano also participates, will attend the Italian Agile Days to present the obtained results.
Over the past month, the PIACERE team has already presented its work at two of the main European events dedicated to DevOps organized by the Eclipse Foundation and RedHat.
PIACERE enables the automation of various Infrastructure as Code (IaC) deployment, configuration, and management tasks that would otherwise have to be performed manually by an operator. In short, the PIACERE solution consists of an integrated DevSecOps framework to develop, verify, release, configure, provision, and monitor IaC.
The PIACERE framework aims to support DevSecOps activities and shorten the learning curve for new DevSecOps teams. To achieve this goal, PIACERE proposes DevSecOps Modelling Language (DOML), a standard and easy-to-use language for modeling infrastructure provisioning, application deployment on the infrastructure, and configuration management (IaC).
In the design phase, the PIACERE approach avoids misconfiguration, insecure coding and configuration patterns through an automated solution for checking the integrity and applicability of IaC code that is to be deployed on an infrastructure. This addresses the lack of a tailored solution in the marketplace to verify the integrity and applicability of IaC code, significantly reducing reliance on automated software deployment systems.
In addition, PIACERE helps develop and maintain IaC for heterogeneous infrastructures, enabling redistribution of infrastructure code for a new configuration of the same application automatically without manual intervention. The results of the project, which will end at the end of November 2023, offer the unique feature of supporting redistributions and partial reconfigurations of a complex software system.