Explainable AI-Based DevSecOps Validation Across Distributed Enterprise Cloud Infrastructure Platforms
Keywords:
Explainable Artificial Intelligence, DevSecOps, Distributed Cloud Infrastructure, Security Validation, Machine Learning, SHAP, LIME, Vulnerability Detection, Continuous Compliance, Cloud Security, CI/CD Pipelines, Automated Risk Assessment.Abstract
The increasing adoption of distributed enterprise cloud infrastructure has introduced complex security challenges associated with application development, deployment automation, infrastructure configuration, and continuous integration and continuous delivery (CI/CD) pipelines. Traditional DevSecOps validation approaches often depend on predefined security rules, static analysis, and automated vulnerability scanning, which may struggle to identify sophisticated threats and explain the reasoning behind detected security violations. This research proposes an Explainable Artificial Intelligence (XAI)-based DevSecOps validation framework designed to improve security assessment, policy enforcement, and operational transparency across distributed enterprise cloud platforms. The proposed framework integrates machine learning, explainable prediction techniques, automated vulnerability assessment, infrastructure configuration analysis, and continuous compliance monitoring. Explainability techniques such as SHAP and LIME are incorporated to identify important security indicators and provide interpretable explanations for vulnerability classifications and risk predictions. The framework evaluates application code, container images, cloud configurations, access policies, deployment pipelines, and runtime security events. Furthermore, automated validation mechanisms prioritize security findings according to severity, exploitability, and operational impact. The proposed architecture aims to strengthen security decision-making, reduce false-positive alerts, improve compliance visibility, and support trustworthy automation throughout enterprise DevSecOps workflows. This approach establishes an intelligent and transparent foundation for proactive cybersecurity governance across heterogeneous and multi-cloud infrastructure environments.
Downloads
Published
Issue
Section
License
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
License Terms
Journal of Emerging Intelligence and Engineering Technologies is an open-access journal. Unless otherwise stated, all articles published in the journal are licensed under the Creative Commons Attribution-NonCommercial 4.0 International License (CC BY-NC 4.0).
Full license text: https://creativecommons.org/licenses/by-nc/4.0/
Under this license, you are free to:
- Share: copy and redistribute the material in any medium or format.
- Adapt: remix, transform, and build upon the material.
The licensor cannot revoke these freedoms as long as you follow the license terms.
Under the following terms:
- Attribution: You must give appropriate credit to the original author(s) and the source. Credit should include the article title, author names, journal name, volume, issue, year, and DOI where available. You must also provide a link to the license and indicate whether changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor or the journal endorses you or your use.
- NonCommercial: You may not use the material for commercial purposes. Commercial purposes are those primarily intended for, or directed toward, commercial advantage or monetary compensation.
- No additional restrictions: You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.
Notices
- You do not have to comply with the license for parts of the material that are in the public domain, or where your use is permitted by an applicable exception or limitation, such as fair use or fair dealing.
- No warranties are given. The license may not give you all the permissions you need for your intended use. For example, other rights such as publicity, privacy, or moral rights may limit how you use the material.
- Third-party content in an article, such as figures, tables, or images reproduced from other sources, may be under different terms. It is covered by this license only if it is stated in the credit line.
Copyright
Authors keep the copyright of their work. By publishing, they grant the Journal of Emerging Intelligence and Engineering Technologies the right of first publication under the CC BY-NC 4.0 license.
Commercial Use
Anyone who wants to use published material for commercial purposes must get written permission from the copyright holder(s). Requests can be sent to the journal's editorial office at [editorial email address].
