The document discusses the PIACERE project, which has received funding from the European Union's Horizon 2020 program. The project aims to develop a DevSecOps framework for securely developing infrastructure-as-code using tools integrated into IDEs. A proof-of-concept version is already available. The framework will use the Eclipse EMF to develop a DevSecOps Modeling Language to model infrastructure and support security and performance settings across multiple layers from the application to infrastructure.

1. This project has received funding from the European
Union’s Horizon 2020 research and innovation
programme under grant agreement No. 101000162.
PIACERE: Making secure IaC
code development easier
through ECLIPSE EMF
Gorka Benguria (Tecnalia)
Eclipse Community Day Talk, 16th of October

2. 2 20/10/2023
GA 101000162
Vision: DevSecOps framework for the development,
deployment and operation of trustworthy
infrastructure-as-code.
Goal: Framework with tools integrated in the IDE.
Status: PoC version already available!
PIACERE Project

3. 3 20/10/2023
GA 101000162
PIACERE Project DevSecOps Approach

4. 4 20/10/2023
GA 101000162
Eclipse EMF role

5. 5 20/10/2023
GA 101000162
 DOML – domain specific language
 Model checker
 IaC Optim. Platform + catalogue
 IaC Code Generator (Terraform, Ansible, …)
 IaC security inspector
 Component security inspector
 PIACERE runtime controller
 Canary sandbox environment
 IaC Execution manager
 (Security) monitoring
 Self-learning
 Self-healing

6. 6 20/10/2023
GA 101000162
Eclipse EMF role
DOML: DevSecOps Modeling Language that is developed by using
ECLIPSE EMF:
• Multiple layers
• Aplication layer
• Abstract infrastructure layer
• Supports realtime security and performance settings
• Concrete infrastructure layer
• Optimization layer

7. 7 20/10/2023
GA 101000162

8. 8 20/10/2023
GA 101000162
 DOML – domain specific language
 Model checker
 IaC Optim. Platform + catalogue
 IaC Code Generator (Terraform, Ansible, …)
 IaC security inspector
 Component security inspector
 PIACERE runtime controller
 Canary sandbox environment
 IaC Execution manager
 (Security) monitoring
 Self-learning
 Self-healing

9. 9 20/10/2023
GA 101000162

10. 10 20/10/2023
GA 101000162
 DOML – domain specific language
 Model checker
 IaC Optim. Platform + catalogue
 IaC Code Generator (Terraform, Ansible, …)
 IaC security inspector
 Component security inspector
 PIACERE runtime controller
 Canary sandbox environment
 IaC Execution manager
 (Security) monitoring
 Self-learning
 Self-healing

11. 11 20/10/2023
GA 101000162

12. 12 20/10/2023
GA 101000162

13. 13 20/10/2023
GA 101000162
 DOML – domain specific language
 Model checker
 IaC Optim. Platform + catalogue
 IaC Code Generator (Terraform, Ansible, …)
 IaC security inspector
 Component security inspector
 PIACERE runtime controller
 Canary sandbox environment
 IaC Execution manager
 (Security) monitoring
 Self-learning
 Self-healing

14. 14 20/10/2023
GA 101000162

15. 15 20/10/2023
GA 101000162
 DOML – domain specific language
 Model checker
 IaC Optim. Platform + catalogue
 IaC Code Generator (Terraform, Ansible, …)
 IaC security inspector
 Component security inspector
 PIACERE runtime controller
 Canary sandbox environment
 IaC Execution manager
 (Security) monitoring
 Self-learning
 Self-healing

16. 16 20/10/2023
GA 101000162

17. 17 20/10/2023
GA 101000162
 DOML – domain specific language
 Model checker
 IaC Optim. Platform + catalogue
 IaC Code Generator (Terraform, Ansible, …)
 IaC security inspector
 Component security inspector
 PIACERE runtime controller
 Canary sandbox environment
 IaC Execution manager
 (Security) monitoring
 Self-learning
 Self-healing

18. 18 20/10/2023
GA 101000162

19. 19 20/10/2023
GA 101000162
 DOML – domain specific language
 Model checker
 IaC Optim. Platform + catalogue
 IaC Code Generator (Terraform, Ansible, …)
 IaC security inspector
 Component security inspector
 PIACERE runtime controller
 Canary sandbox environment
 IaC Execution manager
 (Security) monitoring
 Self-learning
 Self-healing

20. 20 20/10/2023
GA 101000162

21. Thank you!
www.piacere-project.org