一句话：通过文献调查识别 QSecOps 的 13 项核心挑战，并提出评估其对 DevOps 安全与性能影响的理论框架。
量子计算对依赖传统密码机制的现代软件安全，尤其是 DevOps 与 CI/CD 流水线，带来机遇与风险。随着量子威胁临近，量子安全 DevOps（QSecOps）试图将抗量子安全措施集成到软件部署工作流中，但其技术/运维约束阻碍采用。本文采用文献调查方法，梳理现有文献报告的 QSecOps 实施挑战，识别出 13 项可能负面影响 QSecOps 的核心挑战，并基于这些挑战因素的影响构建理论框架。该框架为软件工程师、安全人员和 DevOps 团队提供实践洞见，以增强量子安全集成并面向未来保障软件部署。
Quantum computing presents both opportunities and risks for modern software security, particularly in DevOps and CI/CD pipelines, which rely on traditional cryptographic mechanisms. As quantum threats become imminent, Quantum Secure DevOps (QSecOps) aims to integrate quantum-resistant security measures into software deployment workflows. However, its adoption remains challenging due to various technical and operational constraints. This study identifies and analyzes the key challenges in implementing QSecOps and develops a theoretical framework to assess their impact on DevOps security and performance. To conduct this study, we use literature survey approach to explore the challenge of QSec-Ops reported by the existing literature. By conducting the literature survey, we have identified 13 core challenges that could negatively impact the QSecOps. Addressing these challenges is essential for ensuring quantum-secure CI/CD pipelines. Further, a theoretical framework was developed based on the impact of identified challenging factors. The proposed framework provides practical insights for software engineers, security professionals, and DevOps teams to enhance quantum security integration and future-proof software deployment.
@inproceedings{paperbot9077,
title = {Quantum Secure DevOps (QSecOps): Integrating Quantum-Based Security Checks into CI/CD Pipelines: Next-Generation Software Security},
author = {Muhammad Azeem Akbar and Saima Rafi and Arif Khan and Boshuai Ye},
booktitle = {FSE},
year = {2025},
doi = {10.1145/3696630.3731624}
}