Research Archive

Journal Article Open Access Software Engineering

DevOps Adoption in Small and Medium Enterprises: Tailoring Practices, Toolchains, and Organizational Models for Resource-Constrained Engineering Teams

The DevOps literature is disproportionately dominated by case evidence from large technology companies — Google, Netflix, Amazon — whose organizational scale, engineering budgets, and talent pools are unrepresentative of the vast majority of software-producing organizations globally. This paper redresses this imbalance through a focused empirical study of DevOps adoption in small and medium enterprises (SMEs), defined as organizations with fewer than 250 employees. We conducted a longitudinal study across 19 SMEs over 24 months, combining quarterly interviews, pipeline telemetry analysis, and a dedicated SME DevOps survey instrument (n=488 respondents from 141 SMEs). Our findings reveal that SMEs face a distinct set of adoption challenges: role conflation (developers as operators as security engineers), toolchain cost sensitivity, absence of dedicated platform teams, and regulatory naivety. We develop the SME DevOps Adaptation Framework (SDAF), which tailors the DORA research model`s four key metrics and associated practices to SME constraints, proposing lightweight toolchain stacks, role-sharing governance models, and incremental adoption roadmaps. SMEs that adopted SDAF practices over 12 months achieved deployment frequency improvements of 340% and MTTR reductions of 52% from baseline, demonstrating that DevOps value is highly accessible to smaller organizations when appropriately adapted.

Obinna Ikechukwu, Helena Svensson, Ryota Hayashi, Lucia Barbosa· Apr 2019· 287 citations

Journal Article Open Access Augmented and Virtual Reality

Reducing Cybersickness in Virtual Reality Through Adaptive Field-of-View Restriction, Frame Rate Stabilization, and Predictive Head Motion Compensation

Cybersickness -- the constellation of nausea, disorientation, and discomfort experienced by a significant proportion of users during VR immersion -- remains the primary barrier to widespread consumer VR adoption, with prevalence estimates ranging from 20 to 80 percent depending on content type, session duration, and individual susceptibility. This paper presents a comprehensive engineering study of cybersickness mitigation through rendering pipeline interventions, evaluating three techniques -- adaptive field-of-view (FOV) restriction, frame rate stabilization through Asynchronous Spacewarp (ASW) and ATW mechanisms, and predictive head motion compensation using IMU-driven pose prediction -- individually and in combination. A controlled user study (n=168 participants) employs the Simulator Sickness Questionnaire (SSQ) and physiological measures (galvanic skin response, heart rate variability) under three VR content categories: locomotion-heavy, rotation-heavy, and stationary content. Combined FOV restriction and predictive motion compensation reduces SSQ total severity scores by 51 percent for locomotion-heavy content and 43 percent for rotation-heavy content, with no statistically significant reduction in presence scores. Frame rate stabilization contributes most significantly for users with high flicker sensitivity (SSQ reduction of 34 percent in the high-sensitivity subgroup). We introduce the Cybersickness Mitigation Effectiveness Index (CMEI) and provide an adaptive rendering pipeline reference architecture for VR headset manufacturers and game engine developers.

Chiamaka Eze, Erik Magnusson, Akira Nakamura, Sara Rodrigues· Apr 2019· 356 citations

Journal Article Open Access Human-Computer Interaction

Conversational Agents in Enterprise Software Workflows: Usability, Trust Calibration, and Productivity Impact of Chatbot Integration in Knowledge Work Environments

Enterprise chatbot deployments have proliferated across knowledge work environments, yet rigorous evaluation of their usability, trust calibration accuracy, and measurable productivity impact remains sparse relative to the volume of deployment activity. This paper presents a mixed-methods study of enterprise conversational agent integration across five organizations in legal, financial, and healthcare knowledge work domains, combining a 12-week longitudinal experiment (n=214 participants) with qualitative interviews and log analysis of 340,000 conversational interactions. We evaluate chatbot usability using the Conversational Agent Usability Scale (CAUS), which we develop and validate as part of this work across 11 usability dimensions including intent recognition accuracy, response coherence, context retention, and error recovery behavior. The longitudinal experiment finds that well-designed chatbot integration reduces time spent on information retrieval tasks by 31% and on routine document generation by 44%, but increases task completion time by 18% for complex multi-step reasoning tasks where chatbot error rates are highest. A central finding is trust miscalibration: 67% of users exhibit overtrust in chatbot outputs for factual queries within their domain of expertise, leading to unchecked propagation of erroneous information. We propose a Trust Calibration Interface Design framework comprising four evidence-presentation patterns that reduce overtrust incidence by 48% in a controlled follow-up study.

Adanna Obi, Marcus Eriksson, Yuko Tanaka, Sara Fonseca· Jan 2019· 367 citations

Journal Article Open Access Cloud Computing

GitOps: Declarative Infrastructure Management and Its Impact on Deployment Reliability and Audit Compliance in Cloud Environments

GitOps has emerged as a deployment methodology that uses Git repositories as the single source of truth for both application configuration and infrastructure state, enabling automated reconciliation between desired and actual system state. Despite growing practitioner adoption, rigorous empirical evaluation of GitOps impact on operational outcomes remains limited. This paper presents a mixed-methods study combining a controlled experiment with a practitioner survey (n=412) to evaluate GitOps adoption outcomes across reliability, compliance, and team productivity dimensions. In our controlled experiment, teams using GitOps-based workflows with Flux CD and ArgoCD achieved a 52% reduction in failed deployments and a 44% improvement in audit log completeness relative to script-based deployment teams. Survey findings indicate that Git-based change control satisfies regulatory audit requirements more completely in 71% of cases compared to ad-hoc deployment scripts. We also identify three anti-patterns — Secret Sprawl, Repo Monolithism, and Drift Blindness — that undermine GitOps implementations and propose mitigation strategies for each. This work provides both an empirical foundation for GitOps adoption decisions and actionable engineering guidance for practitioners.

Alexandre Dubois, Chinyere Uzoho, Vikas Sharma, Emma Thorvaldsen· Jan 2019· 467 citations

Journal Article Subscription Data Engineering

Real-Time Stream Processing Architectures for High-Frequency Financial Data: Latency-Throughput Trade-offs in Apache Flink, Apache Spark Streaming, and Apache Storm

High-frequency financial data processing -- encompassing market tick data, order book events, and payment transaction streams -- imposes latency and throughput requirements at the boundary of what commodity stream processing frameworks can sustain, making architectural choices consequential for both business outcomes and infrastructure cost. This paper presents a rigorous comparative evaluation of three leading distributed stream processing frameworks -- Apache Flink, Apache Spark Structured Streaming, and Apache Storm -- under financial workload conditions. We design a benchmark suite comprising three representative financial workloads: sub-millisecond tick data aggregation, real-time fraud detection over payment event streams, and order book reconstruction with market microstructure analytics. Benchmarks are executed on standardized 24-node clusters across AWS, simulating peak trading session loads of up to 8 million events per second. Apache Flink achieves the lowest median end-to-end latency at 3.2ms for tick aggregation, compared to 12.1ms for Spark Structured Streaming and 8.7ms for Storm. Spark achieves the highest sustained throughput at 11.2M events/second before degradation. We introduce the Stream Processing Fitness Score (SPFS) that aggregates latency percentiles, throughput ceiling, fault recovery time, and operational complexity. We also characterize watermarking strategies, state backend selection, and checkpointing frequency as the three most impactful configuration decisions affecting latency under production conditions.

Chidi Okonkwo, Ingrid Holm, Hiroshi Matsuda, Leila Benali· Nov 2018· 356 citations

Journal Article Subscription Software Engineering

Observability-Driven Development: Rethinking Monitoring Strategies in Distributed Microservices Architectures Under DevOps

As software systems migrate from monolithic architectures to distributed microservices, traditional monitoring approaches centered on threshold-based alerting have become inadequate for maintaining system reliability. This paper introduces and formalizes the concept of Observability-Driven Development (ODD), a methodology that embeds observability instrumentation — comprising structured logging, distributed tracing, and multi-dimensional metrics — as a first-class engineering concern throughout the software development lifecycle. We present a longitudinal study of four organizations that adopted ODD practices over 18 months, measuring impacts on mean time to detect (MTTD), mean time to resolve (MTTR), and on-call engineer cognitive load. ODD adoption reduced MTTD by an average of 74% and MTTR by 58% compared to pre-adoption baselines. We further introduce the Observability Maturity Continuum (OMC), a five-level model characterizing organizations progression from ad-hoc logging to predictive anomaly detection. Practical implementation guidance using OpenTelemetry, Prometheus, and Jaeger is provided. This work reframes observability not as an operational afterthought but as an architectural discipline with measurable business consequences.

Sofia Reyes-Alvarado, Tobias Winkler, Olumide Adeyemi, Hannah Park· Nov 2018· 398 citations

Journal Article Open Access Bioinformatics

Deep Learning Architectures for Genomic Variant Pathogenicity Prediction: Evaluation of CNN, LSTM, and Attention-Based Models on ClinVar and gnomAD Population Databases

The clinical interpretation of genomic variants of uncertain significance (VUS) is one of the most pressing bottlenecks in genomic medicine, with over 60 percent of variants identified in clinical sequencing classified as uncertain significance in the ClinVar database. Machine learning approaches to variant pathogenicity prediction offer the potential to reduce this uncertainty, but the relative merits of different deep learning architectures for this task -- and the generalizability of published models across population diversity -- remain incompletely understood. This paper presents a systematic evaluation of four deep learning architectures for variant pathogenicity prediction: one-dimensional CNN with nucleotide sequence context, bidirectional LSTM with epigenomic feature integration, transformer with self-attention over genomic windows, and a novel hybrid CNN-Transformer architecture we term VariantNet. Evaluation uses a benchmark dataset of 48,000 pathogenic and benign variants curated from ClinVar with gnomAD population frequency annotations, stratified by variant type (SNV, indel, splice-site) and ancestry group. VariantNet achieves the highest AUC (0.943) on the combined benchmark, with particularly strong performance on splice-site variants (AUC 0.961) where sequential context is most informative. A critical finding is significant performance degradation for all models on African ancestry variants (mean AUC drop of 0.041) due to underrepresentation in training data, which we address through ancestry-stratified training with transfer learning. We release VariantNet weights, training code, and the curated benchmark dataset as open-source resources for the bioinformatics community.

Adaeze Obi, Frida Magnusson, Hiromi Yamamoto, Yasmin Hassan· Aug 2018· 467 citations

Journal Article Subscription Software Architecture

Microservices Decomposition Strategies and Their Operational Consequences in DevOps Environments: Domain-Driven Design, Bounded Contexts, and Service Granularity

The decision to decompose a system into microservices is one of the most consequential architectural choices a DevOps organization makes, yet the criteria governing appropriate service granularity remain poorly defined in both academic and practitioner literature. This paper examines microservices decomposition strategies and their downstream operational consequences for DevOps pipeline complexity, observability overhead, inter-service coordination cost, and deployment independence. We conduct a retrospective analysis of decomposition decisions at six organizations over three-year time horizons, supplemented by a survey of 267 software architects and DevOps engineers. Domain-Driven Design (DDD) bounded contexts are used as the theoretical lens, and we evaluate how closely organizations` decomposition decisions align with DDD principles and how alignment correlates with operational outcomes. Organizations with DDD-aligned decompositions report 47% lower inter-service incident rates and 38% fewer deployment pipeline interdependencies compared to organizations using ad-hoc decomposition heuristics. We identify five granularity anti-patterns — Nano-service Proliferation, Shared Database Coupling, Chatty Service Mesh, God Service Regression, and Temporal Coupling Latency — and provide detection heuristics and refactoring guidance for each. The paper provides a practical decomposition decision framework integrating DDD, operational complexity, and DevOps pipeline cost dimensions.

Emeka Nwosu, Annika Bergman, Takashi Suzuki, Ana Cristina Pires· Aug 2018· 362 citations

Journal Article Open Access Cybersecurity

Integrating Security into DevOps: Empirical Assessment of DevSecOps Adoption Barriers and Enablers in Financial Services Organizations

The integration of security practices into DevOps pipelines — commonly termed DevSecOps or "shifting security left" — has attracted significant practitioner interest, yet academic understanding of the organizational dynamics that enable or impede this integration remains nascent. This paper reports findings from a grounded theory study conducted across nine financial services organizations undergoing DevSecOps transformation. Data was collected through 64 interviews with security engineers, DevOps leads, compliance officers, and CISOs, supplemented by documentary analysis of security policy artifacts and incident logs spanning 24 months. Our analysis yielded a substantive theory of DevSecOps adoption organized around three core categories: Security-Development Trust Formation, Toolchain Convergence, and Regulatory Constraint Navigation. We find that the predominant barrier to DevSecOps adoption is not technical but relational: the adversarial framing historically embedded between security and development teams. Organizations that successfully dissolve this framing through shared ownership models and joint blameless post-mortems exhibit twice the rate of automated security gate adoption. The paper contributes an empirically grounded theoretical model and a set of practitioner interventions for accelerating DevSecOps adoption in regulated industries.

Nadia Okonkwo, Lars Bergström, Mei-Ling Chen, Arjun Patel· May 2018· 521 citations