Security Chaos Engineering

by Aaron Rinehart, Kelly Shortridge

Information security is broken. Users and customers continually entrust companies with vital information, and companies continually fail to maintain that trust. Year after year, the same attacks are successful. But the impact has become greater. Those who build, operate, and defend systems need to acknowledge that failure will happen. People will click on the wrong thing. The security implications of code changes won't be clear. Things will break.

In this report, Aaron Rinehart and Kelly Shortridge explain how engineers can navigate security in this new frontier. You'll learn the guiding principles of security chaos engineering for harnessing experimentation and failure as tools for empowerment--and you'll understand how to transform security from a gatekeeper to a valued advisor. Case studies from Capital One and Cardinal Health are included.

92 pages, ebook

Published December 1, 2020

Reviews

[Paul Salmon]

Great book linking Chaos engineering with security with some good examples.

Lots of great references / quotes
- Advantages of faster deployment frequency - Accelerate State of DevOps Report 2019
- Security Theater based on Risk Management Theater - Jez Humble - 2013
- #YOLOSec and #FOMOSec
- Applied Security: test your security before someone else (an adversary) does.

Opens new opportunities for many organizations around security.

[Sean Keery · Rating 5 out of 5]

Aaron brings the practice of controlled experimentation to the security world. An excellent extension to the general Chaos Community. Can't wait to see what he does next with continuous verification.

[Bowen Denning · Rating 4 out of 5]

Some great ideas and concepts that are practical and can realistically be applied in most organisations. Can't argue with the price of the book either (free).

[Bill Rodriguez · Rating 5 out of 5]

Great read.

[Mario Reijnen · Rating 5 out of 5]

Perfect meeting between chaos and security