Security Chaos Engineering - Winning at Security “Whack-a-Mole” • Aaron Rinehart • GOTO 2021

This presentation was recorded at GOTOpia Chaos Engineering Day 2021. #GOTOcon #GOTOpia http://gotopia.eu Aaron Rinehart - Co-Founder & CTO at Verica ABSTRACT Hope isn’t a strategy. Likewise, perfection isn’t a plan. The systems we are responsible for are failing as a normal function of how they operate, whether we like it or not, whether we see it or not. Security chaos engineering is about increasing confidence that our security mechanisms are effective at performing under the conditions for which we designed them. Through continuous security experimentation, we become better prepared as an organization and reduce the likelihood of being caught off guard by unforeseen disruptions. These practices better prepare us (as professionals), our teams, and the organizations we represent to be effective and resilient when faced with security unknowns. In this session Aaron Rinehart, co-author of the O'Reilly Report on Security Chaos Engineering, will share how you can get started in applying the Security based Chaos Engineering to create highly secure, performant, and resilient distributed systems [...] TIMECODES 00:00 Intro 01:13 The security "Whack-a-Mole" problem 10:35 Security chaos engineering (SCE) 11:25 Use cases 13:17 Experiment framework 13:59 Example SCE experiment 17:40 Outro Read the full abstract here: https://gotopia.us/chaos-day-2021/sessions/1733/winning-at-security-whack-a-mole-with-security-chaos-engineering-security-and-chaos-engineering-a-novel-approach-to-crafting-secure-and-resilient-distributed-systems RECOMMENDED BOOKS Aaron Rinehart • Security Chaos Engineering • https://www.verica.io/sce-book Nora Jones & Casey Rosenthal • Chaos Engineering • https://www.verica.io/book Nora Jones & Casey Rosenthal • Chaos Engineering • https://amzn.to/3hUmuAH Mikolaj Pawlikowski • Chaos Engineering • https://amzn.to/2SQ5Olf Russ Miles • Learning Chaos Engineering • https://amzn.to/3hCiUe8 Murphy, Beyer, Jones & Petoff • Site Reliability Engineering • https://amzn.to/2Vg6Mbr https://twitter.com/GOTOcon https://www.linkedin.com/company/goto- https://www.facebook.com/GOTOConferences #ChaosEngineering #SecurityChaosEngineering #SCE #CyberSecurity #SRE #SoftwareReliabilityEngineering #Programming #GameDay #ChaoSlingr Looking for a unique learning experience? Attend the next GOTO conference near you! Get your ticket at https://gotopia.tech SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily. https://www.youtube.com/user/GotoConferences/?sub_confirmation=1