Security Chaos Engr.: Fix Things and Make Friends
summary
Argues that running controlled security chaos experiments proves whether defenses actually work by mapping atomic tests to MITRE ATT&CK, using harmless mimics of real malware, and checking that a download or execution produces expect 2–4 telemetry signals through the stack. Shows that a payload can be blocked at an endpoint yet traverse earlier layers, so teams should map tests to MITRE ATT&CK, build a baseline, automate drift detection, and report measurable outcomes to operations and product owners.
AI-written summary · about
chapters (23)
- 0:00intro
- 0:22preamble
- 0:51doom loops are scary and impede the decision making process
- 2:56is security getting better, or better at shifting responsibility?
- 5:39with all the hot fresh defensive tools available, making it all work together is still difficult
- 8:23security incidents are poor methods to measure detection because the bas thing already happened
- 9:02hope is not a valid strategy
- 9:26sce isn't creating chaos, it helps manage the chaos around us
- 10:39failure is normal, expected, and should be embraced
- 11:31identifying what you care about is crucial to sucess
- 12:54the anatomy of an experiment
- 13:46building your experiments
- 16:09experiments in practice
- 16:22proving outcomes
- 16:42getting started is the hardest part
- 17:23measuring the reliability of defenses
- 18:19experiments in practice
- 19:43security chaos engineering shouldn't be limited to engineering
- 21:21we need you all
- 21:58makign other programs better helps you make friends
- 23:06security chaos engineering helps you ask better questions
- 23:41making things palatable for others will make your life easier
- 24:57you can do it!
related talks
40mNavigating the Unknowable: Resilience through Security Chaos Engineering
31mNavigating the Unknowable: Resilience through Security Chaos Engineering
28mUnknown Unknowns + Chaos = Security Chaos Engineering
40mA Primer: Getting Started with MITRE Shield
34mDefining Steady States and Developing Hypotheses
43mCyber Chaos Engineering
40mSecurity & Chaos Engineering: Resilient Distributed Systems
30mShall We Play a Game?