DevOps and the Healthcare Giant
summary
United Health Group describes applying security chaos engineering to move preventative controls into automated CI/CD checks, running tools like the Gauntlt Rugged Attack Framework as sidecar Docker tests in Jenkins/Travis so deployments stay non-blocking. The program releases its first open-source tool in seven weeks, reports about 10,000 deploys in two-plus years, cites 47% malicious versus 53% human-error breach causes, and replaces slow pen tests with adversary-style, pipeline-driven validation and measurable feedback.
AI-written summary · about
chapters (3)
- 0:00DEEP DIVE INTO DEVOPS
- 11:08How do you know your security controls are working as intended?
- 17:22Chaos Defined "Chaos Engineering is the discipline of experimenting on a distributed system in order to build confidence in the system's ability to withstand turbulent conditions"
related talks
39mThe Path Of DevOps Enlightenment For InfoSec
59mDevOps for the Discouraged
53mGround Truths of a Rugged DevOps Practitioner
43mBuilding a Secure DevOps Pipeline
36mDevOps Security - Is It Really So Difficult?
44mDevSecOps: Balancing Agility, Security & Stability in a Continuous Software Business
06mLet’s Challenge Common DevOps Assumptions Health Tech Edition
37mA Secure Continuous Delivery Pipeline