Death to CIA! Long live DIE! How the DIE Triad Helps Us Achieve Resiliency
summary
Argues that prioritizing the DIE triad (Distributed, Immutable, Ephemeral) instead of CIA makes attacks irrelevant rather than merely detectable, and shows concrete measurements and tools: a Project N95 inventory in JupiterOne with ~20,000 assets and 24 manually flagged critical items, uptime and server-age metrics, SSH/root access checks, code last-update timestamps, and mappings to Firecracker, immudb, in-toto/CodeNotary, CNF projects and AWS services. Fits the pets-vs-cattle analogy into a power-law curve with beta ≈1.4, notes target beta <2.9 for fault tolerance and recommends tracking beta over months.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:52New Paradigms for the Next Era of Security
- 7:52The DIE Triad Changes Roles and Responsibilities
- 10:10Measuring Resiliency: Pets vs Cattle Curve
- 12:12Benchmarking Resiliency
- 16:19Other ways to measure D-I-E: Code Update Timestamps "The security of our products doesn't depend on the secrecy of our source code" - Apple
- 22:22The distribution Responsibility Model and with cloud native maturity
- 24:46Applying DIE to Data: Privacy Enhancing Technologies
- 27:45Old and New Design Patterns: Backup vs iCloud
- 29:10Summary The next era in IT and Security will manifest more irreversible attacks that challenge and undermine our ability to RECOVER
related talks
28mNew Paradigms for the Next Era of Security
31mYour Infrastructure Needs to D.I.E.
02h 11mCISO Track Panel
20mCalcifying Crisis Readiness
12mMulti-Layer Defense for Scalable Threat Mitigation
28mThe CISO is Dead, Now What ?
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
45mFrom Attacks to Action: An Open Community Model to Drive Defensive Choices