Navigating the Unknowable: Resilience through Security Chaos Engineering
summary
Claims that Security Chaos Engineering uncovers real gaps by running live experiments and collecting empirical data. Verica’s open source tool ChaoSlingr injects a ports layer misconfiguration and finds only about 60% detection by firewalls, reveals config management often corrects drift, and shows SOCs miss incidents without added metadata. Cardinal Health builds a five‑step Continuous Verification and Validation process that automates control checks, dashboards failures, files risks, and successfully prevents accidental breaches before attackers exploit them.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:27System Engineering is Messy
- 2:20Old School Approach
- 11:55Security Chaos Engineering
- 12:21Security Control Validation
- 13:31Multidisciplinary Team
- 15:04Three Key Goals
- 16:42Continuous Verification and Validation
- 18:39Chaos Slinger
- 22:56Official OReilly Report
- 23:56Mindset Barrier
- 26:20Multiple Tests
- 28:36Conclusion
- 29:51Outro
related talks
40mNavigating the Unknowable: Resilience through Security Chaos Engineering
43mCyber Chaos Engineering
40mSecurity & Chaos Engineering: Resilient Distributed Systems
28mBuilding Safety, Security and Resilience through Chaos
28mUnknown Unknowns + Chaos = Security Chaos Engineering
23mStandard Classification: Security Chaos Engineering - Turning the Tide in ...
24mSecurity Chaos Engineering for Fun and Profit
47mSecurity Pre-Cognition