Security Chaos Engineering: Developing Resilience and Safety at Speed and Scale

Information security is broken, and engineering teams feel mounting pressure to design, build, and operate secure systems. This guide helps you navigate the challenges of securing complex software systems using security chaos engineering principles and practices to cultivate resilience across the software delivery lifecycle.

Format: Paperback / softback
Length: 300 pages
Publication date: 30 April 2023
Publisher: O'Reilly Media

Information security is in a state of crisis, with attackers consistently finding ways to evade defenses and exploit vulnerabilities. Engineering teams are under immense pressure to design, build, and operate secure systems, but the task is daunting due to the complexity of modern software systems and the ever-evolving threat landscape. Despite the best efforts of security professionals, attacks continue to occur, and the consequences can be severe.

One of the main challenges in securing complex software systems is the incomplete understanding of how they behave. Mental models of systems are often based on assumptions and biases, which can lead to gaps in security. Additionally, the digital world is constantly evolving, making it difficult to predict and prevent attacks.

To address these challenges, authors Kelly Shortridge and Aaron Rinehart have written a pragmatic and comprehensive guide titled "Securing Complex Software Systems: A Chaos Engineering Approach." In this book, they introduce the principles and practices of security chaos engineering, which aim to cultivate resilience across the software delivery lifecycle.

The authors begin by discussing the importance of designing a modern security program that is aligned to business and engineering goals. They emphasize the need to make informed decisions at each phase of software delivery to nurture resilience to attack. They also explore the complex systems dynamics upon which security outcomes depend, and how technical and organizational trade-offs can distort defensive decision-making.

One of the key tools introduced in the book is chaos experimentation, which is used to verify critical assumptions about systems security and the ROI of security investments. The authors provide practical guidance on how to conduct chaos experiments, including how to design experiments, analyze the results, and make informed decisions based on the findings.

Throughout the book, the authors share real-world examples from major enterprises that have successfully leveraged security chaos engineering. They discuss the challenges they faced, the strategies they implemented, and the benefits they achieved. These examples provide valuable insights and best practices for securing complex software systems.

In conclusion, "Securing Complex Software Systems: A Chaos Engineering Approach" is a must-read for anyone involved in software security. The book provides a comprehensive and practical guide to cultivating resilience across the software delivery lifecycle, and offers valuable insights and best practices for securing complex software systems. By embracing the principles and practices of security chaos engineering, engineering teams can better protect their systems and ensure the continued success of their organizations.

Weight: 748g
Dimension: 234 x 178 x 25 (mm)
ISBN-13: 9781098113827