Security Chaos Engineering: Sustaining Resilience in Software and Systems (1st edition.)

Cybersecurity is broken. Year after year, attackers remain unchallenged and undeterred, while engineering teams feel pressure to design, build, and operate "secure" systems. Attacks can't be prevented, mental models of systems are incomplete, and our digital world constantly evolves. How can we verify that our systems behave the way we expect? What can we do to improve our systems' resilience?

In this comprehensive guide, authors Kelly Shortridge and Aaron Rinehart help you navigate the challenges of sustaining resilience in complex software systems by using the principles and practices of security chaos engineering. By preparing for adverse events, you can ensure they don't disrupt your ability to innovate, move quickly, and achieve your engineering and business goals.

• Learn how to design a modern security program
• Make informed decisions at each phase of software delivery to nurture resilience to attack
• Understand the complex systems dynamics upon which security outcomes depend
• Navigate technical and organizational trade-offs that distort defensive decision-making
• Explore chaos experimentation to verify critical assumptions about systems security
• Learn how major enterprises leverage security chaos engineering