ChaoSlingr: Introducing Security-Based Chaos Testing

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

SESSION ID:
#RSAC
Aaron Rinehart
ChaoSlingr: Introducing Security-Based
Chaos Testing
CSV-W04
Chief Enterprise Security Ar...

#RSAC
Security + Chaos = Security Experimentation
2

#RSAC
About Aaron
3

#RSAC
About Grayson
4

#RSAC
Overview UnitedHealth Group
5

#RSAC
Outline
6

#RSAC
A Tool to Build or a Weapon to Destroy?
7

#RSAC
The Reality is…...
8

#RSAC
Failure is Necessary
9

#RSAC
10

#RSAC
Revisiting the Problem
11

#RSAC
Where do Security Failures come from?
12

#RSAC
The Gap b/t Modern Software & Security
13

#RSAC
Distributed Systems Are Tricky
14

#RSAC
Distributed Systems Are Tricky
15

#RSAC
Don't Drift into the Unknown
16

#RSAC
Ask Better Questions
17

#RSAC
Ask yourself……...
18

#RSAC
Ask yourself……...
19

#RSAC
Ask yourself……...
20

#RSAC
So in fact do we identify Security Failures?
21

#RSAC
Its toooooo late…..
22

#RSAC
It worked for Rebel Alliance but not here
23

#RSAC
Build Confidence through Instrumentation
24

#RSAC
What is Chaos Engineering?
25

#RSAC
A brief history of Chaos
26

SecurityExperimentationSecurityExperimentation
THENEWPLAYBOOK

#RSAC
Do Less, Better
28

#RSAC
The New Playbook
29

#RSAC
What's the Difference?
30
• Testing is assessment or validation of an expected
outcome
• Experimentation seeks to de...

#RSAC
Security Experimentation: A Definition
31

#RSAC
32
• Drive out failure.
• Observe failure.
• Learn from failure.
• Build resilient systems.
Be Objective & Use Failu...

#RSAC
Build a Learning Culture
33

#RSAC
Why do it?
34
• Build Confidence in Security Measures
• Strengthen Incident Management
• Measure Incident Response R...

#RSAC
GameDays + Post Mortem
35

#RSAC
Value of Game Day Exercises
36
• Provides Objective Measurement for Security Incident Response
• Identify Control Co...

#RSAC
Open Source Security Experimentation Tool
37

#RSAC
So, eh, what is it exactly
38

#RSAC
FYI ChaoSlingr is on Github (FREE!)
39

#RSAC
An Example Experiment Using ChaoSlingr
40

#RSAC
An Example Security Experiment
41

#RSAC
How the experiment works
42

#RSAC
Summary: Takeaways
43
• Security Problems in
Distributed Systems
• Chaos Engineering
• Security Experimentation
• Ch...

#RSAC
Apply What You Have Learned Today
44
• Next week you should:
• Start asking yourself the Right Questions
• Go to Git...

#RSAC
The New Normal: Continuous Evolution
45

#RSAC
Questions
@aaronrinehart
@BrewerSecurity
Hit us with some questions

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1042022 views
Storytelling For The Web: Integrate... by Chiara Aliotta 954721 views
Artificial Intelligence, Data and C... by OECD Directorate ... 880306 views
How to Leverage AI to Boost Employe... by SocialHRCamp 370586 views
2024 State of Marketing Report – by... by Marius Sescu 210442 views
Everything You Need To Know About C... by Expeed Software 229923 views

View on Slideshare

1 of 46 Ad

View on Slideshare

1 of 46 Ad