From the course: DevSecOps: Tips for Success

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Add in chaos for better security results

Add in chaos for better security results

From the course: DevSecOps: Tips for Success

Start my 1-month free trial

Add in chaos for better security results

“

- [Instructor] The practice of Chaos Engineering works by injecting failure modes, or adverse conditions for software, and is a proven method for increasing the reliability and stability of the overall system. You might ask, "Why would I add chaos to my system?" Or, "How will that make me more secure?" Well, the same results we are seeing for stability and performance, we are also seeing for security. The practice is called Security Chaos Engineering, and it is still early in adoption, but I am seeing the practice grow, and it has a really exciting future in DevSecOps. Let's start with what Chaos Engineering is before we get to Security Chaos Engineering. Chaos Engineering is empirical rather than formal. We don't use models to understand what the system should do. We run experiments to learn about what it does. The goal of Chaos Engineering is captured with this quote: To specifically address the uncertainty of distributed…

Contents