Security Chaos Engineering for Cloud Native Infrastructure

Explore the innovative concept of Security Chaos Engineering (SCE) in cloud-native environments through this insightful conference talk. Learn how SCE applies chaos engineering principles to cybersecurity, enabling proactive security mechanisms for complex and emerging cloud-native infrastructure. Discover the benefits of using instant empirical feedback loops to verify security tools and properties, identify blind spots, and enhance overall security and resilience. Gain valuable insights into compliance monitoring, incident response, and threat detection as the speaker demonstrates practical SCE experiments, including public bucket vulnerabilities and ransomware simulations. Understand the importance of risk-driven fault injection and its execution, monitoring, and analysis in strengthening cloud-native security postures.

Intro
Security Chaos Engineering
Cloud Native Infrastructure is Complex
Increasing Cloud Attacks
Cloud Native Security Platforms
Cloud Native Attack Surface
Public Bucket Experiment
Bucket Ransomware Experimente
Advanced Ransome Experiment
Risk Driven Fault Injection - Execute
Risk Driven Fault Injection - Monitor
Risk Driven Fault Injection - Analyze