Security Chaos Engineering

Attackers keep gaining ground, facing little resistance and rarely paying a price, while the engineers expected to build and run "secure" software work under constant pressure. The challenge rests on two realities: no system can be guaranteed to avoid failure, and the picture teams hold of their own systems is always partial, all while the digital landscape keeps changing.

Kelly Shortridge and Aaron Rinehart ask how teams can confirm that their systems behave as expected and how they can make those systems more resilient. Their answer is security chaos engineering, the principles and practices for sustaining resilience in complex software environments. This thorough guide is written for those who design, build, and operate those environments.

Anticipating adverse events keeps them from disrupting an organization's capacity to innovate, act quickly, and reach its engineering and business goals.