Skip to content

Commit

Permalink
Add Security Chaos Engineering to the main Glossary - english version (
Browse files Browse the repository at this point in the history
…#357)

* Add Security Chaos Engineering lang-en

* added first draft of chaos engineering

* security chaos engineering concept version 2

* Links + edits

* Some edits

* removed Chaos Engineering concept

* fixed a sentence

* fix links

* Fixed capitalization issue

* adding the missing words

Co-authored-by: Francesco Sbaraglia <fsbaraglia@networkadmin.it>
Co-authored-by: Catherine Paganini <74001907+CathPag@users.noreply.github.com>
  • Loading branch information
3 people authored Mar 6, 2022
1 parent 8741ae6 commit ab7a3b4
Show file tree
Hide file tree
Showing 2 changed files with 19 additions and 0 deletions.
16 changes: 16 additions & 0 deletions content/en/security_chaos_engineering.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
title: Security Chaos Engineering
status: Completed
category: concept
---

## What it is
Security Chaos Engineering or SCE is a discipline based on [Chaos Engineering](https://glossary.cncf.io/chaos_engineering/). SCE performs proactive security experimentation on a distributed system to build confidence in the system's capability to withstand turbulent and malicious conditions. Security chaos engineers use scientific method loops to achieve this, including steady-state, hypothesis, continuous verification, lesson learned, and mitigation implementation.

## Problem it addresses
The main priority for [site reliability engineers](https://glossary.cncf.io/site_reliability_engineering/) (SREs) and cyber security engineers is to restore service as fast as possible with the goal of achieving zero downtime and minimizing business impact. SREs and cyber security engineers deal both with pre-failure and post-failure incidents situations. Most security issues are challenging to discover and patch quickly, impacting application or system functionality. Additionally, security incidents are usually tricky to uncover during the development phase.

## How it helps
Security Chaos Engineering is built around [observability](https://glossary.cncf.io/observability/) and cyber resiliency practices. It aims to uncover the "unknown unknowns" and build confidence in the system, increasing cyber resiliency and improving observability.

Engineering teams will progressively improve the understanding for security concerns within complex infrastructure, platforms, and distributed systems. SCE improves the cyber resiliency of the entire product, uncovers hidden security issues, exposes the classical blind spots, and prepares teams for critical edge cases. This approach helps SREs, [DevOps](https://glossary.cncf.io/devops/) and [DevSecOps](https://glossary.cncf.io/devsecops/) engineers create confidence in the system, increase cyber resiliency and improve observability.
3 changes: 3 additions & 0 deletions wordlist.txt
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,7 @@ cri
critic
crm
customizable
cyber
daniel
datacenter
datadog
Expand Down Expand Up @@ -153,6 +154,7 @@ saneheaders
sbates
scalability
scalable
sce
seokho
serverless
sexualized
Expand All @@ -161,6 +163,7 @@ smartsymbols
snippets
socio
sre
sres
stateful
striphtml
subnets
Expand Down

0 comments on commit ab7a3b4

Please sign in to comment.