CCSK

 View Only
  • 1.  Chaos Engineering

    Posted Nov 24, 2020 10:37:00 AM

    Hello!

    In the Cloud Incident Response Framework - A Quick Guide and in Module 2 Unit 7 of the CCSK training they mention chaos engineering as a technique used in production. I was wondering if anyone could provide a little more insight about chaos engineering. Specifically, is it very commonly used? Are there any downsides to using it? Or unfortunate mishaps that have happened in the past while chaos engineering?

    Thanks :)



    ------------------------------
    Jenna Morrison
    Intern
    Cloud Security Alliance
    ------------------------------


  • 2.  RE: Chaos Engineering
    Best Answer

    CSA Instructor
    Posted Nov 25, 2020 11:30:00 AM
    It is pretty advanced stuff, and only applicable to high quality service organisations.
    https://en.wikipedia.org/wiki/Chaos_engineering has great detail on this.

    Chaos engineering was pioneered by Netflix, when they started developing cloud based applications.
    Their chaos monkey randomly kills servers and other things in production to test the resilience of the architecture.

    That takes guts and confidence ....

    ------------------------------
    Peter HJ van Eijk
    CCSK & CCAK trainer
    https://www.clubcloudcomputing.com/
    ------------------------------



  • 3.  RE: Chaos Engineering

    Posted Nov 30, 2020 09:23:00 AM
    Thanks for you reply! I'll take a look at that article :)

    ------------------------------
    Jenna Morrison
    Intern
    Cloud Security Alliance
    ------------------------------



  • 4.  RE: Chaos Engineering

    Posted Nov 25, 2020 11:58:00 PM

      Hello Jenna,
    Went through the "The CCSK Foundation Student handbook" version 4.0 released March 2018  contains 6 modules . Module 6 titled Cloud Security Operations includes a section on Incident response. Unable to find this item "Chaos engineering" mentioned.

    Also went through "Security Guidance for critical areas of focus in Cloud Computing v4.0 " domain 9 titled Incident response and unable to find "Chaos Engineering" mentioned. 

    Perhaps you can send me a copy of the CCSK training module and will go through and respond.

    Also the link for the Cloud Incident Response Framework- A Quick Guide is not reachable.

    Please let me know if you need any clarifications. 

    Brgds
    Ram



    My primary purpose in life is that of learning,unlearning,relearning,creating and sharing
    Individually, we are one drop.Together, we are an ocean.
    Ryunosuke Satoro





  • 5.  RE: Chaos Engineering

    Posted Nov 26, 2020 12:03:00 AM





  • 6.  RE: Chaos Engineering

    Posted Nov 30, 2020 09:32:00 AM
    Edited by Jenna Morrison Nov 30, 2020 09:34:42 AM
    Oh I must've copied a bad link, sorry about that!
    https://cloudsecurityalliance.org/artifacts/cloud-incident-response-framework-a-quick-guide/ 

    As for the CCSK training it was briefly mentioned by the instructor in the section "Cover the Entire Stack."

    Also thanks for sharing that article Nirenj George, I'll take a look at it :)

    ------------------------------
    Jenna Morrison
    Intern
    Cloud Security Alliance
    ------------------------------



  • 7.  RE: Chaos Engineering

    Posted Dec 02, 2020 10:44:00 AM

    Jenna,

    Look at https://en.wikipedia.org/wiki/Chaos_engineering and/or google Chaos Monkey.

    15 years ago I did a tour of the Phoenix data centre for Stratus (fault tolerant computing) the director showing me around, unplugged a live and running processor card (a chaos monkey) supporting the US 911 system - and then said to their ops centre "the alarm you just got on xxxx processor card was me!". 

    As Peter said - takes great confidence in your engineering to be able to do that.

    Paul



    ------------------------------
    Paul Simmonds
    CSA UK Chapter
    ------------------------------



  • 8.  RE: Chaos Engineering

    Posted Dec 02, 2020 03:26:00 PM
    Oh interesting! Thank you, I'll looking up Chaos Monkey!

    ------------------------------
    Jenna Morrison
    Intern
    Cloud Security Alliance
    ------------------------------