Fast, Ever-Evolving Defenders: The Resilience Revolution
summary
Argues for a resilience paradigm that copies attacker advantages: faster operational tempo via infrastructure as code (Terraform demo updating a Binary Defense IP blocklist into Fastly WAF and AWS) and CI/CD automation (GitHub Actions, Dependabot) so patches deploy in hours. Recommends design fixes like modularity, queues and sandboxes (RLBox), paved roads (Netflix Wall-E), systems thinking with decision trees and chaos experiments, and measurable signals — one experiment finds a firewall works only 60% detection — to get immediate, actionable feedback.
AI-written summary · about
chapters (12)
- 0:00Resilience Revolution intro
- 1:06Debunking attacker’s myth
- 2:49Speed via config as code
- 9:09Security checks with CI/CD
- 12:16Demo: Blocklist automation
- 16:29Design-based defense
- 28:06Isolation and modularity
- 32:01Systems thinking vs attackers
- 36:40Stress testing and chaos
- 39:47Measuring success signals
- 43:36Recap and call to action
- 44:41Q&A and book signing
related talks
32mSoftware security as a force of nature
16mResilient by Design: Architectures for Crisis Response & Recovery
28mNew Paradigms for the Next Era of Security
22mResilience Is Not Enough
51mThinking Differently About Security
44mArchitectural patterns of resilient distributed systems
14mAntifragility or taming the hydra
43mMaking WAF Mainstream: From Static Defenses to... (Roy Weisfeld, Surya Pentakota)