The Epistemology of Trust (Mike Wilkes)
summary
Argues for measuring resilience by breach cadence (how often you get hit) instead of probability and shows concrete fixes: use EPSS v4 to prioritize reachable exploitable flaws, require immutable backups and test restores, and distribute DNS across two ASNs to avoid single‑point failures. Cites surprises: T‑Mobile cadence of months, SolarWinds took years to surface, ICBC left $9B imbalance and four months of unreconciled books, Jaguar Land Rover lost £1.8B. Recommends chaos testing, CRRQ metrics, and ISAC/industry sharing for faster recovery.
AI-written summary · about
chapters (6)
- 0:00Introduction and speaker background
- 5:19Resilience and breach cadence concept
- 12:18Trust, transparency and systemic risk
- 19:15AI risks and systemic sabotage
- 25:17Real-world resilience examples
- 30:55Key takeaways and call to action
related talks
05mBuilding resilience in our organizations...
43mResilience Engineering Mythbusting
44mDeveloping a Culture of Reliability and Resilience through Chaos
40mNavigating the Unknowable: Resilience through Security Chaos Engineering
52mPerformance & Stability Anti patterns
16mEngineering Failure-Resilient Systems
21mOn Trust: Stories from the Front Lines
22mResilience Is Not Enough