Komrade: an Open-Source Security Chaos Engineering (SCE) Tool for...
summary
Komrade is an open source Security Chaos Engineering tool for Kubernetes that runs experiments which backup previous config then apply a fault and restore on pod termination. Demoed experiments include CIS misconfigured port testing that finds about 40% missed by the firewall in one cloud deployment, toggling API server anonymous auth, changing kubelet eventRecordQPS via dynamic config, CoreDNS rewrite (google → yahoo) and an ARP+DNS spoofing PoC that validates attack visibility and recovery.
AI-written summary · about
chapters (5)
- 0:00Start
- 8:41Cyber Security is Context Dependent Ability to Apply Change System
- 11:44Instrument Chaos Engineering
- 16:48Use Cases Incident Response • Security Control Validation • Security Observability • Compliance Monitoring
- 24:12Demo Overview
related talks
25mLet the Chaos Begin—SRE Chaos Engineering Meets Cybersecurity
43mCyber Chaos Engineering
24mSecurity Chaos Engineering for Fun and Profit
55mThe Hacker's Guide to Kubernetes
38mOpen Source Security Tools for Kubernetes Applications
40mSecurity & Chaos Engineering: Resilient Distributed Systems
35mChaos Engineering WG Deep Dive
22mSecurity Showdown: The Overconfident Operator Vs the Nefarious...