Russ Miles

Cloud native security isn't a game for individual players. It requires team collaboration with a platform that can help cloud security engineers, developers, and operations people do their best work. That's what the cloud native application protection platform (CNAPP) delivers. With this practical guide, you'll learn how CNAPPs can help you consolidate security through DevSecOps across cloud native technologies, practices, and application lifecycles. Through real-life attack scenarios, authors Russ Miles, Steve Giguere, and Taylor Smith help you explore how CNAPP not only mitigates multidimensional threats, but also reduces complexity and helps your team stay one step ahead of attackers. CNAPP provides a holistic approach to your cloud native development across identities, workloads, networks, and infrastructure. With this book, you will:Examine threats to different parts of the cloud native stack, including pipelines, supply chains, infrastructure, workloads, and applicationsLearn what CNAPP is and how it enables the context-sharing and collaboration necessary to secure your applications from development to runtimeAssess your own attack surface from a code and runtime standpointIdentify blind spots in your existing cloud native security coverageLeverage CNAPP to achieve a holistic, collaborative security environment

If you're planning, building, or implementing a cloud strategy that supports digitalization for your financial services business, this invaluable guide clearly sets out the crucial factors and questions to consider first. With it, you'll learn how to avoid the costly and time-consuming pitfalls and disappointments of cloud adoption and take full advantage of the cloud operational model. You'll discover cloud tactics that unlock the benefits of digitalization and how to create a cloud strategy that has the flexibility to streamline operations, integrate channels, and encourage innovation in your firm. Packed with invaluable advice and real-world case studies, this book will show you how to: Select the right operational models for your needs Build resilience into your company's technologies Assess the trade-offs of third-party digital native services versus developing them in-house Ensure operability across cloud services providers Balance innovation and accountability Deal with digitalization issues of particular importance in finance, such as governance, security, and regulatory compliance And more

Most companies work hard to avoid costly failures, but in complex systems a better approach is to embrace and learn from them. Through chaos engineering, you can proactively hunt for evidence of system weaknesses before they trigger a crisis. This practical book shows software developers and system administrators how to plan and run successful chaos engineering experiments. System weaknesses go beyond your infrastructure, platforms, and applications to include policies, practices, playbooks, and people. Author Russ Miles explains why, when, and how to test systems, processes, and team responses using simulated failures on Game Days. You’ll also learn how to work toward continuous chaos through automation with features you can share across your team and organization. Learn to think like a chaos engineer Build a hypothesis backlog to determine what could go wrong in your system Develop your hypotheses into chaos engineering experiment Game Days Write, run, and learn from automated chaos experiments using the open source Chaos Toolkit Turn chaos experiments into tests to confirm that you’ve overcome the weaknesses you discovered Observe and control your automated chaos experiments while they are running