In this episode of ACM ByteCast, our special guest host Scott Hanselman (of The Hanselminutes Podcast) welcomes ACM Queue Editorial Board member Kelly Shortridge, Chief Product Officer at Fastly, where she previously served as VP of Security Products. Shortridge is the author of Security Chaos Engineering: Sustaining Resilience in Software and Systems (O'Reilly). An accomplished product executive, software innovator, and internationally recognized technical expert on resilience in complex systems, she is known for the application of behavioral economics, resilience, and DevOps principles to cybersecurity, and modernizing security programs.
In the Kelly explains that security chaos engineering is really about resilience engineering—building systems that can recover quickly from inevitable failures. She makes an argument that organizations should prioritize adaptability, redundancy, and recovery over prevention, and encourages greater collaboration between security and platform engineering teams. The wide-ranging conversation covers “metrics theater,” the cost-resilience tradeoff, why software has unique advantages for simulation that we're not leveraging, and where LLMs fit (and don't fit) in security workflows.