Book
Building Secure and Reliable Systems
Best Practices for Designing, Implementing, and Maintaining Systems
Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield
Summary
Google's account of building systems where security and reliability are treated as one problem rather than two that compete for budget. It follows the system lifecycle: design, implementation, maintenance, and the organizational culture that sustains both. The recurring argument is that the two goals usually pull the same way, since a system that fails safely under attack tends to fail safely under load, and where they genuinely conflict the book states the trade-off instead of hiding it. Written as the security-side companion to the SRE books.
Target Readers
- SREs and security engineers whose work overlaps but whose practices have not merged
- Senior engineers designing systems where a breach and an outage are the same incident
Tags
Colophon
- Publisher
- O'Reilly Media
- ISBN
- 978-1492083122
- Published
- Apr 2020
Get this book
* The link above is an advertisement via Amazon Associates.Related Books
Prerequisites
- Recommended
Site Reliability Engineering
Betsy Beyer, Chris Jones, Jennifer Petoff, Niall Richard Murphy
Reason: Once SRE lets you handle reliability as engineering, you arrive at the question 'aren't security and reliability fundamentally the same design problem?'. Google's 'Building Secure and Reliable Systems' extends SRE to show principles for building security into system design rather than bolting it on, integrating reliability and security.
Next Books
- Recommended
Responsible Software Engineering
Daniel Barrett, Google Engineering
Reason: Once you can build security and reliability into a system's design, you extend that reach to responsibility toward users and society. Technical robustness becomes the foundation for fulfilling ethical and social responsibility.
- Related
Observability Engineering
Charity Majors, Liz Fong-Jones, George Miranda
Reason: Even if you design a secure and reliable system, you cannot notice breaches or degradation without continuously observing its state. 'Observability Engineering' provides the techniques to make the internals of distributed systems visible, connecting secure-and-reliable design to operation where 'whether it is actually upheld' can be detected.