How Attack Simulation (BAS) Boosts Security Operations – Insights from GOPS 2023

The 21st GOPS Global Operations Conference was held on October 26‑27, 2023 in Shanghai. Experts from China Academy of Information and Communications Technology, Agricultural Bank, Bank of Communications, Shenwan Hongyuan Securities, and over 80 specialists from communications, finance, and insurance discussed DevOps, AIOps, SRE, continuous testing, and security.

Tencent Security Cloud Ding Lab expert Jiang Guolong presented “High‑Quality Security Operations Based on Attack Simulation”. Attack simulation (BAS) offers continuous testing and verification of security controls, evaluates an organization’s threat posture, highlights risks to high‑value assets such as confidential data, and provides training to mature security teams.

Gartner notes that BAS sits at the top of the expected expansion in its 2022 security‑operations technology maturity curve, yet it remains 2‑5 years away from full maturity.

BAS enables systematic, continuous discovery of protection weaknesses while reflecting real‑world attacks.

The typical BAS workflow includes:

Define defense detection scenarios

Execute defense detection verification

Perform failure analysis and protection optimization

Assist security investment decisions

For the complete conference PPT, contact the official assistants:

Assistant A: 132 6958 7068 (WeChat same number)

Assistant B: 130 7118 2180 (WeChat same number)

Assistant C: 130 2108 2989 (WeChat same number)