To attract more women, cybersecurity industry could drop macho jargon
Loading...
Michelle Dennedy is accustomed to being the lone woman in the room. Not only is she working in male-dominated Silicon Valley, Ms. Dennedy has successfully ascended part of the tech world where women are especially scarce: cybersecurity.
Women make up less than 20 percent of the information security workforce, according to a 2014听, and stories of women leaving the industry before rising through the ranks are听.听
The gender disparity, says Dennedy, chief privacy officer for Intel Security in Santa Clara, Calif., has consequences for the cybersecurity industry. 鈥淲e pay a price for this lack of diversity,鈥 Dennedy says. 鈥淲e are not innovating as quickly as we need to be because there aren鈥檛 enough women in this field. Any time you have uniformity of thought, as you do in this field, you miss out on the most creative solutions or tactics.鈥
Several efforts are underway to support women in cybersecurity and encourage more female computer science students to pursue the field. Yet Dennedy and others say that really tipping the scales in favor of gender diversity will require the entire industry to talk differently听about security.
Cybersecurity parlance often mirrors the language of combat and "taking down the bad guys," says Dennedy. Take, for instance, President Obama鈥檚听 at a cybersecurity summit at Stanford University last week, where he described cyberspace as the new 鈥淲ild West鈥 and the government as the sheriff. But the field also relies on understanding human emotion, she says, which tends to come more naturally to women.
鈥淢en and women are just socialized differently,鈥 Dennedy says. 鈥淲e approach problems from different perspectives because of how we were raised to see the world.鈥
For instance, Dennedy says she isn't driven by the thrill of battling invisible enemies over the Internet. It's far more personal for her: It's about protecting people鈥檚 identities.
After her first daughter was born in 2001, she realized her child鈥檚 life would be wrapped up in data. At the time, she was already working in privacy,听and by searching a database of stolen identities,听she discovered that her daughter鈥檚 Social Security number had been used 11 years before her birth to create fraudulent bank accounts.
鈥淚t was like she was born with a financial birth defect,鈥 she says. 鈥淚f we hadn鈥檛 known about this and taken care of it, it could have caused her so many tangible harms. It could have affected her background searches, her ability to get a phone, a school loan, a job or a home.鈥
Over the past 15 years, her passion for keeping personal identities safe has pushed her to the very top of her industry; she has held C-suite roles at Sun Microsystems, Oracle, and now Intel Security.
According to Rebecca Wright, a professor of computer security at Rutgers University, young women applying for cybersecurity programs in college often have similar reasons for pursuing this line of work.
鈥淚n their essays, they describe security and privacy as a way to help other people or their country,鈥 she says. 鈥淭he field matches their technical interest but they also see it as a way to do something meaningful in the world.鈥
Sexism in the classroom
For women just starting in the field, the adversarial language of attack and combat often alienates female students who otherwise may pursue careers in security.
鈥淚 talk to freshmen who are confused about what we do in security and privacy,鈥 says Jessie Pease, a senior at California Polytechnic State University specializing in computer security. 鈥淭here鈥檚 a misconception that we鈥檙e all hackers who sit in our basements drinking Mountain Dew and not showering. People think that knowing how to hack is a prerequisite to be in this field.鈥
Only 18 percent of computer science degrees are awarded to women; in the subfield of cybersecurity, that figure is less than 10 percent. This gender imbalance has also impacted women鈥檚 experience in the classroom.
Pease says she has had to deal with both subtle and overt hostility from men in her classes. 鈥淭he security major has a reputation for being very technical and hard,鈥 she says. 鈥淢ale classmates just assume that girls are not capable of doing the work. The way they talk to us tends to be condescending.鈥
Male students have asked her if she even knows how to code. Her male lab partners have tried to take over entire projects because they worry that she will bring down their grades. They've implied that the only reason Pease has gotten a string of enviable internships at Cisco and Apple is because she is a woman and has benefited from affirmative action. She鈥檚 noticed some of her female classmates switched to majors where there is more gender balance, such as user interface or user experience.
Things are slowly beginning to change. Pease was the president of the Women in Software and Hardware club, where she has tried to make her field more attractive to women just starting college. She鈥檚 also spearheaded a Lean In Circle on her campus, where women and even a few progressive men gather to discuss ideas represented in Sheryl Sandberg's book "Lean In" and practical ways to deal with gender-related problems.
For instance, she鈥檚 developed strategies to confront colleagues or classmates who are being patronizing. (鈥淏ring it up with him later in private,鈥 she recommends. 鈥淎nd always frame it in terms of how you are feeling so he does not feel attacked.鈥) There are also scholarships available for women who are interested in degrees in cybersecurity. Pease herself received a grant funded, in part, by Hewlett-Packard as part of its Scholarships for Women Studying Information Security program.
New recruitment drive听
In the workplace, efforts are also underway to support women in cybersecurity. Dennedy says that Intel Security has launched a $300 million diversity initiative to bring more women into the fold. She says that this investment is proof that gender diversity offers tangible benefits to the company. 鈥淭he company does not just throw money around,鈥 she says. 鈥淭his is a Machiavellian move that signals to me that gender diversity is good for business.鈥
This initiative is just getting off the ground but Dennedy says it will involve making more deliberate efforts to recruit women, retaining them by better accommodating to their needs, and working to change workplace culture. Given that women currently make up less than one-fifth of cybersecurity professionals, it will take time for the industry to change, but Dennedy is hopeful that the new generation of women in the industry will have an easier time that she did.
To be sure, being a woman in such a deep-seated, male-dominated industry that can be overwhelming. Every year, for example, Dennedy goes to the RSA Conference, the flagship cybersecurity gathering, and finds herself lost in a sea of men. As she goes down the big escalator at the Moscone Center in San Francisco, where the event is held, she feels a thousand men ogling her simply because she is such an anomaly.
鈥淥ne year, I was so annoyed at one man who was shamelessly staring at me that I just lifted up my skirt to give him a full view of my black Spanx,鈥 she says. 鈥淚t seemed like that was what he wanted to see.鈥
Dennedy tends to laughingly brush off the rude encounters she has with male counterparts, but not all women are so spunky. Many find the culture in the industry so uncomfortable that they leave altogether听 gender discrimination, lack of social change, or a lack of support for employers for advancement.
And even Dennedy, force of nature that she is, admits that being a woman has held her back; she has found it difficult to balance her career with raising two daughters and has struggled to find mentors.
鈥淚鈥檓 exhausted,鈥 she says. 鈥淚 can act the clown and flash people to make a point, but I also feel completely isolated. I can鈥檛 discuss my problems with my girlfriends because they don鈥檛 understand what I do. Men don鈥檛 have that problem: they can find mentors who are going through the same things they are experiencing.鈥
Bringing a different approach听
But bringing more women in the field isn't just about improving workplace culture, it's also about being better at confronting the Internet鈥檚 trickiest problems.
As more women enter the field, Dennedy hopes they will use the their skills to help the most vulnerable members of society who are being abused by nefarious online behavior. She points to the darkest corners of the Internet 鈥 revenge porn sites, prostitution rings, human trafficking, underaged porn 鈥 all of which disproportionately affect women.
鈥淭echnology can help here,鈥 she says. 鈥淭hese are very complex things to solve, but we can begin to use image recognition technology to identify naked bodies, see where dirty money is passing hands, and de-index sites that are harmful.鈥
Ultimately, however, Dennedy argues that making the Internet a safer place for women requires deeper cultural change that is more likely to take place when women play a bigger role in governing and securing the Internet.鈥
When a community condemns something, there will always be outliers who violate that convention,鈥 she says. 鈥淏ut the majority of the population will adhere to the norm. With more women in the field, we can help to shape what those norms and conventions will be.鈥
听