海角大神

海角大神 / Text

Diversity on display at tech conference minus 'tech bros'

An alternative cybersecurity conference held this week in San Francisco was notable for its representation of women and minorities who are often absent at such events. Only one in ten cybersecurity workers are women.聽

By Jessica Mendoza, Staff writer
San Francisco

Aanchal Gupta, director of security at Facebook, is posing a question to her panel of five experts onstage when she has to catch herself.聽聽

鈥淵ou guys are presenting ... 鈥

She stops.聽鈥淪orry, I鈥檓 so used to being around guys,鈥 she says. "This is my first panel where it鈥檚 all females.鈥

Both the speakers and audience laugh, but everyone knew Gupta wasn鈥檛 really joking. The one-day event held here Tuesday was explicitly designed to to show that the privacy and security sector has a healthy share of female and minority experts who can speak to a wide spectrum of issues relevant to a male-dominated industry.

OURSA, short for Our Security Advocates, was conceived in early March after a major security convention, the RSA conference, announced a list of 20 keynote presenters with only one woman: Monica Lewinsky, who was to speak on cyberbullying. (RSA later issued a revised list with more women, saying this was always its intention.)聽聽

In response, a聽group of indignant men and women decided to stage an 鈥渁lt-conference鈥 the same week as RSA. OURSA vowed to bring together speakers from diverse backgrounds who were renowned in their field, and to聽move beyond discussing minority experiences to call attention to the excellent work already being done by women and racial and ethnic minorities.聽

"One of the things we wanted to focus on was having presenters and speakers really represent their work, not just talk about what it鈥檚 like to be a woman in security," says Melanie Ensign, head of privacy and security communications at Uber. 鈥淭here are major segments of our community that are just so tired of talking about being in security and our gender.鈥

Like the rest of the tech sector, cybersecurity is notorious for its gender and diversity gap. In the US, African-Americans and Hispanics make up less than 12 percent of the cybersecurity workforce, while women make up about 10 percent, according to the International Consortium of Minority Cybersecurity Professionals. The rate is not much different worldwide.

With a rise in cybercrime across the globe that is expected to triple聽the demand for cybersecurity workers by 2021, observers say addressing the diversity gap now is crucial. And conferences 鈥 an important platform for showcasing expertise 鈥 can be a key part. 鈥淭o have a percentage feel excluded at these events is a detriment to the field,鈥 says Wendy DuBow, senior research scientist at the National Center for Women and Information Technology.

OURSA, which took place at Cloudflare headquarters in San Francisco, offered a short-term antidote that attracted around 250 people. Sessions revolved around a diversity of perspectives 鈥 the day鈥檚 first discussion, for instance, was on the intersection of technology and advocacy for high-risk populations, led by a panel of聽activists, programmers, and researchers from diverse backgrounds.聽

鈥淵ou couldn鈥檛 have that conversation with just a group of white men,鈥 says Ms. Ensign, the conference's media coordinator.

Organizers say it wasn't hard to find diverse voices. The real challenge in聽putting together her session on applied security engineering, says Ms. Gupta, was saying no to dozens of quality submissions. 鈥淭hat shows that there are so many passionate people out there who care about security, privacy, and online safety,鈥 she told the audience.聽

Attendees were as diverse as the presenters and added to the sense of empowerment at the venue. 鈥淭he composition of the room can really change how you approach a topic,鈥 says Anna Lauren Hoffmann, an openly trans assistant professor of technology and culture at the University of Washington. While her scholarship doesn鈥檛 traditionally fall within the security sector, she was able to lend her expertise to a session on the ethics of emerging technologies. 鈥淚t鈥檚 a strength of this event that they were able to broaden their lens,鈥 she says.

Some preferred to keep to a minimum any talk about their lived experiences. Window Snyder, chief security officer at cloud-computing service provider Fastly and a top voice in application security, spoke onstage about the need for girls and women to embrace their femininity as they cut their teeth in the industry. But after the session, she said she only wanted to take questions on application security.聽鈥淚 can talk about that for as long as you like,鈥 she says.

OURSA鈥檚 organizers aspire to see a world where women and other minorities no longer have to talk about their struggle for recognition in cybersecurity. For now, they鈥檒l settle for proving that there is a way to do conferences differently.

鈥淲e hope that other conferences will try a little bit harder to give women and others a chance to participate,鈥 Ensign says. 鈥淥ur hope is that a year from now, we don鈥檛 feel like we need this event.鈥