Tuesday, May 1, 2018
Enrolling More Women in Cyber Engineering
Everyone who works at Cisco knows that we encourage, promote and value a diverse workforce. Supporting women is an important part of that effort. The difference in tangible support from ten years ago to today is profound across the company; but I truly believe that the Security & Trust Organization (S&TO) is leading in this area. As Senior Director of S&TO Engineering, I’m proud to be a part of that commitment.
When I started 18 years in Cisco’s IPCBU Engineering team, there were very few women on our team. Today, things have changed considerably. For both 2017 and 2018, S&TO Engineering’s interns were 60% female. In past years, that would have been ten percent or less. The higher percentage of female interns leads to a higher percentage of accepted full-time job offers. While there’s still a ways to go in closing the gender gap, things are improving.
That’s particularly important because we need all of the skilled security talent we can muster. With all of its benefits, the global move to digitization unfortunately also brings related risks and continually changing threats. The shortage of talent to solve it is well known and we need to continue to raise the bar.
Entering the cyber workforce is often an indirect path – for men and for women. The first career step I took was in engineering products that enabled Cisco to win in government markets. National governments are the most security conscious customers in the world, so over time we increasingly focused on advanced security technologies to protect networks and data, as well as to detect attacks when they do occur. Today, my responsibilities include engineering development of Trustworthy Systems and Global Certifications of Cisco products to enable sales into regulated markets. It’s been a fascinating journey with an unforeseeable evolution.
Along the way, I’ve been truly fortunate to have some great female role models, starting within my own family. My grandmother and my mother taught me values of honesty, integrity, reliability, humility and the importance of helping others. All those qualities are just as important inside of Cisco as outside. My mother drove home the importance of education; and education has indeed had a profound impact on my accomplishments. Inside Cisco, I’ve been particularly influenced by two amazing women leaders—Michelle Fleury and Edna Conway—who I’ve known for many years. When I observed both of them presenting at our organization’s Women Empowerment conference, I was amazed and impressed by their strong leadership qualities that I aspire to emulate: world class in their field of expertise, authentic in collaboration, and people that everyone respects. They have both provided me invaluable mentorship. I am a better leader in Cisco because of learning from them.
We need more women leaders like this. So what are we doing to get them? I believe the worldwide engineering gender gap is a function of the talent pool. Engineering, globally, has been largely comprised of males. At top engineering universities, the vast majority of new graduates are male. The number one action that businesses and governments can take to help decrease the cybersecurity talent shortage is to cultivate more cybersecurity talent. That starts with teaching these skills and disciplines earlier in grade schools – by college, it’s almost too late.
For our part, Cisco is working hard to create a more diverse engineering talent pool, attending global women in cybersecurity events and identifying top female engineering talent to recruit. In S&TO Engineering, our two main women empowerment initiatives are to increase the number of women engineers in the organization and to sponsor the career goals of the women engineers already in it. Cisco is a major sponsor of STEM events in local schools, which several members of our team regularly visit to teach programming classes, lead project events and speak about the engineering field’s exciting opportunities. We’ve had some good success, but we need to proactively continue until more females choose engineering as their field of study.
Societally and systemically, there’s a lot to be done to close the cyber gender and talent gaps. We need men’s help: through championing awareness of the issue; through practicing diversity in hiring practices; through sponsoring women in their career goals, which I believe is more impactful than mentoring and coaching; and through helping organizations unlearn past assumptions and biases.
The lack of cybersecurity talent is not due to lack of interest – it’s due to a lack of understanding and exposure. We know how to fix that, so let’s get going!
To learn more visit www.cisco.com/go/bridgethegap
Tags:
from Cisco Blog » Security https://ift.tt/2JDTZEg
Man Who Hacked Jail Systems to Release His Friend Early Gets 7-Years in Prison
Remember a young hacker who
hacked jail systemsin an attempt to release his prison inmate early?
Well, that hacker will now be joining his inmate behind bars.
Konrads Voitsof Ypsilanti, Michigan, has been sentenced to seven years and three months in prison for attempting to hack the Washtenaw County Jail computer system and modifying prison records to get his friend released early.
Besides spending 87 months in prison, Voits has also been ordered to pay $235,488 in fine to Washtenaw County for the cost accrued in investigating and cleaning up the infiltration that resulted in the compromise of personal information of around 1,600 employees, the US Justice Department
announcedlast week.
Between January 24th, 2017 and March 10th, 2017, Voits successfully tricked IT staff at Washtenaw County Jail into visiting a phony website at "ewashtenavv.org," which mimics the official URL, "ewashtenaw.org."
The malicious website then installed malware on the IT staff computer that eventually gave Voits complete control over the Jail's network, allowing him to steal search warrant affidavits and personal details of over 1,600 employees, including names, email addresses, and passwords.
Besides this, Voits also accessed the Washtenaw County Jail records and altered the electronic records of at least one inmate for early release.
However, things did not work as Voits wanted them to.
An IT employee cross-checked the release date of the inmate with hand-kept records and detected changes in the records. He alerted the FBI, who arrested Voits a month later.
"Thanks to the quick response of the IT employees at Washtenaw County, and to the careful review of records by employees at the Washtenaw County Jail, nobody was released early," the DoJ said last week.
"Washtenaw County spent thousands of dollars and numerous extra work hours responding to and investigating the breach, resulting in a loss of at least $235,488."
The 27-year-old Michigan man pleaded guilty to one federal charge of damaging a protected computer in December last year and has now been jailed for seven years and three months behind bars, alongside up to 3 years of supervised release.
Voits has also agreed to surrender his belongings he used during the attack, including his laptop, four mobile phones (using which he called prison staff), $385.49 worth of Bitcoin, and one "Green Integrated Circuit Component, Serial No. Y21A2123."
from The Hacker News https://ift.tt/2I0BMnv