Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
What Women in Cybersecurity Really Think About Their Careers
Newest First  |  Oldest First  |  Threaded View
Kelly Jackson Higgins
Kelly Jackson Higgins,
User Rank: Strategist
8/7/2017 | 3:28:50 PM
Re: Are we equal yet?
@SchemaCzar It's likely that you haven't seen "anti-woman prejudice" because you haven't experienced it firsthand like many women in this industry do. The goal of Wong's report was to highlight how women who are in this industry feel about their jobs and their roles in the industry despite implicit biases they and minorities face on a regular basis. It's not meant to be a jab at men or "old-boy exclusiveness" as you described, but instead to be honest and open about these experiences and what can be done to foster a more inclusive environment. Awareness of biases we all have is key to opening the door for more talent in the industry.

The report had a positive spin indeed because many women are proud of the work they do and the contributions they make to the industry. That should speak for itself on how they are an important "subgroup" of the security profession. 
GonzSTL
GonzSTL,
User Rank: Ninja
8/7/2017 | 1:53:35 PM
Re: Are we equal yet?

I was on a panel a few weeks ago in a discussion about Diversity in IT that included, besides myself, 3 women: 2 CIOs and a managing principal for an IT staffing firm. The discussion was quite eye opening, and a lot of it centered on a person's life balances as a huge factor in choosing their profession. The question was not really whether or not we are equal, but instead revolved more around the circumstances that heavily influenced decisions, and what would be a better fit in their family life. Although I readily admit that IT security (really, IT in general) has since the beginning been a male dominated discipline, I'm not sure that disparaging attitudes towards women in IT are prevalent and cause their lack of representation.

I am glad that the author touched on the pipeline problem. We must find a way to inspire girls and young women to consider a career in cybersecurity (really, IT in general). In the USA, almost 47% of the workforce are women, and if only 11% in the (cybersecurity) industry are women, then we have a serious issue because we are missing out on a very large group of people. I'm not saying that we must necessarily have 47 %, but surely something larger than 11%. Peer and societal pressures play such a heavy role on career selections, and those are the toughest to overcome. It would be good for women in cybersecurity to share their stories so that women can be inspired to pursue that career. Those stories should be heard by girls at an early age, as stereotypical images are formed at earlier ages these days.

SchemaCzar
SchemaCzar,
User Rank: Strategist
8/7/2017 | 12:34:05 PM
Are we equal yet?
I'm really not sure why I'm still seeing articles about women as an important subgroup in this profession because of their gender.  In my entire professional life, I've seen only a handful of real anti-woman prejudice events and a ton of scrupulous even-handedness. I am glad that Wong seems to see "improvement," because sometimes  articles with such topics can seem like veiled accusations of old-boy exclusiveness.  But this article still doesn't help me at all in my security work and research.

I will say this:we need a boatload of additional security professionals whatever their demographics.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Everything You Need to Know About DNS Attacks
It's important to understand DNS, potential attacks against it, and the tools and techniques required to defend DNS infrastructure. This report answers all the questions you were afraid to ask. Domain Name Service (DNS) is a critical part of any organization's digital infrastructure, but it's also one of the least understood. DNS is designed to be invisible to business professionals, IT stakeholders, and many security professionals, but DNS's threat surface is large and widely targeted. Attackers are causing a great deal of damage with an array of attacks such as denial of service, DNS cache poisoning, DNS hijackin, DNS tunneling, and DNS dangling. They are using DNS infrastructure to take control of inbound and outbound communications and preventing users from accessing the applications they are looking for. To stop attacks on DNS, security teams need to shore up the organization's security hygiene around DNS infrastructure, implement controls such as DNSSEC, and monitor DNS traffic
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-33196
PUBLISHED: 2023-05-26
Craft is a CMS for creating custom digital experiences. Cross site scripting (XSS) can be triggered by review volumes. This issue has been fixed in version 4.4.7.
CVE-2023-33185
PUBLISHED: 2023-05-26
Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS Simple Email Service. The library exports the `SESEventWebhookView class` intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...
CVE-2023-33187
PUBLISHED: 2023-05-26
Highlight is an open source, full-stack monitoring platform. Highlight may record passwords on customer deployments when a password html input is switched to `type="text"` via a javascript "Show Password" button. This differs from the expected behavior which always obfuscates `ty...
CVE-2023-33194
PUBLISHED: 2023-05-26
Craft is a CMS for creating custom digital experiences on the web.The platform does not filter input and encode output in Quick Post validation error message, which can deliver an XSS payload. Old CVE fixed the XSS in label HTML but didn’t fix it when clicking save. This issue was...
CVE-2023-2879
PUBLISHED: 2023-05-26
GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file