InTechnology

In this episode of What That Means, Camille talks diversity and inclusion in cyber security with Isaura Gaeta. Isaura is the Vice President of Security Research at Intel, a 5-time winner of The Intel Achievement Award, and an international speaker on diversity and inclusion in the tech workplace. Tune in for a great convo around:

•  What diversity and inclusion is

•  Why diversity and inclusion matter in cyber security

•  Why diverse teams lead to better innovation

•  What neurodiversity is

•  The importance of updated and inclusive language in tech

And more. Don’t miss it!

Here are some key take-aways:

•  Diversity refers to the unique attributes that we all bring to the workplace. Inclusion is about getting the mix of unique attributes to work together.

•  A diverse and inclusive workforce allows us to bring more perspectives (and more solutions) to the challenges we face. 

•  It’s important to remember that one single approach is not going to solve every problem. An inclusive environment is a flexible environment that makes room for different points of view and different approaches.

•  In tech, a curious mindset is common amongst team members. A manager’s job is to give guardrails and then let the curious minds get to work within those guardrails. 

•  Neurodiversity is about recognizing that we all have different abilities and approaches. It’s about being aware that the ways we prefer to work and the environments we need to do that work may be different. 

•  As a manager in the tech space, it’s your job to create an environment that allows everyone on your team to be successful.

•  There are outdated terms in the tech space that can be triggering for many people. There’s a need to update engineering terminology to be more inclusive. 

Some interesting quotes from today’s episode:

“By bringing people in that see the problem in a little bit of a different way, you may come up with something you hadn't thought of yourself or something that like-minded individuals may not come up with by themselves. As you bring in these different perspectives, someone might say, ‘What about this?’ Or ‘What about that?’ And suddenly, a breakthrough and new innovation can really come.” 

“If you're a technology company, if you're doing anything in technology, you definitely want to make sure that you have a very diverse workforce, because it will lead to better innovation. And of course, better innovation leads to better products, better sales.”

“In cyber security, we really need professionals that know how to break things. It's actually a different way, cognitively, to approach the problem. So what are the weaknesses in this product that I just designed? What did I forget to think about? What did I forget to secure? What is it that is the weakness in this particular design? Someone that can approach a problem in that regard is highly valuable, because as an engineer, I don't see that perspective. I build it to the specifications and I'm done. And without that different perspective, I just don't know what I don't know." 

“For me, the learning as a manager has been to not add too many rules. Just give guardrails.”

“People operate differently and in cyber security you might find a few more people that are neurodiverse than you might in the general population.”

“But as you expand and broaden the workforce, some of those terms feel different. So if I hear ‘master slave,’ and I came from an environment, for example, where those terms are very traumatic or it's tied to my heritage, to my family, when I see them show up in engineering terminology, it's hard for me to overlook it.” 

“The terms that we're really trying to avoid are terms that hurt people.”

“I think 2020 really opened eyes for a lot of people of inequities that we have. We have inequities in the corporate system, inequities in society. And if we can feel comfortable to bring up things that we see that are not equitable, and when we bring them up, that management, that leadership is receptive to make those changes, then we're going in the right direction.”

You may have seen bits and pieces of the SolarWinds story in the news. What actually happened (to the best of our knowledge), and what can CISOs learn from it? Tom and Camille invite Dr. Eric Cole, CEO and founder of Secure Anchor Consulting, to give his insight on the SolarWinds hack and how CISCOs can defend against similar cyber attacks. The SolarWinds attack was a two-component attack to modify a product’s source code and to distribute a malicious update to all clients, and the failure was ultimately the result of skipped in-house checks and validations before sending out updates. Listen to hear more about what you can learn from this incident, as well as how large-scale data breaches all share a lack of awareness about unprotected data, the importance of automation in asset inventory and patching configuration management, how to protect against third-party vendor threats, and more!

The views and opinions expressed are those of the guests and author and do not necessarily reflect the official policy or position of Intel Corporation.

What does security look like in the new work-from-home (WFH) and Internet of things (IoT) era? Is it good enough to secure our devices, or do we also need to be thinking about network security? Mauricio Sanchez, Network Security Research Director at Dell’Oro Group, joins Tom and Camille to discuss these topics! Their conversation covers how we should consider how our devices are talking to each other, shadow IT, the security risks from WFH and IoT, the increase in attacks from a data perspective against SaaS-based applications, network security best practices for the new era, data leakage protection, and more.

The views and opinions expressed are those of the guests and author and do not necessarily reflect the official policy or position of Intel Corporation.

No, we’re not talking about musical orchestration. We’re talking about orchestration in cybersecurity! Today, Camille’s joined by Abdul Bailey, a Principal Engineer with Intel’s Internet of Things Group, to tackle the big and broad topic of orchestration at the edge with guest Abdul Bailey. The pair discuss what orchestration and the edge are, why orchestration at the edge requires greater security, how and why the security model changes with orchestration at the edge, real-world examples and how they operate, network connectivity issues, workload prioritization, the importance of redundancy with orchestration at the edge, the Cloud Native Computing Foundation, machine learning, and more!

The views and opinions expressed are those of the guests and author and do not necessarily reflect the official policy or position of Intel Corporation.

What do 3D printing, additive manufacturing, and security all have to do with each other? Tom and Camille have a fascinating chat with Tim Simpson, a Paul Morrow Professor in Engineering Design and Manufacturing at the Pennsylvania State University. While their conversation may seem to border on science fiction, they’re talking about the already existing and soon-to-be realities of 3D manufacturing! Listen as the three discuss what additive manufacturing is, how additive manufacturing is being used in industries like the medical field and the military, the benefits of additive manufacturing, how additive manufacturing allows companies to quickly iterate on designs and increase production, ensuring data security and product quality, and how blockchain is being explored as a way of ensuring the security of files and the legitimacy of additive manufactured parts.

To learn more about 3D printing and additive manufacturing, see our previous podcast episode #16!

The views and opinions expressed are those of the guests and author and do not necessarily reflect the official policy or position of Intel Corporation.

3D printing is the future of manufacturing! Camille’s taking a look at the current uses and future possibilities of 3D printing—plus, what security might look like—with Dr. Irene Petrick, Senior Director of Industrial Innovation in the Internet of Things group at Intel. They’re uncovering how 3D printing and terms like additive manufacturing and distributed manufacturing are interchangeable, when to use each of those terms with different audience, where 3D printing is being used and with what materials, the benefits of 3D printing such as waste reduction, the drawbacks of 3D printing adoption, how 3D printing affects design, the role of blockchain in 3D printing security, liability requirements, and more!

The views and opinions expressed are those of the guests and author and do not necessarily reflect the official policy or position of Intel Corporation.

What’s all the buzz about blockchain? Tom and Camille chat with Arnaud Le Hors, IBM Senior Technical Staff Member, about the enterprise use cases for blockchain. Executives and CISCOs, this is one episode you won’t want to miss!

The trio discuss the hype versus the reality of blockchain, how blockchain is a technology that can be build into a solution but is not a solution in and of itself, how the food industry uses blockchain to improve supply chain transparency and traceability, where blockchain should and shouldn’t be used, privacy settings, network necessity, balancing transparency with privacy, and more!

You can learn more about blockchain in our previous episode #14.

The views and opinions expressed are those of the guests and author and do not necessarily reflect the official policy or position of Intel Corporation.

You’ve heard of blockchain, but do you know what it is or how it works? We’re going over everything you need to know about blockchain with the blockchain guru himself, Mic Bowman of Intel Labs. We cover the differences between blockchain, Bitcoin, and distributed ledger technology—as well as how blockchain acts as a substitute for inter-organizational trust, hashing, smart contracts, when blockchain is the right decision, what blockchain in a box is, the trade-offs between trustworthiness and computability, and more!

The views and opinions expressed are those of the guests and author and do not necessarily reflect the official policy or position of Intel Corporation.

Encryption is a hot topic in cybersecurity—but have you heard of homomorphic encryption? Camille is joined by Rosario (Ro) Cammarota, Principal Engineer at Intel Labs, to explain homomorphic encryption. Listen in to learn why homomorphic encryption is considered the “Holy Grail” of cryptography, its security advantages, how it compares to the vulnerabilities of traditional encryption, where homomorphic encryption can be used such as in healthcare, and the challenges in evolving and adopting homomorphic encryption. Homomorphic encryption is also so powerful because it can be used in combination with other security protocols, like blockchain and distributed ledger technology.  

Learn about all this and more!

The views and opinions expressed are those of the guests and author and do not necessarily reflect the official policy or position of Intel Corporation.

Product Security Incident Response Teams, aka PSIRTs, are more important than ever before for companies of all sizes. Today, Camille invites Lisa Bradley, Director of Product and Application Security at Dell Technologies, to explain the purpose and importance of Product Security Incident Response Teams (PSIRTs). The pair discuss the relationship between PSIRT and Secure Development Lifecycle (SDL), the difference between a weakness and a vulnerability,, how PSIRTs measure themselves, how to establish a good working relationship with researchers, what a CVD is, and where smaller companies should start when setting up a PSIRT. Camille and Lisa also stress the importance of transparency and trust not only between teams, but also between companies and customers.

Tune in to hear about all things PSIRT and more!

The views and opinions expressed are those of the guests and author and do not necessarily reflect the official policy or position of Intel Corporation.