No Password Required - No Password Required Podcast Episode 50 — Tanya Janca

No Password Required Podcast Episode 50 — Tanya Janca

05/28/24 • 60 min

Summary

The conversation discusses the extradition case of Julian Assange and the role of the US prison system in the decision. It also explores Tanya Janca's role at Semgrep and her passion for affordable cybersecurity education. Additionally, it touches on Tanya's experience in election security and the importance of transparency in the process. Tanya discusses her volunteer work with the Canadian government, where she helps educate students about cybersecurity. She talks about the importance of teaching young people about privacy, protecting digital devices, and understanding cyber threats. Tanya also mentions her involvement in the Cyber Titan competition and her efforts to promote cybersecurity as a career. She shares her experience writing the book 'Alice and Bob Learn Application Security' and her unique approach to making technical concepts accessible through stories and different learning styles. Tanya also talks about the importance of mentoring and how she has benefited from mentors throughout her career.

Keywords

Julian Assange, extradition, US prison system, cybersecurity education, Semgrep, election security, transparency, volunteer work, Canadian government, cybersecurity education, privacy, digital devices, cyber threats, Cyber Titan, promoting cybersecurity, career, Alice and Bob Learn Application Security, technical concepts, stories, learning styles, mentoring

Takeaways

The extradition case of Julian Assange highlights the differences in prison systems between the US and other Western democracies.
Tanya Janca's role at Semgrep involves community management and education in the field of cybersecurity.
Affordable cybersecurity education is crucial for organizations to effectively use security tools and integrate them into their programs.
Election security requires centralization, knowledge sharing, and transparency to ensure public trust in the process. Volunteer work with the Canadian government focuses on educating students about cybersecurity, including topics like privacy and protecting digital devices.
Promoting cybersecurity as a career is important, and initiatives like the Cyber Titan competition help engage high school students in learning about cybersecurity.
Tanya's book 'Alice and Bob Learn Application Security' uses stories and different learning styles to make technical concepts accessible.
Mentoring is valuable for personal and professional growth, and Tanya has both benefited from mentors and become a mentor herself.

Titles

The Importance of Transparency in Election Security
Cybersecurity as a Career: The Cyber Titan Competition
The Value of Mentoring: Tanya's Experience as a Mentor and Mentee

Sound Bites

"I am head of community and education, which is a role they made up just for me."
"They decided, I think in 2017, we need to make a task force to make sure they know cyber."
"Defenders need to understand attacks or they can't be good at defending, right? Like we're teaching them ethics as we teach them how to hack."
"Alice and Bob are going to learn secure coding this time."

Chapters

00:00 The Extradition Case of Julian Assange

08:18 Affordable Cybersecurity Education at Semgrep

30:40 Tanya's Volunteer Work with the Canadian Government

31:35 Promoting Cybersecurity as a Career

34:02 Making Technical Concepts Accessible: 'Alice and Bob Learn Application Security'

39:45 The Value of Mentoring

Summary

Keywords

Takeaways

The extradition case of Julian Assange highlights the differences in prison systems between the US and other Western democracies.
Tanya Janca's role at Semgrep involves community management and education in the field of cybersecurity.
Affordable cybersecurity education is crucial for organizations to effectively use security tools and integrate them into their programs.
Election security requires centralization, knowledge sharing, and transparency to ensure public trust in the process. Volunteer work with the Canadian government focuses on educating students about cybersecurity, including topics like privacy and protecting digital devices.
Promoting cybersecurity as a career is important, and initiatives like the Cyber Titan competition help engage high school students in learning about cybersecurity.
Tanya's book 'Alice and Bob Learn Application Security' uses stories and different learning styles to make technical concepts accessible.
Mentoring is valuable for personal and professional growth, and Tanya has both benefited from mentors and become a mentor herself.

Titles

The Importance of Transparency in Election Security
Cybersecurity as a Career: The Cyber Titan Competition
The Value of Mentoring: Tanya's Experience as a Mentor and Mentee

Sound Bites

"I am head of community and education, which is a role they made up just for me."
"They decided, I think in 2017, we need to make a task force to make sure they know cyber."
"Defenders need to understand attacks or they can't be good at defending, right? Like we're teaching them ethics as we teach them how to hack."
"Alice and Bob are going to learn secure coding this time."

Chapters

00:00 The Extradition Case of Julian Assange

08:18 Affordable Cybersecurity Education at Semgrep

30:40 Tanya's Volunteer Work with the Canadian Government

31:35 Promoting Cybersecurity as a Career

34:02 Making Technical Concepts Accessible: 'Alice and Bob Learn Application Security'

39:45 The Value of Mentoring

Previous Episode

No Password Required Podcast Episode 49 — Tamiko Fletcher LIVE from Sunshine Cyber Con

Summary

In this episode of the No Password Required podcast, host Jack Clabby and co-host Kayley Melton interview Tamiko Fletcher, the CISO at Kennedy Space Center. Tamiko shares her journey from a small town in South Carolina to working at NASA and discusses her role as a CISO. She emphasizes the importance of mentorship, outreach, and diversity in the cybersecurity field. Tamiko also talks about the unique challenges of cybersecurity at NASA, such as patching during launches and balancing innovation with security.

She emphasizes the need to know and learn about individuals' strengths, interests, and motivations in order to effectively place them on teams and utilize their skills. Tamiko also shares her experiences working at NASA and the changes she has witnessed over the years, including the evolution of IT and the increasing diversity at the Kennedy Space Center. She highlights the excitement and pride she feels when witnessing a launch and the impact of NASA's work on the world.

Keywords

NASA, cybersecurity, CISO, career trajectory, mentorship, outreach, diversity, patching, innovation, security, NASA, Kennedy Space Center, cybersecurity, teamwork, understanding people, IT evolution, diversity, launches, personal experiences, imposter syndrome, work-life balance, advocating for oneself, UFOs

Takeaways

Tamiko Fletcher shares her journey from a small town in South Carolina to working at NASA as the CISO at Kennedy Space Center.
She highlights the importance of mentorship, outreach, and diversity in the cybersecurity field.
Tamiko discusses the unique challenges of cybersecurity at NASA, such as patching during launches and balancing innovation with security.
She emphasizes the need for flexibility and adaptability in the ever-changing cybersecurity landscape. Understanding and valuing people is crucial in the workplace, as it allows for effective team placement and utilization of individual skills.
The evolution of IT and the increasing diversity at NASA's Kennedy Space Center have been significant changes over the years.
Witnessing a launch at NASA is an exciting and prideful experience, reminding employees of the impact of their work.
Advocating for oneself and setting boundaries is important for maintaining work-life balance and overall well-being.

Sound Bites

"I'm from a small town called Manning, South Carolina. If you look it up on the map, it's near Travel America. It's probably the best thing we got going for it, honestly."
"Success stories like yours are common at NASA. And it's also based on one's definition of success, right? So everyone has their own definition of what success is for them."
"I try to actually know and learn people... because I want to understand what makes them tick so I know where to place them on a team."
"We are human first and then we are who our job is. And I want to be able to utilize that person, that whole person, what makes them happy, what makes them excited to come in every day."
"I have a vast variety of folks on the team who help get cyber done."

Chapters

00:00 Introduction and Welcome to the Podcast

08:00 Education and Career Trajectory

25:48 Challenges and Innovations in Cybersecurity at NASA

34:4 8Building a Team and Emphasizing Diversity

41:30 The Diversity of the Cyber Team at NASA

54:25 Instilling Values in Teams to Change the Work Environment

Next Episode

No Password Required Podcast Episode 51 — Maretta Morovitz

Summary

Kenya's efforts to enhance its cybersecurity and technological progress through partnerships with the US and major tech companies. The focus is on responsible state behavior in cyberspace and addressing mobile app security. The role of public-private partnerships in promoting a robust digital economy and infrastructure. The conversation then transitions to an interview with Maretta Morovitz, a cybersecurity expert at MITRE, discussing her career path, the importance of mentorship, and the impact of ADHD on her work. The discussion also covers MITRE Engage, which focuses on cyber denial, deception, and adversary engagement, and highlights the use of simple yet effective techniques like decoy credentials. In this conversation, Maretta Morovitz discusses the importance of thinking creatively and outside the box when it comes to cybersecurity solutions, especially for organizations with limited budgets. She emphasizes the need for simplicity and proactive measures in cybersecurity. Maretta also highlights the value of interdisciplinary collaboration in the field, involving professionals from various backgrounds such as human behavioral scientists and graphic designers. She shares a successful collaboration between MITRE and HSBC in the field of deception operations. Maretta also talks about her passion for dance and her unique talent of reciting the alphabet backwards.

Keywords

Kenya, cybersecurity, technological progress, partnerships, responsible state behavior, mobile app security, public-private partnerships, digital economy, infrastructure, interview, Maretta Morovitz, career path, mentorship, ADHD, MITRE Engage, cyber denial, deception, adversary engagement, decoy credentials, cybersecurity, low budget solutions, simplicity, proactive measures, interdisciplinary collaboration, deception operations, dance, talent

Takeaways

Kenya is forging partnerships with the US and major tech companies to enhance its cybersecurity and technological progress.
The focus is on responsible state behavior in cyberspace and addressing mobile app security.
Public-private partnerships play a crucial role in promoting a robust digital economy and infrastructure.
Mentorship is important in career development, and having mentors who provide opportunities and support can be instrumental in success.
ADHD can present challenges but also bring unique strengths to the workplace.
MITRE Engage focuses on cyber denial, deception, and adversary engagement, using simple yet effective techniques like decoy credentials. Thinking creatively and outside the box is crucial in cybersecurity, especially for organizations with limited budgets.
Simplicity and proactive measures are key in cybersecurity to effectively address threats.
Interdisciplinary collaboration involving professionals from various backgrounds can bring new perspectives and solutions to the field.
Deception operations can be a valuable tool in cybersecurity, and successful collaborations in this area have been seen between organizations like MITRE and HSBC.
Passions and talents outside of cybersecurity, such as dance, can bring unique perspectives and skills to the field.

Sound Bites

"Sometimes the real solution is something very low tech or just kind of outside the box, low budget."
"Being proactive has to be simple."
"We definitely need more of that interdisciplinary approach."

Chapters

00:00 Kenya's Cybersecurity Partnerships

03:24 Addressing Mobile App Security

07:13 Interview with Maretta Morovitz

11:35 Cyber Deception and Adversary Engagement

29:12 The Importance of Simplicity and Proactive Measures

30:07 Interdisciplinary Collaboration in Cybersecurity

31:06 Successful Collaboration in Deception Operations

34:44 Bringing Unique Perspectives and Skills to Cybersecurity

Follow Maretta Morovitz on LinkedIn: Maretta Morovitz

Follow MITRE on Twitter: @MITREcorp

Learn more about MITRE Engage:...