CyberWire Daily - Andrea Little Limbago: Look at the intersection of the of humans and technology. [Social Science]

Episode Date: August 11, 2024

Enjoy this special encore episode: Computational Social Scientist Andrea Little Limbago shares her journey as a social scientist in cybersecurity. Andrea laments that she wishes she'd known there is no straight line between what you think you want to do and then where you end up going. Beginning her career in international relations and courted by the Department of Defense's Joint Warfare Analysis Center while teaching at New York University, Andrea began her work in cybersecurity. Her team was one of the first to start thinking about the intersection of cybersecurity and geopolitics and quantitative modeling. Andrea reminds us there are many paths and skills needed in cybersecurity and hopes she's opened some doors for others. We thank Andrea for sharing her story with us. Learn more about your ad choices. Visit megaphone.fm/adchoices

You're listening to the Cyber Wire Network, powered by N2K. of you, I was concerned about my data being sold by data brokers. So I decided to try Delete.me. I have to say, Delete.me is a game changer. Within days of signing up, they started removing my personal information from hundreds of data brokers. I finally have peace of mind knowing my data privacy is protected. Delete.me's team does all the work for you with detailed reports so you know exactly what's been done. Take control of your data and keep your private life Thank you. JoinDeleteMe.com slash N2K and use promo code N2K at checkout. The only way to get 20% off is to go to JoinDeleteMe.com slash N2K and enter code N2K at checkout. That's JoinDeleteMe.com slash N2K, code N2K. My name is Andrea Little-Limbago.

I am a computational social scientist. What I wish I had known is that there is no straight line between what you think you want to do and then where you end up going. Mine was very circuitous. And so, you know, I started off, you know, undergrad was a romance language and government major. So I really, again, getting back to my love of international relations, you know, I started there and then took about a year off, worked in Breckenridge, Colorado as a waitress, and you prepared for grad school. And then in grad school, it was political science, and you focus on international relations and methodology as my core components. And by methodology, that basically means modeling in a quantitative way. How do you model everything from your regime type democracies to authoritarian regimes to the relationship between military personnel and foreign direct investment.

After grad school, when I got my degree, I taught briefly at New York University, and then the Department of Defense reached out to me at a conference, and I chatted with them, and I ended up going to work at the Joint Warfare Analysis Center, which is in Dahlgren, Virginia, and ended up leading a team there of computational social scientists working on a broad range of factors. A lot of it was counterterrorism, but that's actually where I started getting into more of the cybersecurity angle. But we were one of the first teams to really start thinking about that intersection of cybersecurity and geopolitics and quantitative modeling. An important thing that it taught me working there was, you know, in academia, you have

not an endless amount of time, but you have a lot of time to thoroughly do your research, to double check your data, to do everything. You go work in the Department of Defense, and it's everything from, you know, we need an answer in the next hour to, you know, you get a couple of days to a couple of weeks. And so the time horizons really vary. And it initially is very, very uncomfortable to provide some sort of answer within an hour because you haven't been able to check all the data. There's always going to be all these assumptions, but you have to learn how to take what you know, provide the assumptions that are there and still give, you know, your best input that you can. And being able to turn that quickly

and make sure that also it's relevant to a higher audience as well, to more of an executive level audience, you know, it's actually a really tough skill. And being able to do research that is operationally relevant is, you know, extremely rewarding. I work on the geopolitics of cybersecurity. So I look at how technologies and security interact with what's going on in global events. What I love is doing research and helping support areas that I believe fundamentally are linked to our own national security and national security is linked to the preservation of democracy. That to me is just amazing. And it's areas that I love. And it's in an area that I think is one of the most important missions of our time right now.

And with democracy on the decline around the globe, there's, you know, we need more and more people looking at ways to help preserve democracy within this digital era that we find ourselves in now, because there isn't a playbook for it. And that's sort of one of my broader goals is to help inspire and encourage other folks with a similar kind of background to come into this area because we need more people that look at the intersection of humans and technology. And so that's where I like to focus and that's where I like to encourage others to come in as well. When I first really was in cybersecurity, I think the biggest challenge I had was, I just remember getting asked almost on a weekly basis, you know, what is a social scientist doing in cybersecurity? And when you keep getting asked that time and time again, you kind of start wondering, like, what am I doing here? You know, they weren't doing it in a malicious way. They were like, well, that seems weird. And so you do have to kind of question what you are doing in that industry. And I think we do struggle a bit as an industry to open the doors to more people from different disciplines.

And so justifying my existence within the industry, I think, was something that it took me a while to overcome. And I would say I still ponder it from time to time, but I'm always much more confident in my responses on that. And the great thing is I actually, over the last year or two, that question has stopped being posed. And I think it's because we're finally at a point where we're starting to see that there are humans behind all the technology. And given that, you need social scientists. So the challenge of knowing how you fit in was something that I struggled with quite a bit. with quite a bit. When people think of cybersecurity,

they still think of the hooded hacker. And while that's an important part of it, that's not the only job track that you can take. There's just so many different areas within cybersecurity. And we have a huge gap right now as far as having the skill sets and people in the workplace openings that are out there. So I would say get involved and read. You know, hopefully that I helped, you know, open doors to both the kind of research, you know, the integration of the more of the rigorous

social sciences and to think about cybersecurity, but opening the doors also just to broader disciplines and different people coming into the industry. Being part of that transition that and to think about cybersecurity, but opening the doors also just to broader disciplines and different people coming into the industry. Being part of that transition that makes cybersecurity much more accessible for everyone. Yeah, that'd be great if something along those lines happens. So we'll see. Thank you. AI and data products platform comes in. With Domo, you can channel AI and data into innovative uses that deliver measurable impact. Secure AI agents connect, prepare, and automate your data workflows,

helping you gain insights, receive alerts, and act with ease through guided apps tailored to your Data is hard. Domo is easy. Learn more at ai.domo.com. That's ai.domo.com.