Hacking Stereotypes: Cybersecurity On The Screen

I never thought I would reference Rihanna, but as Nine Ball, the hacker in Ocean’s 8, she did garner quite the attention. Ocean’s 8 forms part of the ‘Ocean’ series of heist movies. This time with an all-women cast and crew. The plan: steal a diamond worth $150 million from the Toussaint necklace on the night of the Met Gala. They accomplish this using cybersecurity techniques such as social engineering and phishing. It’s an excellent depiction of what human error can lead to and the negative consequences it can have. The film succumbs to the usual tap-tap-tapping frantically by 9-Ball who was assigned the task of creating a blind spot at the Met Gala. It does seem highly unlikely that the Met Gala wouldn’t have precautions in place to prevent this from happening, given it’s one of the most attended shows by celebrities now.

Business Insider’s 2018 movie review noted “Each woman has a specific skill that makes her invaluable to the group. And, in some cases, these skills break down stereotypes. Take Nine Ball, the group’s hacker. It’s rare to see a woman take the tech role, let alone a woman of colour. Probably because, according to Wired, only 20 per cent of computer science majors are women, 5 per cent of whom are women of colour.”

The University of Tulsa adds that “Only 1 out of every 4 global cybersecurity workers identifies as a woman, according to 2022 data from Cybersecurity Ventures. Given the critical need, companies can do more to train, hire, and promote women in cybersecurity roles.” According to Cybercrime Magazine, cyber attack damages are projected to reach approximately $10.5 trillion per year by 2025, marking a 300 per cent rise from 2015 figures.

Gender diversity means women bring their “lived experiences,” bridging aspects of innovation that may be overlooked thanks to homogeneity. They also improve cross-team communications, and they give organisations a wider pool to draw from. This doesn’t simply benefit businesses. It establishes a base for mentorship, attracting the next generation to careers in cybersecurity.

We know Hollywood loves a good cyberattack. Flickering screens, rapid-fire typing albeit nonsensical, and lone geniuses saving the day from digital doom. But who are the heroes behind the keyboards? When it comes to portraying cybersecurity on screen, is the picture as diverse as the real-world threats we face? The short answer: not quite. The lone white male hacker, often a brooding loner or a quirky outsider, remains a dominant figure. Women and people of colour are frequently relegated to supporting roles with their technical expertise absent.

The Women in Cybersecurity 2022 Report published by Cybersecurity Ventures states cultural depictions of cyber criminals and the cybersecurity experts who protect against their attacks tend to exclude women. “If you look at media reports, you see dark stock images of men in hoodies, typing away in basements,” states the report. It also notes how gendered language has crept into the way cybersecurity gets talked about, for example, the term man-in-the-middle (MITM) attack. “Logos, wording, and branding in cybersecurity are often what we consider ‘masculine.’ We must change the perception and awareness of STEM fields to encourage gender diversity.” This lack of diversity isn’t just a missed opportunity for representation; it also has real-world consequences. Stereotypes discourage potential talent from entering the cybersecurity field.

But shows like Mr Robot have featured complex female characters who are integral to the cybersecurity narrative. Female characters like Darlene and Angela aren’t just sidekicks; they come with deep technical skills in coding, social engineering, and network manipulation making them instrumental to society’s success. Fueled by complex motivations, they harbour their vulnerabilities. The show doesn’t portray them as emotionally invulnerable ‘badass’ women. We see Darlene’s insecurities and anxieties, and Angela’s manipulative and dangerous side as she’s seduced by power.

Films like The Girl With The Dragon Tattoo showcase the talents of female hackers, even if the portrayal leans on traditional hacker stereotypes. Lisbeth Salander compromises the antagonist’s email encryption, likely through a targeted social engineering attack or by exploiting a vulnerability in the software. She then installs malware, maintaining stealth to avoid detection. With remote control established, she manipulates financial data to reroute funds to accounts under her control.

The truth is cybersecurity is a field that thrives on a multitude of perspectives. Social engineering means attacks on prey through cultural biases, complex security systems requiring diverse problem-solving approaches, and global threats that demand international collaboration.

In that case, what would a more accurate portrayal look like? Imagine a team of cybersecurity professionals where a young Latina excels at social engineering awareness training, a neurodiverse programmer develops an innovative intrusion detection system, and a seasoned mentor, regardless of gender or ethnicity, guides the team onward. This closely reflects the real tapestry of talent needed to combat an ever-evolving threat landscape.

See Jane’s spotlight, Entertainment Media is Changing the Equation for Women and Girls in Tech, reveals real social change can be influenced by entertainment media content. And to underscore that, See Jane’s study, The Scully Effect, is perceived as relevant to cybersecurity. Scully is regarded as one of the first multidimensional female characters in a science, technology, engineering, and mathematics (STEM) field to be featured on a popular television show, and the first to play a leading role. Her character is renowned for her objectivity, scepticism, confidence, and brilliance. She was a far cry from the typical white male in a lab coat. In the report, 63 per cent of women interviewed working in STEM said that the fictional character, Dana Scully (The X-Files), served as their role model.

As for the numbers, “We predict women will represent 30 per cent of the global cybersecurity workforce by 2025, and that will reach 35 per cent by 2031. This goes beyond securing corporate networks and includes IoT, IIoT and ICS security, and cybersecurity for medical, automotive, aviation, military defence, and others,” said Steve Morgan, founder of Cybersecurity Ventures and Editor-in-Chief at Cybercrime Magazine.

Hollywood has a powerful influence on how we perceive the world. Showcasing a more diverse range of cybersecurity heroes can inspire a new generation to enter the field, bringing their unique skills and perspectives to this critical line of defence. You wouldn’t think a TV show or a movie has that kind of impact but they do break stereotypes.

WHAT THE PROS SAID:

Now to the million-dollar question. Which movie would you say is the best representation of what hacking is? 

Believe it or not, there are actually a few good movies. One of the ones that I would say is Sneakers. By Robert Redford. The Matrix is a very good representation of hacking. In it, they actually have real-time hacking in seconds. Only the real nerds would know that. Then you have Mr. Robot which I was involved with, a television series, I helped with writing the first five episodes. Probably the most realistic depiction of the hacking universe.  – Ralph Echemendia, Founder, The Ethical Hacker

When I watch films and TV, I always wonder if they have an accurate portrayal of cybersecurity professionals. Are these depictions even remotely accurate?

They’re not even close. You can’t implement cybersecurity without being dependent on other departments. They are always around people, not isolated in a corner. Cybersecurity professionals are doing more of consulting lately. They need to integrate with people. As a woman, I also don’t wear a “hoodie” and hide my face. Lipstick suits me better! – Celia Mantshiyane, CISO, MTN South Africa