IARPA's program manager explains how she hopes the research agency can make "human factors" a weakness of cyber attackers, too.