Duke University's Mary McKee recommended tackling cybersecurity using a "resource-based" approach.