The information security industry is profoundly ineffective at preventing security incidents. Major breaches of increasing severity continue to occur, often without major detriment to the victim. If the multi-billion dollar information security industry constantly fails to protect organizations, how can we succeed moving forward? What does the future hold for our industry? These topics (and more) will be covered and discussed in this 20-minute session.

David has extensive experience in many areas of information security. Beginning his career as a Network Security Analyst, David monitored perimeter firewalls and intrusion detection systems to identify and neutralize threats in real time. After moving into the world of penetration testing, David led the security assessment and software development teams at Redspin as its CTO & VP of Professional Services. As of 2015, David has been CISO of AppFolio, managing SecOps and AppSec blue teams. David has been a speaker at ToorCon, LayerOne, DEF CON, NolaCon, THOTCON, BSides Las Vegas, BSides Los Angeles, and BSides Seattle.

Recorded at NolaCon 2017