According to Bruce Schneier, “the fundamental problems in computer security are no longer about technology; they’re about applying technology,” which is why a conference dedicated to the the economics of information security has a lot to say about where IT security is going.