As the field of information security matures, several significant barriers to progress that exist today will have to be removed if our capability to manage security risks is to improve. This presentation focuses on several of these, including the lack of truly effective channels to convey current knowledge to front-line practitioners; the division of the information security world into sub-cultures (vendor, researcher, enterprise, academic, and industrial) that communicate little with each other; the frequently non-constructive interactions that exist between security researchers and software vendors, and also between enterprise security professionals and other IT professionals; fragmentation among the available infosec certifications; and more.
