Derek Fisher has been working in application security for over a decade, where he has seen both security successes and failures first hand.