Infrastructure vs. Application Security Spending

It's so true that we need to invest as much as we invest in securing the infrastructure