He is an internationally-recognized expert on cybersecurity law and policy. David's work uses computing and information empirical methods to understand the nature and character of cybersecurity risks. He uses scientific data in his legal and policy scholarship to examine how regulatory frameworks drive cybersecurity practices "on the ground." David's other areas of research include privacy, cybercrime, legal issues of cyberwarfare, and administrative law and regulatory theory. Prior to joining the Pitt faculty, David taught at the University of Connecticut and the University of Maryland. He also practiced cybersecurity and privacy regulatory law at Hogan Lovels (formerly Hogan & Hartson) and was previously a Postdoctoral Fellow at Yale Law School.