Time to address AppSec issues no one wants to talk about.
Welcome to our first virtual conference, inspired by the values of our podcast, The Elephant in AppSec! Get ready for an event where bold opinions and top Application Security experts come together like toast and butter. Our mission is to explore a wide range of AppSec topics, delivering an engaging and educational experience for all attendees.

YouTube: https://www.youtube.com/@the-elephant-in-appsec

The Elephant in AppSec Conference

## Explore what’s broken in AppSec and how to fix it.

This track is full of bold insights and spicy takes that challenge the status quo.

Explore all the abstracts here 👉 <https://www.theelephantinappsec.com/schedule>

📆 Track 1 "General AppSec Topics" Schedule:

9:00 AM - 9:05 AM PST: Opening Word

9:05 AM - 9:35 AM PST: Tanya Janca - "Shifting Left Doesn’t Mean Anything Anymore"

9:40 AM - 10:10 AM PST: Kim Wuyts - "Compliance is overrated"

10:15 AM - 10:45 AM PST: Cassey Crossley - "Accountability in Application Development"

10:50 AM - 11:20 AM PST: Akira Brand - "Mycelium as the Path: How the Fungi Kingdom Guides us Toward Resilience in Our Cyber Programs"

11:25 AM - 11:55 AM PST: Chris Romeo - "Why the 'Secure by Design' pledge won't save us from AppSec failures"

12:00 PM - 12:25 PM PST: Dustin Lehr - "Building a Proactive Developer Security Culture - Can We Actually Make it Work?"

1:05 PM - 1:35 PM PST: Jacob Salassi - "Shift left sucks for SWEs: AppSec is a structured data problem"

1:40 PM - 2:10 PM PST: Expert Panel: Mel Reyes, Ariel Shin, Alina Yakubenko - "The Challenge of Scaling AppSec: Why It's Harder Than You Think"

2:15 PM - 2:45 PM PST: Aravind Sreenivasa - "My mistakes in building an AppSec team"

2:45 PM - 3:00 PM PST: Closing Remarks
