AppSec Conference: Shifting Left 2.0
Tags: infosec, applicationsecurity, webdev, softwaredevelopment
Published: 2021-06-21 20:49:56

---
title: AppSec Conference: Shifting Left 2.0
published: true
date: 2021-06-16 18:43:10 UTC
tags: infosec,applicationsecurity,webdevelopment,softwaredevelopment
canonical_url: https://blog.shiftleft.io/appsec-conference-shifting-left-2-0-4c8be827c508
---

#### Sessions to watch for developers and hackers

![](https://cdn-images-1.medium.com/max/1024/0*c5TKriOmkr7eBudr)<figcaption>Photo by <a href="https://unsplash.com/@austindistel?utm_source=medium&amp;utm_medium=referral">Austin Distel</a> on <a href="https://unsplash.com?utm_source=medium&amp;utm_medium=referral">Unsplash</a></figcaption>

Here at ShiftLeft, we are gearing up for [**Shifting Left 2.0**](https://www.mediaopsevents.com/shiftingleft?utm_campaign=SHIFTING%20LEFT%202.0&utm_source=Shift%20Left%20UTM), a two-day application security conference for developers and security practitioners on June 22–23, 2021. It has something security-related for everyone: dev team leaders, application security folks, and the developers who are ready to become security champions.

Here are a few sessions I am most excited about and what you should attend if you are a developer or a hacker. The conference is split into two days: June 22nd and June 23rd. All session times are in PDT. Now let’s get into it!

#### A Fireside Chat — How to Measure the Success of Your AppSec Program ( June 22nd 1:05 PM — 2:05 PM)

With [Arun Balakrishnan of ShiftLeft](https://www.mediaopsevents.com/shiftingleft/speaker/278749/arun-balakrishnan), [Paolo del Mundo of The Motley Fool](https://www.mediaopsevents.com/shiftingleft/speaker/284602/paolo-del-mundo), [Andra Lezza of Bulb](https://www.mediaopsevents.com/shiftingleft/speaker/284600/andra-lezza), and [Jimmy Xu of Trace 3](https://www.mediaopsevents.com/shiftingleft/speaker/289856/jimmy-xu).

Modern DevOps practices have changed the requirements of today’s AppSec programs. During this discussion, the panelists will exchange methods for measuring the success of their AppSec programs and the steps they’ve taken to improve them.

#### Intro to Code Analysis (June 23rd 10:10 AM — 10:40 AM)

With [Vickie Li of ShiftLeft](https://www.mediaopsevents.com/shiftingleft/speaker/278754/vickie-li) and [Suchakra Sharma of ShiftLeft](https://www.mediaopsevents.com/shiftingleft/speaker/278755/suchakra-sharma).

Writing code is hard. Writing secure code is even harder. Serious security vulnerabilities often stem from small programming mistakes. As developers, we can safeguard our applications by catching these mistakes in our own code. Performing a source code review is one of the best ways to find security issues in code. But how do you do it? In this talk, Suchakra and I will go through the basics of how to review your code for vulnerabilities and some tactics for performing an effective security code review on your application.

#### Beating the OWASP Benchmark (June 23rd 12:00 PM — 12:30 PM)

With [Suchakra Sharma of ShiftLeft](https://www.mediaopsevents.com/shiftingleft/speaker/278755/suchakra-sharma) and [Preetam Jinka of Shift Left](https://www.mediaopsevents.com/shiftingleft/speaker/291143/preetam-jinka).

The OWASP Benchmark project is an OWASP initiative designed to measure the accuracy of security scanners. But how does it work? In this talk, Preetam and Suchakra test ShiftLeft’s SAST tool against the OWASP Benchmark and discuss what the benchmark score of a product means, and how you should evaluate a security scanner.

#### What Is Lurking in Your Source Code? (June 23rd 12:35 PM — 1:05 PM)

With [Bruce Rosenthal of Exelon](https://www.mediaopsevents.com/shiftingleft/speaker/291144/bruce-rosenthal) and [Kit Wetzler of Shift Left](https://www.mediaopsevents.com/shiftingleft/speaker/291148/kit-wetzler).

Join this discussion between Bruce Rosenthal, Principal IT Security Architect at Exelon, and Kit Wetzler, VP of Sales at ShiftLeft. Bruce and Kit will discuss the implications of the recent supply chain attacks and what it means for organizations around the world. They will also explore other issues of concern to security teams such as insider attacks and what those teams can do for mitigation.

#### Why Every Member of Your Development Team Should Be a Security Expert (and How to Get There) (June 23rd 1:05 PM — 1:35 PM)

With [Malcolm McDonald of Hacksplaining](https://www.mediaopsevents.com/shiftingleft/speaker/289461/malcolm-mcdonald).

Lastly, I trust that I am not the only one when I say I am a big fan of the [Hacksplaining](https://www.hacksplaining.com/) website. In this talk, the creator of Hacksplaining, Malcolm McDonald, will speak about the pitfalls of researching security issues on the internet, and show how focused security training can make all the difference. We will also be giving away copies of Malcolm’s book: _Web Security for Developers_ throughout the conference.

**Shifting Left: 2.0** is entirely online and free to register [here](https://www.mediaopsevents.com/shiftingleft?utm_campaign=SHIFTING%20LEFT%202.0&utm_source=Shift%20Left%20UTM). See you there!

* * *