Skip to content

Cybersecurity Insights with Contrast CISO David Lindner | 11/8/24

By David Lindner, Chief Information Security Officer

November 8, 2024

Thought Leaders critical infrastructure ADR SIEM automatic updates

    
Cybersecurity Insights with Contrast CISO David Lindner | 11/8/24

Insight #1:  Time for a new SIEM? Make it ADR-compatible

When evaluating modern security information and event management (SIEM) solutions, prioritize those with robust integrations for Application Detection and Response (ADR). This ensures comprehensive security coverage, faster incident response and reduced complexity by combining the strengths of both SIEM and ADR.

 

Insight #2: Don’t blindly trust automatic updates for critical infrastructure

To mitigate the risks of automatic updates in critical infrastructure, organizations should demand greater transparency from vendors regarding update content and potential impacts. They should also implement robust testing procedures in staging environments before deploying updates to production systems.

 

Insight #3: Where’s your sense of humanity?

To improve cybersecurity posture, organizations should prioritize human-centered security design by understanding user behaviors, providing tailored security awareness training, and designing secure systems that are user-friendly and aligned with human workflows.
Thought Leaders critical infrastructure ADR SIEM automatic updates
David Lindner, Chief Information Security Officer

David Lindner, Chief Information Security Officer

David is an experienced application security professional with over 20 years in cybersecurity. In addition to serving as the chief information security officer, David leads the Contrast Labs team that is focused on analyzing threat intelligence to help enterprise clients develop more proactive approaches to their application security programs. Throughout his career, David has worked within multiple disciplines in the security field—from application development, to network architecture design and support, to IT security and consulting, to security training, to application security. Over the past decade, David has specialized in all things related to mobile applications and securing them. He has worked with many clients across industry sectors, including financial, government, automobile, healthcare, and retail. David is an active participant in numerous bug bounty programs.

Previous

October attack data: The Expression Language injection attacks that skipped past SAST/DAST/WAFs