Internet Pioneer Vixie On Incident Response

Incident responders need better tools and information to build a case against attackers, said Paul Vixie, an Internet pioneer, domain name system expert and security luminary. Vixie founded Farsight Security, which maintains a passive DNS database for incident responders at ISPs, network and system security solution providers, governments and businesses. The authoritative DNS data contains no personally identifiable information, but it can help responders determine the scope of a cybercriminal campaign and map out an attacker's prior activities. Cybercrime will never be stamped out under the current open standards governing the Internet, Vixie said. Here's why he believes incident response capabilities are necessary for all businesses and his predictions for how the security industry will evolve.