Farsight Security To Relaunch Security Information Exchange at Black Hat USA

PRESS RELEASE

SAN MATEO, Calif.July 28, 2015, Farsight Security, Inc. announced today that it will debut its newly expanded flagship Security Information Exchange™ — the world’s largest threat intelligence information technology platform — at Black Hat USA 2015, taking place August 1-6, 2015, at the Mandalay Bay Convention Center in Las Vegas, Nevada. With the addition of four new technologies, Security Information Exchange provides security professionals an unprecedented view of the rapidly changing Internet.

Farsight’s Security Information Exchange aggregates, filters and broadcasts the world’s largest, most diverse, real-time Internet information so security professionals can more accurately and quickly identify, map, and protect from cybercriminal online activity. Collected from Farsight’s 500+ global sensors, the Security Information Exchange streams more than 200,000 new observations per second.

The Security Information Exchange and its latest technologies — Newly Observed Hostnames, DNS Changes, DNS Errors and NXDomains — will be unveiled at the Farsight Security booth #IC3, located in the conference’s Innovation City exhibit area.

“Nothing happens on the Internet, whether for good or ill, without DNS — the Domain Name System. With proper data conservation, DNS can be an extremely rich source of information on Internet-related crime. Last year, we released Newly Observed Domains to provide real-time insights on new domains since most new domain names are created for malicious intent, then quickly used and thrown away,” said Dr. Paul Vixie, Farsight Security CEO. “Farsight Security was founded by the world's foremost DNS experts and we operate the world's largest DNS telemetry network — the Security Information Exchange. Today, we're announcing a deeper version of Newly Observed Domains, as well as three related SIE broadcast channels, to help our customers get better visibility and leverage on criminal use of the Internet.”

Overview of the New Security Information Exchange Premium Channels

The four new capabilities available from Farsight’s Security Information Exchange include:

Newly Observed Hostnames:

Tracks new hostnames, or fully qualified domain names (FQDNs), when they are first unveiled. This real-time knowledge allows organizations to watch for and discover infringing domains and malicious host names targeting their users.

DNS Changes:

Tracks changes to domain name configurations, such as when a new domain is created or an existing domain moves to a new IP address, uses different name servers, or migrates to IPv6. This real-time knowledge on a host-by-host basis enables operational capabilities to detect domain hijacking and unexpected DNS changes.

DNS Errors:

Tracks the domain names people are trying to resolve but cannot. This real-time knowledge includes all available data about unsuccessful DNS queries, including the SERVFAIL and REFUSED messages, that is otherwise difficult to obtain for the operational monitoring of name servers.

NXDomains:

Tracks the “No Such Domain” responses people get when failing to reach domains. This real-time knowledge provides the ability to empirically characterize user mistakes and identify potentially valuable brand protection opportunities with similar domain names.

“Domain Name System (DNS) activity reveals much about domain registration and host resolution patterns that can provide valuable threat indicators. Farsight Security provides this insight to enterprises, with ability to handle and serve large data sets backed by leadership with long experience in DNS expertise. Today’s announcement further demonstrates its commitment to capitalizing on these strengths to help its customers enhance and expand threat defense,” said Scott Crawford, Research Director, Information Security, 451 Research.

In a separate announcement today, Farsight Security announced that Dr. Vixie will present “Targeted Takedowns: Minimizing Collateral Damage Using Passive DNS” at the Black Hat USA 2015 conference Wednesday August 5th, 2015 at 3 PM PT.

Pricing & Availability

DNS Changes, DNS Errors, Newly Observed Hostnames, and NXDomains are available by subscription as Premium Channels on Farsight’s Security Information Exchange (SIE). For SIE’s complete channel guide, please visit here. For more information on subscription services, contact a Farsight Security account executive at [email protected] or call +1-650-489-7919.

About Farsight Security, Inc.

Farsight Security provides the world’s largest real-time actionable threat intelligence information on how the Internet is changing, with more than 200,000 observations per second. Leveraging proprietary technology purpose-built to manage the volume of data and real-time analyses, Farsight provides security teams with the Internet’s view of an organization’s web presence and how it is changing, whether it’s done purposely, inadvertently, or maliciously. The world’s most security conscious organizations use Farsight for their real-time threat intelligence information. Contact us now to learn more. For more information, visit our website or follow us on LinkedIn, Twitter and Facebook.