It takes time for investigators to figure out how an exploit on a system worked, and how to fix it. Dr. Dobb’s Journal reported on a talk at the Black Hat conference by security consultant Kevin Mandia on the arms race between malicious hackers and those who oppose their efforts. Right now, it looks like the black hats are winning. Mandia claimed investigations into attacks take between 5 and 8 days on average to find the problematic code being used. He attributed this to an increase in sophistication in the tools being used to craft the attacks. Full Story