The Next Hacking Frontier: Private Clouds
Before the Labor Day long-weekend, I would like to conduct some fear mongering. Should I talk about the 9.1 percent unemployment rate? Nope. How about a double-dip recession? Nah. Bank of America going belly-up? No thank you.
Rather, let's talk about security, and more specifically, let's talk about the security ─ or lack thereof ─ in the private clouds you techies have been building.
Yesterday, I met with John Linkous, the chief security and compliance officer of eIQnetworks, an Acton, Massachusetts-based security vendor. While there have been several high-profile cases of public clouds being hacked, private clouds on Wall Street have remained ─ as far as I know ─ unaffected.
When I asked Linkous if he expected this trend to continue for the foreseeable future, he gave me a yes-and-no response. Basically, right now there is no reason for the hacking community to set its sights on Wall Street, because there isn't a Fabergé egg to be found, he says.
Even those cutting-edge hedge funds that have been developing internal cloud solutions haven't been keen on putting important information into those environments. But when you consider the leaps and bounds that have been made toward getting the buy side to be comfortable with the cloud, it's only a matter of time until the industry starts to put sensitive information into such environments.
Linkous used Microsoft's operating system as an example to illustrate his point. Back in 2000, Microsoft dominated the OS scene. Thus, there was more incentive for hackers to find the cracks in Windows. But as Microsoft has lost marketshare to the likes of Apple, it has created greater incentive for the attacking community to turn its attention on Apple's OS.
"I think that there will be a tipping point when enough critical data gets out there that's worth hacking," Linkous says. "Vendors haven't fully addressed those security concerns yet, and there's going to be a plateau when those attacks go like crazy and vendors will be forced to implement appropriate security controls. At the end of the day, what drives business? Security or functionality? It's functionality every time ─ security is an afterthought."
While Linkous has a dog in this fight, there's plenty of reason to believe what he's saying. If elite hackers can tap into the Department of Defense, surely they can get into a $2 billion hedge fund's private cloud.
So please take this thought with you into the three-day weekend: You are not nearly as secure as you think you are.
Have a great Labor Day!
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@waterstechnology.com or view our subscription options here: http://subscriptions.waterstechnology.com/subscribe
You are currently unable to print this content. Please contact info@waterstechnology.com to find out more.
You are currently unable to copy this content. Please contact info@waterstechnology.com to find out more.
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Printing this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@waterstechnology.com
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Copying this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@waterstechnology.com
More on Trading Tech
Ace high or busted flush? Digital Asset’s mixed fortunes mirror DLT adversity
The vendor hoped to remodel post-trade using blockchain technology—and it still might—but its bumpy progress raises questions over the future of DLT in finance.
This Week: BlackRock/Preqin, Trading Technologies, FIA Tech and more
A summary of some of the past week’s financial technology news.
Adaptive’s Aeron goes live on Microsoft Azure Marketplace
The messaging software used for building bespoke trading platforms is now available on Microsoft’s marketplace, making it accessible through major cloud providers.
Bloomberg, industry bodies push back on Cboe’s proposed OEMS rule change
Some industry bodies disagree with the options exchange’s proposal to carve its Silexx OEMS out of the SEC’s definition of an exchange facility and place it into a separate business line.
Waters Wrap: CME, Google and the pursuit of ultra-low-latency trading
CME Group and Google have announced Aurora, Illinois, as the location for the exchange’s new co-location facility. Anthony explains why this is more than just the next phase of the two companies’ originally announced project.
WatersTechnology latest edition
Check out our latest edition, plus more than 12 years of our best content.
Natixis refines in-house interoperability model
The French asset manager has refined its canonical data model over the last decade, as the interoperability movement continues to evolve.
Zeros and ones: Industry contemplates T+0 as the next step
With the North American transition to T+1 settlement complete, same-day settlement could be the next goalpost set, though skeptics are many.