The Next Hacking Frontier: Private Clouds

Before the Labor Day long-weekend, I would like to conduct some fear mongering. Should I talk about the 9.1 percent unemployment rate? Nope. How about a double-dip recession? Nah. Bank of America going belly-up? No thank you.
Rather, let's talk about security, and more specifically, let's talk about the security ─ or lack thereof ─ in the private clouds you techies have been building.
Yesterday, I met with John Linkous, the chief security and compliance officer of eIQnetworks, an Acton, Massachusetts-based security vendor. While there have been several high-profile cases of public clouds being hacked, private clouds on Wall Street have remained ─ as far as I know ─ unaffected.
When I asked Linkous if he expected this trend to continue for the foreseeable future, he gave me a yes-and-no response. Basically, right now there is no reason for the hacking community to set its sights on Wall Street, because there isn't a Fabergé egg to be found, he says.
Even those cutting-edge hedge funds that have been developing internal cloud solutions haven't been keen on putting important information into those environments. But when you consider the leaps and bounds that have been made toward getting the buy side to be comfortable with the cloud, it's only a matter of time until the industry starts to put sensitive information into such environments.
Linkous used Microsoft's operating system as an example to illustrate his point. Back in 2000, Microsoft dominated the OS scene. Thus, there was more incentive for hackers to find the cracks in Windows. But as Microsoft has lost marketshare to the likes of Apple, it has created greater incentive for the attacking community to turn its attention on Apple's OS.
"I think that there will be a tipping point when enough critical data gets out there that's worth hacking," Linkous says. "Vendors haven't fully addressed those security concerns yet, and there's going to be a plateau when those attacks go like crazy and vendors will be forced to implement appropriate security controls. At the end of the day, what drives business? Security or functionality? It's functionality every time ─ security is an afterthought."
While Linkous has a dog in this fight, there's plenty of reason to believe what he's saying. If elite hackers can tap into the Department of Defense, surely they can get into a $2 billion hedge fund's private cloud.
So please take this thought with you into the three-day weekend: You are not nearly as secure as you think you are.
Have a great Labor Day!
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@waterstechnology.com or view our subscription options here: https://subscriptions.waterstechnology.com/subscribe
You are currently unable to print this content. Please contact info@waterstechnology.com to find out more.
You are currently unable to copy this content. Please contact info@waterstechnology.com to find out more.
Copyright Infopro Digital Limited. All rights reserved.
As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (point 2.4), printing is limited to a single copy.
If you would like to purchase additional rights please email info@waterstechnology.com
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (clause 2.4), an Authorised User may only make one copy of the materials for their own personal use. You must also comply with the restrictions in clause 2.5.
If you would like to purchase additional rights please email info@waterstechnology.com
More on Trading Tech
Asic probe piles pressure on ASX to deliver Chess replacement
But market insiders think late intervention by regulators could even slow down implementation.
Stakes raised for UK bond, EU derivatives tapes after Ediphy clinches win
The pressure is on for TransFICC, Etrading, Finbourne, and Propellant Digital, who are still vying to provide the UK’s fixed income consolidated tape after Esma awarded the EU’s tape to Ediphy and its partners.
Exchange M&A, US moratorium on AI regs dashed, Citi’s “fat-finger”-killer, and more
The Waters Cooler: Euronext-Athex, SIX-Aquis, Blue Ocean-Eventus, EDM Association, and more in this week’s news roundup.
LSEG officially sunsets Eikon
The exchange operator withdrew the platform from its product lineup this week.
Cloud Wars: Are EU and APAC firms really pining for homegrown options?
Waters Wrap: In the wake of tariffs and regional instability, there’s chatter about non-US firms lessening their dependency on the major hyperscalers. Anthony is not buying it.
Bloomberg, MTS expand portfolio trading to EGBs
The platform providers will follow Tradeweb with the extension of the popular credit protocol.
Doing a deal? Prioritize info security early
Engaging information security teams early in licensing deals can deliver better results and catch potential issues. Neglecting them can cause delays and disruption, writes Devexperts’ Heetesh Rawal in this op-ed.
Google gifts Linux, capital raised for Canton, one less CTP bid, and more
The Waters Cooler: Banks team up for open-source AI controls, S&P injects GenAI into Capital IQ, and Goldman Sachs employees get their own AI assistant in this week’s news roundup.