Security Flaws in Trading Platforms
Summary
A recent report on security issues of popular trading platforms has attracted wide audience attention to this important aspect. Thanks to watchdogs such as IOActive, product owners’ platforms have experienced a stress test and problem areas have been rapidly tweaked to prevent much worse security incidents. For example, a trading platform supports DLL imports, used by algo traders, who install third-party plugins. The inclusion of this feature creates the risk that a malicious code could be injected together with the DLL, but the import of DLLs is an integral part of any application development. Brokers should carefully plan for compliance, confidentiality, integrity and availability of the trading platforms, and at the same time pursue a pragmatic approach and think about the overall user experience.