Are You Trading Stocks Securely? Exposing Security Flaws in Trading Technologies
Explore security vulnerabilities in electronic trading platforms and networks in this 51-minute Black Hat conference talk. Delve into the risks associated with the ease and speed of modern financial securities exchange, accessible to anyone with as little as $10. Examine issues like unencrypted communications, denial of service vulnerabilities, weak password policies, and authentication flaws. Learn about trading languages supporting DLL imports, privacy mode concerns, and hardcoded secrets. Discover the implications of inadequate anti-exploitation mitigations and root detection. Gain insights into responsible disclosure practices, the role of regulators and rating organizations, and receive practical recommendations for improving trading technology security.