The leading knowledge platform for the financial technology industry
The leading knowledge platform for the financial technology industry

A-Team Insight Blogs

Corvil Readies Artificially Intelligent Cyber Security Service

Subscribe to our newsletter

Financial analytics service provider Corvil plans to take its new Cara virtual cybersecurity service from beta mode to fully operational at the end of June, according to David Murray, chief business development officer at the company.

Cara is designed to meet security needs of electronic trading operations, to protect trading business against cyber attacks, and also to respond to concerns from regulators including the US Securities and Exchange Commission and the European Securities and Markets Authority about cyber attack risks.

The Cara service uses machine learning algorithms to detect vulnerabilities and cyber attacks on trading environments where transactions are processed.

“Cara learns what are normal and acceptable behaviors within a trading environment, as well as its own intelligence of what to look for. Because it actively learns, the longer it spends in the environment, the more it can identify anomalies and risk activities to be addressed, for response,” says Murray.

Cara’s artificial intelligence can also recognise the way a ransomware virus like WannaCry, which emerged as a threat on May 12, initiates scans of IP addresses to find vulnerabilities in machines, such as a lack of security patches that can stop its intrusion. Although few trading systems rely on Microsoft Windows, which is the system most vulnerable to WannaCry, the Cara service can detect such ransomware activity. Although trading networks tend to be segmented and protected, they are never completely immune to cyber attackers getting a foothold inside, according to Murray.

“We’re constantly running a machine learning algorithm to look at anomalies to baseline activity and allow security teams the information they need to further investigate the details and to respond,” he says.

Overall, Cara runs ongoing assessments, including user activity, to produce reports for firms’ security operations centers, or on a standalone basis, with scores of risks and vulnerabilities, according to Murray. Cara collects network communications from a trading system, without disrupting their path or slowing down the system. The service then analyses the communications traffic as it collects it.

“Because we know what to expect from all the trading protocols — we know all the market data technology and protocols that are used to talk back and forth with all exchanges globally, we have a very good understanding of the types of traffic and what’s taking place within these environments,” says Murray. “Cara can understand individual user activity. So we can balance and look at what’s happening from individual user accounts, because we can extract that information from the communication flow.”

Corvil has been working on Cara for about eight months to date. The company expects the service to be easy for its current customers to add and for new customers to implement. The European MiFID II regulation includes cyber security capability for trading environments, Murray notes.

Subscribe to our newsletter

Related content

WEBINAR

Recorded Webinar: Opportunities of new approaches to electronic trading

Challenged by legacy systems, less than ideal workflows and high costs, front-office trading teams lack the ability to adapt to clients’ evolving needs around integration, speed and multi-asset capabilities. They are also challenged by a capital markets environment characterised by legacy systems, shrinking margins and increased regulatory scrutiny. While these problems cause considerable friction in...

BLOG

Sponsored Blog: What Market Data Strategy Challenges Does the Buy-Side Face?

By Janelle Veasey, Head of Real-Time, Refinitiv, an LSEG business and John Mason, Group Head of Pricing Reference Services, Refinitiv, an LSEG business Although the new Refinitiv Connected Data survey shows that buy-side firms are making more progress on their digital transformation journeys than sell-side firms, the evolution of their market and reference data strategies...

EVENT

TradingTech Summit Virtual (Redirected)

Trading Tech Summit (TTS) Virtual will look at how trading technology operations can capitalise on recent disruption and leverage technology to find efficiencies in the new normal environment. The crisis has highlighted that the future is digital and cloud based, and the ability to innovate faster and at scale has become critical. As we move into recovery and ‘business as usual’, what changes and technology innovations should the industry adopt to simplify operations and to support speed, agility and flexibility in trading operations.

GUIDE

Regulatory Data Handbook 2021/2022 – Ninth Edition

Welcome to the ninth edition of A-Team Group’s Regulatory Data Handbook, a publication dedicated to helping you gain a full understanding of regulations related to your organisation from the details of requirements to best practice implementation. This edition of the handbook includes a focus on regulations being rolled out to bring order and standardisation to...