The leading knowledge platform for the financial technology industry
The leading knowledge platform for the financial technology industry

A-Team Insight Blogs

Corvil Readies Artificially Intelligent Cyber Security Service

Financial analytics service provider Corvil plans to take its new Cara virtual cybersecurity service from beta mode to fully operational at the end of June, according to David Murray, chief business development officer at the company.

Cara is designed to meet security needs of electronic trading operations, to protect trading business against cyber attacks, and also to respond to concerns from regulators including the US Securities and Exchange Commission and the European Securities and Markets Authority about cyber attack risks.

The Cara service uses machine learning algorithms to detect vulnerabilities and cyber attacks on trading environments where transactions are processed.

“Cara learns what are normal and acceptable behaviors within a trading environment, as well as its own intelligence of what to look for. Because it actively learns, the longer it spends in the environment, the more it can identify anomalies and risk activities to be addressed, for response,” says Murray.

Cara’s artificial intelligence can also recognise the way a ransomware virus like WannaCry, which emerged as a threat on May 12, initiates scans of IP addresses to find vulnerabilities in machines, such as a lack of security patches that can stop its intrusion. Although few trading systems rely on Microsoft Windows, which is the system most vulnerable to WannaCry, the Cara service can detect such ransomware activity. Although trading networks tend to be segmented and protected, they are never completely immune to cyber attackers getting a foothold inside, according to Murray.

“We’re constantly running a machine learning algorithm to look at anomalies to baseline activity and allow security teams the information they need to further investigate the details and to respond,” he says.

Overall, Cara runs ongoing assessments, including user activity, to produce reports for firms’ security operations centers, or on a standalone basis, with scores of risks and vulnerabilities, according to Murray. Cara collects network communications from a trading system, without disrupting their path or slowing down the system. The service then analyses the communications traffic as it collects it.

“Because we know what to expect from all the trading protocols — we know all the market data technology and protocols that are used to talk back and forth with all exchanges globally, we have a very good understanding of the types of traffic and what’s taking place within these environments,” says Murray. “Cara can understand individual user activity. So we can balance and look at what’s happening from individual user accounts, because we can extract that information from the communication flow.”

Corvil has been working on Cara for about eight months to date. The company expects the service to be easy for its current customers to add and for new customers to implement. The European MiFID II regulation includes cyber security capability for trading environments, Murray notes.

Related content

WEBINAR

Upcoming Webinar: Infrastructure monitoring: mapping technical performance to business performance

Date: 1 July 2021 Time: 10:00am ET / 3:00pm London / 4:00pm CET Duration: 50 minutes It’s a widely recognized truth that if you can’t measure something, you can’t improve its performance. As high-performance connectivity technologies have established themselves in the mainstream of financial firms’ trading architectures, the ability to monitor messaging and data infrastructures...

BLOG

RegTech Summit Goes Global as A-Team Launches Singapore Event in November

It’s official. Due to popular demand, A-Team Group is expanding its highly successful RegTech Summit conference series with an event in Singapore in the autumn. With lead sponsorship from Solidatus confirmed, A-Team is now formulating the agenda, recruiting speakers and discussing participation opportunities with sponsors and exhibitors. A-Team’s RegTech Summit APAC will take place on...

EVENT

RegTech Summit New York City

Now in its 5th year, the RegTech Summit in NYC explores how the North American financial services industry can leverage technology to drive innovation, cut costs and support regulatory change.

GUIDE

Regulatory Data Handbook 2020/2021 – Eighth Edition

This eighth edition of A-Team Group’s Regulatory Data Handbook is a ‘must-have’ for capital markets participants during this period of unprecedented change. Available free of charge, it profiles every regulation that impacts capital markets data management practices giving you: A detailed overview of each regulation with key dates, data and data management implications, links to...