07 Jul 2009
A Russian programmer has been arrested on charges that he illegally copied proprietary source code from his employer.
Sergey Aleynikov, a former computer programmer at Goldman Sachs, is accused of stealing the company's computer trading software shortly before leaving for a job with a rival firm.
The code was described in the affidavit as: "A computer platform that allows the financial institution to engage in sophisticated, high-speed, and high-volume trades on various stock and commodities markets.
"Among other things, the platform is capable of quickly obtaining and processing information regarding rapid developments in these markets. The financial institution believes that certain features of the platform, such as the speed and efficiency by which it obtains and processes market data, give the financial institution a competitive advantage among other firms that also engage in high-volume automated trading."
Aleynikov is accused of uploading the 32MB of code to a remote server in Germany. He has reportedly claimed that the upload was a mistake, and that he thought they were open-source files.
Aleynikov was caught because of the IT security procedures followed by his employer. While he allegedly made every effort to cover his tracks by deleting records of the upload, he was not aware that his employer ran a secret backup program that recorded every action of its employees.
These kinds of software backups are becoming increasingly common, particularly at companies in high value areas like the financial industry.
The majority of data theft is carried out from within companies rather than by outside hackers, and organisations are focusing less on building impenetrable firewalls and more on monitoring data flows.
Latest stories from Security
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
Orange and Intel talk us through the ins and outs of their San Diego smartphone
Connect with V3.co.uk
The wrong printers, for the wrong tasks on the wrong contracts
Who leads the BI pack and who should we be watching out for?
Graduate Developer / Software Developer (.Net, VB.Net...
PHP Developer / Web Developer (PHP4/5, Object Orientated...
Web Games Designer – Gibraltar Web Games Designer...
An exciting opportunity for a Systems / Business Analyst...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Network body language
Most employees do not realise that their day-to-day use of IT in the workplace displays similar characteristics to body language and can be profiled in the same way. The way we use applications and internet access, the types of sites we access and the times of day we do certain things mirror the characteristics of physical body language, and can look just as out of place when we do something different or outside of a comfortable routine. For example, if an employee is about to resign and begin work for a competitor, his or her network behaviour during the weeks prior to giving notice often follow consistent patterns, but a pattern that in turn differs from their normal content day-to-day activities. In the current climate, network body language analysis in conjunction with security measures such as identity and access management can provide a valuable early warning of malicious or criminal activity, such as accessing and downloading valuable data and intellectual property with a view to stealing it or selling copies.
Posted by: Stuart Hodkinson, UK general manager, Courion 08 Jul 2009
Definition of "Source Code'
Thank you for an informative article. As an attorney in private practice I have represented individuals working in the software and computer engineering professions. Unfortunately I have never been able to locate a detailed definition of the term "source code".Could you provide some standard references?
Posted by: Peter Luria 07 Jul 2009