|
Information Security
< Previous Next >
Re: Sending FIX messages across internet
Ryan Pierce / Townsend Analytics Ltd.
20 May 2005 11:34AM ET> I would like to add "Replay attacks" here. A possible intruder could try
> to replay the encrypted trade, thereby at least disturb the
> communication.
My understanding is that SSL and TLS have mechanisms in place to prevent replay attacks. Assuming a strong ciphersuite is used, and both parties authenticate each other, I think it would be computationally infeasible to replay a trade and have it accepted by either party.
Now disruption of communications is a general risk when using an untrusted network, or any network. But I'd categorize this more broadly as a denial of service attack. Strong crypto can provide reasonable assurances of authentication and message integrity, but it's not going to stop someone who breaks into a telco closet with a pair of wire cutters.
Re: Sending FIX messages across internet
Ryan Pierce / Townsend Analytics Ltd. 20 May 2005 11:34AM ET
|
