Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Password Managers for Firefox | Main | WikiLeaks and Data Loss Prevention »

Illegal Hacking, Insider Trading and the Definition of Deceit

If someone breaks into a computer system and steals information, does it entail deceit? That seems to be the question before the United States Court of Appeals for the Second Circuit, in New York in the case of a Ukranian resident who earned $296,456 by using illegally gained insider information, according to the New York Times. The NYT notes loop hole in American securities law:

A person who legally obtains insider information — as a corporate official or an investment banker, for example — will almost certainly break the securities law if he or she trades on the basis of that information before it is made public.

But it is far less clear that someone who illegally gets their hands on such information will have violated the securities laws by trading on it.

The problem is the law requires some form of deception and the SEC lawyers on the case are essentially left to argue that the attacker "deceived" the computer. Thus, the philosophical question, can a computer be deceived? HAL of 2001: A Space Odyssey had a famously bad reaction to deception but what about simple devices storing information?

One take on this is that the deception wasn't against the computer but against the market where all the participants are presumed to be following the rules and using non-public information to make trade decisions constitutes a deception of others in the market.

A more interesting argument, at least from my non-lawyer perspective, is to argue that computers are an extension of our own agency, that is they do what we program them to do and so are something of a middle-man in the deception process. It's not unheard of to assume non-human things can have some rights of humans (e.g. corporations can own property) why not extend some degree of "deceptability" to programs? What can of worms would such a move open?

The case against the Ukrainian resident isn't over yet and the SEC still has a chance to make some other argument for insider trading but the bigger question I think is the agency of computer systems we design. That won't go away with the case.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/636

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net