Latest news
A former senior software engineer for Chicago-based CME Group pleaded guilty to theft of trade secrets for stealing computer source code and other proprietary information while at the same time pursuing plans to improve an electronic trading exchange in China. Chunlai Yang admitted that he downloaded more than 10,000 files containing CME computer source code that made up a substantial part of the operating systems for the Globex electronic trading platform.
The government maintains that the potential loss was between $50 million and $100 million, while Yang maintains that the potential loss was less than $55.7 million.
Yang, 49, of Libertyville, who worked for CME Group for 11 years, pleaded guilty to two counts of theft of trade secrets. He faces a maximum penalty of 10 years in prison and a $250,000 fine on each count. Sentencing is scheduled for February 20, 2013.
Yang also agreed to forfeit computers and related equipment that were seized from him when he was arrested.
According to the plea agreement, Yang began working for CME Group in 2000 and was a senior software engineer at the time of his arrest. His responsibilities included writing computer code and, because of his position, he had access to the software programs that supported the Globex electronic trading platform, which allowed market participants to buy and sell CME Group products from any place at any time.
The source code and algorithms that made up the supporting programs were proprietary and confidential business property of CME Group, which instituted internal measures to safeguard and protect its trade secrets.
Between late 2010, and June 30, 2011, Yang downloaded more than 10,000 computer files containing CME computer source code from CME’s secure internal computer system to his CME- issued work computer. He then transferred many of these files from his work computer to his personal USB flash drives, and then transferred many of these files from his flash drives to his personal computers and hard drives at his home.
Yang also admitted that he downloaded thousands of others CME files. Court documents disclosed that he printed numerous CME internal manuals and guidelines describing how many of the computer files that comprise Globex operate and how these computer files interact with each other.
Yang also admitted that he and two unnamed business partners developed plans to form a business referred to as the Tongmei (Gateway to America) Futures Exchange Software Technology Company (Gateway), whose purpose was to increase the trading volume at the Zhangjiagang, China, chemical electronic trading exchange (the Zhangjiagang Exchange.)
Yang engaged in contract negotiations on behalf of Gateway with the Zhangjiagang Free Trade Board for Gateway to improve the trading platform for the Zhangjiagang Exchange.
The Zhangjiagang Exchange was to become a transfer station to China for advanced technologies companies around the world. Yang expected that Gateway would provide the exchange with technology through written source code to allow for high trading volume, high trading speeds, and multiple trading functions.
To help the China exchange attract more customers and generate higher profits, Gateway proposed to expand the Zhangjiagang Exchange’s software by providing customers with more ways of placing orders; connecting the exchange database’s storage systems and matching systems; rewriting the trading system software in the JAVA computer programming language; raising the system’s capacity and speed by modifying communication lines and structures; and developing trading software based on the FIX computer coding language.


Spotlight

Is it time to professionalize information security?
Posted on 23 May 2013. | The issue of whether or not information security professionals should be licensed to practice has already been the topic of many a passionate debate.

Review: Logging and Log Management
Posted on 22 May 2013. | Every security practitioner should be aware of the overwhelming advantages of logging and perusing logs for discovering system intrusions. But logging and log management comes with its own set of difficulties.

Experts highlight top data breach vulnerabilities
Posted on 22 May 2013. | Hidden vulnerabilities lie in everyday activities that can expose personal information and lead to data breach, including buying gas with a credit card or wearing a pacemaker.

A closer look at Mega cloud storage
Posted on 21 May 2013. | Once a novelty, nowadays many cloud storage services are fighting for their piece of the market in the virtual world. Mega offers 50GB of free space with great pricing on Pro accounts.

The CSO perspective on healthcare security and compliance
Posted on 20 May 2013. | Randall Gamby is the CSO of the Medicaid Information Service Center of New York. In this interview he discusses healthcare security and compliance challenges and offers a variety of tips.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.





