BEGIN:VCALENDAR
PRODID:-//Google Inc//Google Calendar 70.9054//EN
VERSION:2.0
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:44CON 2026
X-WR-TIMEZONE:Europe/London
BEGIN:VEVENT
DTSTART:20260917T150000Z
DTEND:20260917T155000Z
DTSTAMP:20260624T151157Z
UID:42rnal9tj58qp8uv3d00t20b27@google.com
CREATED:20260624T102416Z
DESCRIPTION:Before I was a security engineer\, I built market-making eng
 ines and low-latency trading systems in C++. Order management\, execution r
 outing\, exchange connectivity\, all running in environments where a micros
 econd of latency or a single mishandled edge case could cost real money in 
 real time.\n\nThat background broke my brain in ways that turned out
  to be useful for security. When you have spent years thinking about race c
 onditions\, memory layout\, state machines under adversarial conditions (th
 e market is adversarial)\, and systems that must never fail silently\, you 
 see attack surfaces and defensive gaps that most security engineers walk pa
 st.\nThis talk covers the specific lessons from building trading infrastr
 ucture that changed how I approach security engineering: how thinking about
  latency-sensitive systems reveals timing-based attack surfaces that scanne
 rs will never find\; why financial systems' approach to state management an
 d auditability is a better model for security logging than what most SOCs a
 ctually deploy\; how exchange protocol design (FIX\, binary protocols\, cus
 tom wire formats) teaches you more about parsing vulnerabilities than any w
 eb app pen test\; and why the failure modes of high-frequency systems map d
 irectly onto the failure modes of security automation at scale.\n\nT
 his is not a finance talk. This is a talk about what happens when someone t
 rained to think in microseconds and failure modes starts looking at your in
 frastructure with an attacker's mindset and a systems programmer's understa
 nding of what is actually happening at the metal.
LAST-MODIFIED:20260624T150927Z
LOCATION:Track 1
SEQUENCE:0
STATUS:CONFIRMED
SUMMARY:What Trading Systems Taught Me About Breaking (and Defending) Produ
 ction Infrastructure – Mert Satilmaz
TRANSP:OPAQUE
END:VEVENT
END:VCALENDAR