An area concerned with protecting hardware or software against theft or malicious or accidental behavior - often by brought on external parties - that would damage or corrupt the hardware or software.

learn more… | top users | synonyms

-6
votes
2answers
83 views

Is it definitely impossible for a user to alter data stored server-side in an online game?

Does storing game data server-side definitely prevent cheating related to that data (by altering it, et cetera)?
2
votes
3answers
59 views

Core code obfuscation and scripting

I am currently developing a 2D multiplayer game in Java and I would like to use Lua to define clientsided visual animations. Although this sounds like a reasonable idea to keep the core Java code to a ...
0
votes
1answer
101 views

Obscure primitive data types against cheating [closed]

im trying to create lightweight value obscurer, against possibility to blatantly change primitive values in memory editor. Such as cheat engine. Here's what i have to far. /// <summary> /// ...
1
vote
3answers
123 views

How can I prevent P2P connections from leaking player IP addresses?

There's a common issue in multiplayer PC games like the older versions of Call of Duty where any connected player in a match can easily sniff the game packets and read the IP addresses of all the ...
0
votes
0answers
20 views

How to verify POST data is sent from Android app with correct SHA1 signature? [duplicate]

Recently my game has been hacked and one user submitted an impossible score to the server. The score was submitted with a verified checksum, and correct data. I'm convinced that the user must have ...
8
votes
2answers
279 views

Should I use secure WebSockets for a game?

Is SSL necessary for a web game? I'm using Node.js with socket.io. Without it, when using unsecured networks someone on the LAN could change commands being sent to the server and "take over" a player....
4
votes
1answer
231 views

Should I encrypt my multiplayer network traffic?

My plan has been to use RSA to exchange AES session-keys with a client, which is then used for all the usual in-game stuff. Clients never connect with each other, all communication is client to server ...
0
votes
0answers
49 views

multiplayer/network security and guidelines

I am about to start programming a multiplayer game that uses TCP to transmit data. Just sending data, prozessing data on the server and displaying results on the client isnt that complicated i guess. ...
0
votes
0answers
112 views

Coding against packet injection?

So suppose a game is such that when a player clicks a button a packet is sent to the server with some parameters. And let's say only one of the players in a room can click the button and it's disabled ...
0
votes
1answer
90 views

How to design game server to mitigate DDOS attacks [closed]

I'm in the design phase of a turn based game with low load on the server (<1 message every 10 seconds per user, <50'000 users at a time). The game is multi-platform. The protocol has not been ...
1
vote
0answers
80 views

Security-minded design patterns / paradigm for client/server application

I am working on a client/server application and am starting to take it from proof-of-concept to actual implementation. The client is an Android application and the server is in PHP. In similar ...
1
vote
1answer
76 views

Ways I can identify fraudulent customers / users for an upcoming game? [closed]

I'm trying to figure out ways I can identify potential fraudulent customers and users for an upcoming project. Similar to how major game publishes track and detect users who "hack" or "bot". The only ...
45
votes
10answers
9k views

How to detect and prevent abuse (botting) of online game API?

I have been ocassionally working on a game idea in my free time. The gameplay and content renders it to be implemented as a online multiplayer game built with well established web technologies. You ...
1
vote
1answer
208 views

NLua - How to implement Roblox like function security?

Roblox uses Normal Identities, basicly they assign a lua block/object to a certain number. They use 2 for Scripts and LocalScripts, which can only use non-secured functions, while the command bar can ...
1
vote
1answer
218 views

How to securely retrieve game stats from clients in a p2p game network?

I'm working on a P2P game and I know I should never trust the clients. I my architecture, there is a "Master Server" that stores game room (host) informations. Players can create their own rooms (...
-1
votes
2answers
69 views

Protecting tilesets [duplicate]

I have a game and my tilesheets are placed in the images/ folder. If a user edits the tilesets, they can make them transparent (I use white as my transparent color on them) and in game basically ...
1
vote
0answers
43 views

Ensure packet owner from connection is the authentic user [duplicate]

In a multiplayer game, how can you be sure that the IP from a packet is the real IP? By spoofing I could send, for example, a "suicide packet" which tells the server that the owner of said packet ...
3
votes
1answer
176 views

game mod security question

So I'm in the process of building a game in C++ for the engine and Python for behavior and moddability. One of the planned major features is that when the game client connects to a game server with ...
0
votes
2answers
144 views

What are the security implications of this method of tracking countdowns?

Consider a multiplayer (client/server) game where you initiate the construction of some building. Let's assume construction will complete after 60 minutes. My plan for dealing with this information ...
3
votes
1answer
247 views

Obfuscating Monogame assets

I'm obfuscating spritesheets. I've already encrypted the .txt file dictionaries. Now I'd like to perform binary serialization on the image files. Texture2D does not allow for this though, probably ...
-1
votes
1answer
1k views

Distributed Multiplayer Game Server Architecture [closed]

I'm programming a multiplayer game for mobile phones.I'm working on a distributed server architecture for handling lots of concurrent players. Here is my architecture on my mind: Some questions ...
0
votes
2answers
420 views

MMORPG design question: Storing a tile map on the client computer, security concerns [closed]

in my game the client logs in and receives a map made of tiles (they differ in height and terrain type) from the server. I'm storing these tiles in a SQLite database on the client. The next time the ...
0
votes
1answer
113 views

Console vulnerabilities in javascript-based game [closed]

Been toying around with a basic browser-based game for a while now, and getting deep into the vulnerabilities of client-side script. I know enough to understand that no client-side script is ever safe....
1
vote
3answers
314 views

Algorithm for securing a retro password system

For a game I am working on, one of the build targets is the Unity Webplayer, which does not support saving file I/O at all. However, as it's an action/adventure game based on Zelda 2: The Adventure ...
0
votes
3answers
222 views

Securing game plugins / mods for java

I am looking into using Java to write a game core, then writing the game logic separate either in Java, or using something like Python. This way I open up the ability for any future users to modify ...
-2
votes
1answer
174 views

How to secure Pacman game for making it fool-proof enough to keep hackers away? [closed]

We have made an online game very similar to Pacman. The idea is to award top scorers with various incentives and prizes. But at the end of the day, we need to keep hackers at bay so that our game app ...
4
votes
2answers
268 views

What's the current preferred method for serving/storing game data on html5 games

Given all the recent improvements on web platform (webgl, websockets, etc.), it should be now possible to see great games on web. However my biggest concern so far has been around serving and storing ...
5
votes
3answers
369 views

How can a web game store points online without giving the user the possibility to do the same call but with more points? [duplicate]

Imagine I have an HTML5 web game where the user can get points by doing certain activities. The game can be played offline, so there's not necessarily a live internet connection (note: this makes this ...
2
votes
1answer
510 views

Are frequent game updates a solution for preventing multiplayer cheating?

I'm creating a game on Android where the enforcement of rules can only take place on client side (I can't shift it to server side...think aimbotting but in my case I wouldn't even be able to use ...
5
votes
1answer
497 views

P2P card game: Shuffling without knowing the final order?

So, I am conceptualizing a P2P trading card game. The issue is the network: knowing the identity of a card is giving a major advantage, so both clients need enough information about a card that they ...
2
votes
1answer
348 views

How far should I go in securing Groovy mod scripts?

I am developing a game in java and plan to embed the Groovy script engine to allow for more robust modding options. This comes at a price, of course. Groovy can access anything java can by default, ...
1
vote
3answers
640 views

How to prevent attackers from compromising multiplayer game servers?

Consider a relatively small multiplayer game server, written by an individual or a small company. Some malicious user wants to boost their character stats by a factor of 100. What paths of attack ...
6
votes
3answers
373 views

How to make sure user is running the newest version of mmo client?

In typical mmorpg game, you have a launcher and a client. You first run the launcher to update the client, then you run the client. In every mmo I tried if you run a client without updating first (if ...
0
votes
1answer
276 views

Windows Phone XNA guarding storage data

For a typical windows phone game where storage files could contain high scores or in-game currency data, how does one go about protecting these files from user tampering?
0
votes
1answer
146 views

Would a custom mod built for RakNet be automatically usable with Unity?

Context: I'm interesting in developing a security module for servers that handle mobile games, and I'd like it to be usable by the most people possible. So I'm trying to decide what server software I ...
2
votes
4answers
2k views

Sending high scores to a web server in an open source game

I've never dealt with sending/receiving data from web servers in my games, so I absolutely have no idea how to do this. I tried googling for a good solution but couldn't find anything satisfying. I ...
24
votes
3answers
3k views

How do I protect my game with CD key / serial number?

So I've decided I want to keep pirated copies of my XNA game from accessing official game servers (which are moderated, so people who paid for the game will get the best experience) by disconnecting ...
18
votes
2answers
5k views

How should multiplayer games handle authentication?

I've been lurking around to understand how an authentication system would work in games, but after many searches, it seems that working with ssl/certificates could be a little complicated for just a ...
22
votes
9answers
1k views

Techniques to prevent non-official clients in network gaming?

In multi-player network games, what techniques exist to try to ensure that users are connecting with the official client application, and not some hacked client app? I realise there is probably no ...
1
vote
4answers
632 views

Protecting the integrity of a game state while minimizing amount of data sent

I'm developing a multiplayer game in PHP/jQuery, and naturally have to be wary of any sort of data coming from the client. At present, I have tables of data representing the map (2D roguelike), ...
10
votes
5answers
4k views

How do I protect sending scores from HTML5 games to my server

On backend I am using java. I have a game in HTML5; when user completes it I sends an Ajax call to save the score to database. Now, someone can easily use tools like Fiddler and firebug to modify this ...
28
votes
6answers
7k views

Anti-cheat Javascript for browser/HTML5 game

I'm planning on venturing on making a single player action rpg in js/html5, and I'd like to prevent cheating. I don't need 100% protection, since it's not going to be a multiplayer game, but I want ...
4
votes
3answers
2k views

Prevent Multiplayer Cheating

I am almost complete developing a small indie-style multiplayer game. While I intend to allow people to cheat in single-player, this is obviously not acceptable in multi-player. Does anyone know of ...
8
votes
4answers
364 views

Is there any way to verify the GPS location data received from client?

The answer to this question may be "NO" but it's quite important so I think I might as well ask. This should be a problem for all client-server location-aware games where player locations in the ...
4
votes
2answers
531 views

game multiplayer service development

I'm currently working on a multiplayer game. I've looked at a number of multiplayer services(player.io, playphone, gamespy, and others) but nothing really hits the mark. They are missing features, ...
2
votes
2answers
1k views

How to implement physics and AoE spells in an MMO game?

I'm making a game which will be completely centered around PVP battlegrounds and arenas. Think something like WoW, but with the RPG part removed. There will just be a lobby, where you can join a ...
10
votes
3answers
2k views

Is knowledge of hacking mechanisms required for an MMO?

Say I was planning on, in the future (not now! There is alot I need to learn first) looking to participating in a group project that was going to make a massively multiplayer online game (mmo), and my ...
10
votes
2answers
2k views

Authentication for a multiplayer game via sockets

I'm implementing a custom binary protocol for a new multiplayer game I'm working on. Its a turn-based strategy game so timing doesn't really matter. I've currently got the basic data sync portion of ...
12
votes
6answers
8k views

How to fight against memory editing cheat software? [duplicate]

What is the best way to protect run-time memory from such software? We just published an online game (written on AS3, Flash, published on a social network), and pretty much all of the players got ...
28
votes
5answers
5k views

How can I protect my save data from casual hacking?

What options are there for saving game data in a secure manner? I'm interested in solutions specifically tailored for C++. I'm looking for something that is fast and easy to use. I'm only concerned ...