Skip to content

Playing Dirty w/o Cheating - Getting Banned for Fun

S CollinsM MuenchT Chothia

Investigates anti-cheat detection heuristics and server-side validation flaws across competitive online games, revealing how unusual play triggers bans.

Summary

Anti-Cheat Detection Heuristics and Telemetry

Competitive online video games deploy server-side behavioral analysis and client-side anti-cheat drivers to detect aimbots, wallhacks, and unauthorized memory modifications.

Manipulating Behavioral and Network Heuristics

Researchers analyze how game servers evaluate player inputs, camera movement acceleration, and network packet timing. By generating mathematically valid but statistically abnormal input sequences without memory modification, players can deliberately trigger false-positive cheat bans.

Protocol Reverse Engineering and Input Edge Cases

Deconstructing game networking protocols demonstrates flaws in server-side state validation, where unoptimized physics engines misclassify complex legitimate maneuvers as automated exploits.

Improving Detection Accuracy and Fair Play

Enhancing anti-cheat systems requires developers to combine statistical thresholding with contextual gameplay verification to reduce false-positive bans.

Related talks

Main Stage·37 min

  • DEF CON
  • AppSec
  • Date: Aug 2025
  • Location: Las Vegas

James 'albinowax' Kettle

James Kettle unleashes novel HTTP request smuggling and desync attack classes against modern web infrastructure, arguing for the retirement of HTTP/1.1.

http-request-smugglingappsecweb+2