Playing Dirty w/o Cheating - Getting Banned for Fun
Investigates anti-cheat detection heuristics and server-side validation flaws across competitive online games, revealing how unusual play triggers bans.
Summary
Anti-Cheat Detection Heuristics and Telemetry
Competitive online video games deploy server-side behavioral analysis and client-side anti-cheat drivers to detect aimbots, wallhacks, and unauthorized memory modifications.
Manipulating Behavioral and Network Heuristics
Researchers analyze how game servers evaluate player inputs, camera movement acceleration, and network packet timing. By generating mathematically valid but statistically abnormal input sequences without memory modification, players can deliberately trigger false-positive cheat bans.
Protocol Reverse Engineering and Input Edge Cases
Deconstructing game networking protocols demonstrates flaws in server-side state validation, where unoptimized physics engines misclassify complex legitimate maneuvers as automated exploits.
Improving Detection Accuracy and Fair Play
Enhancing anti-cheat systems requires developers to combine statistical thresholding with contextual gameplay verification to reduce false-positive bans.
Related talks
Main Stage·40 min
Julian Horoszkiewicz
Demonstrates rapid vulnerability discovery methodologies that uncovered seven zero-day local privilege escalation flaws in pre-installed OEM bloatware.
Main Stage·37 min
James 'albinowax' Kettle
James Kettle unleashes novel HTTP request smuggling and desync attack classes against modern web infrastructure, arguing for the retirement of HTTP/1.1.
Main Stage·20 min
Farzan Karim
Introduces Real-time Re-encryption (RRE), a technique that defeats commercial DRM and streaming paywalls across digital media platforms.


