Online Security - The Good, the Bad, and the Crooks

Security eBooks

Game Security
The Good, the Bad,
and
The Crooks

Steven Davis

steve@free2secure.com
Games, iGaming, and Gambling +1.650.278.7416

Security eBooks

What is security?
Encryption?
Firewalls?
Access Control?

Etc.
Etc.
Etc.


Security eBooks

Security is…

!
ws
No
Ne
e tl osi
ng
th
mo
in

ney
ng
ei
tb
No

Usually

Security eBooks

Security is doing whatever it takes to
make your game secure

Business, Game Design, Technology…
Anything


Security eBooks

Security is People, not
Technology


Security eBooks

The Bad Guy wants
to Win!
• Make Money
• Get Free Stuff
• Stroke Ego –
– High Score/Leaderboard
– Compete/Cheat
– Fame as Hacker

and he doesn’t care how

Security eBooks

– Play with Friends

”
(your level restrictions

tly
en
& character
er equipment may make
iff
this impossible)
“D

– Limited Time
g
yi n

– Your Game is Boring!
p la

“I want the good stuff”
s
er
ay
Pl

The Customer
is often Right!

Security eBooks

• Onerous
security
procedures
• Security is not
their job!
• If people break
security, it is
OUR fault, not
Its hard to be good theirs


Security eBooks

business, there is a thief who
… if there is value in your
Crooks

will happily loot it.
• Want to make money… no matter how
– Identity theft
– Credit card fraud
– Break into email and other accounts
– Steal your stuff & sell it
– Steal accounts


Security eBooks

Stop Crooks
• They may be making more money
from your business than you do
– You may be protecting the wrong
things
– A stolen ID is worth $1 to $12 or more
• … what is an account worth to you?
• … are you protecting that kind of
value?
• Sony PSN was not concerned about
identity theft
– … nor was Valve
– … nor was Riot Games One of these days, the
– … nor was LinkedIn government is going to
– … nor was TJX make you responsible for
• They are deadly serious. You need to security.
stop them. They can ruin your
business. Your customers certainly do
today.

Security eBooks

How does security help make more money?
Bring in more Revenue.
Reduce Costs

ge
an
Change our perspective and
ch relationship with our players
to rk
ve wo •Don’t ban
ha we •Create communities of like players
ay w •Stopping bad guys is only part of
m ho
e the answer… And may not be an
W answer at all

Goal:
Move players from “Bad” and “Different” to Good and PAYING!


Security eBooks
Security Systems are everywhere…

”
…they evolved over time… f ree
s
Do s ei
a
ac ub u rch
au cou le e r p
y ou
di nt ntr ng
,
t t in y wr
o
ra g
ils & ip t is
e
r rec
y ou
“ If
….We don’t even notice them as security systems
anymore (and we get in trouble when we don’t)

Security eBooks

Why is Security so difficult today?
• “Security” used to mean…
– Law Enforcement
– Alarm Systems

The world is changing
• New businesses and business
models
• New ways of interacting
• Radical change in scale
• All are changing faster and faster

• … and security takes a while to
catch up
• We can’t wait for solutions to
evolve slowly anymore


Security eBooks

Security is the problem
Problem Exists Between Keyboard And
Chair Fallacy
Broken security business models
Cheap companies

Essential misunderstanding of security

Security eBooks

Security Today – The Good
Disney fights Piracy with Prizes & • Disney fights counterfeit
Holograms products by using a promotion
– Customers send in Proof of
Purchase w/holograms to
enter contest
– Disney uses entries to identify
locations where counterfeit
goods are sold and made
• Turn customers into security
partners
• Security gets paid for out of
Marketing Budget!


Security eBooks

Security Today – The Bad
• Famous security case based
on discrepancy between 2
audit trails
• Too many systems confuse
having an “audit log” with
multiple independent audit
records
• RESULT – continued difficulty
identifying security breaches
• LESSON – Independent
Systems & Real Analysis

(Mis)Understanding Audit

Security eBooks

What do good security solutions look like?

Recoverable/Repairable
Recoverable/Repairable
kt
Cheap
Reliable

rfe
pe
Im

Independent Systems and Layers … “Security Mesh”


Security eBooks

Strive for simple security
“security shims”

“naturally secure”

Security eBooks

g it
akin to
ut m hard
abo t as
uch righ
is as m thing ong
rity some ing wr
S ecu do eth
y to do som
eas


Security eBooks

How do you win?

Security Judo
Authority, Trust, Efficiency
Specific, Practical Measures

Security eBooks

What next?
• Don’t give up!

• More security presentations at:
http://free2secure.com/

• Check out my book “Protecting Games”
– Additional information at http://playnoevil.com/

• You can “win” the security game

Security eBooks

About Me
• Steven Davis
– 25+ Years of Security Expertise
– I have worked on everything from
online games and satellite TV to
Nuclear Command and Control and
military communications
• http://www.linkedin.com/in/playnoevil
– Author, “Protecting Games”

• Why Free2Secure?
– Security is too expensive and isn’t working. There has to be a better way.
I’m exploring these issues for IT security, ebooks, games, and whatever
else strikes my fancy at http://free2secure.com/
– Join me there, ask questions, challenge assumptions, let’s make things
better


Online Security - The Good, the Bad, and the Crooks

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Andere mochten auch

Andere mochten auch (16)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Online Security - The Good, the Bad, and the Crooks

Hinweis der Redaktion