Identify one kind of security threat that can occur with gaming applications. Feel free to utilize the Internet in order to read about online gaming and security threats. What are some of the aspects gaming industry security designers need to consider in developing gaming applications? Can this threat be mitigated?
(Solved Homework): Identify one kind of security threat that can occur with gaming applications. Feel free to utilize the Internet in order
Expert Answer
One of the security threat that can occur with gaming application is Teslacrypt. It is in the same category of ransomeware malware. It also encrypt the video games and then the user will have to pay a certain amount to decrypt the files back. Teslacrypt don’t the user to access the saved game files, configuration files, etc.
There are many things that gaming industries should consider in developing gamin applications like :
- Windows Application Verifier:- It provides multiple function in one tools. It is design to test common programming error more efifciently. It can check log changes to the registry and the file system, check the parameters that are passes to the API call, it insert many input to check error handling ability. It helps the developer to develop a quality product.
- Fuzz Testing:- It enhance the current testing methodologies because its a semi automated method of testing. it test the network data, mod, and saved games by inputing random inputs. It input randow bytes, adjcent bytes, flipping that are good in finding security holes. Fuzz testing is easy to implement and it is not exhausting task.
- Buffer security check:- it check for stack based buffer that are exploited to overwrite the return address of a function.
- Threat Modeling Analysis
- Data Execution Prevention (/NX)
- PREfast
- Authenticode SigningMinimize Privileges.
Teslacrypt can be mitigated, the ESET has released a decryption tool that can decrypt the teslacrypt affected files. The affect of ransomware on games is not very effective because the new games are designed so that their saved files, configuration files etc. are saved on cloud so if they get affected then the user can recover those files form the cloud.
