Security Design in Online Games Jeff Yan Department of Computer Science and Engineering The Chinese University of Hong Kong Shatin, N.T., Hong Kong Email:
[email protected] Abstract and they charge a user when he logs in to play on their servers. Thus, the traditional headache of copy protection The emergence of online games has fundamentally changed can now be forgotten. Other problems have replaced it, such security requirements for computer games, which previ- as password security, payment security and the availability ously were largely concerned with copy protection. In this of systems that host online games. But these are relatively paper, we examine how new security requirements impact well understood as they are shared by other networked e- the design of online games by using online Bridge, a sim- commerce applications. ple client-server game, as our case study. We argue that se- A new security concern in games is online cheating [17, curity is emerging as an inherent design issue for online 22]. Cheating was very popular in single player console or games, after graphics and artificial intelligence, which have PC games. For example, it has been common for a player become important issues of the design of most games for to make game missions easier by using cheating tools. For decades. The most important new security concern in on- single-player games, cheaters were cheating the computer line game design is fairness enforcement, and most secu- and nobody else would care. For online games, however, rity mechanisms all contribute to a single objective, namely, cheaters are now cheating human players sitting elsewhere making the play fair for each user.