OWASP Game Security Framework Project

• Main
• Client
• Network
• Server
• In-Game
• Wet-ware
• Road Map and Getting Involved

OWASP Game Security Framework Project Some of the most prolific apps these days are video games. They are sponsored, scrutinized, monetized, and celebrated, just like many sports. They handle clients, servers, monetary transfers, social interactions, etc, with every bit the need of security that most internet hosted apps have (if not more in some cases). This NEW OWASP project will help classify the diverse types of game hacks that exist for some of the worlds biggest games. We'll use history as an example, and break down the flaws as much as possible, creating a do-not-do list of flaws new game companies can reference when creating new games. Description The launch presentation can be seen here: OMG He HAXX! and introduction the OWASP Game Security Framework Licensing OWASP Game Security Framework Project is free to use. It is licensed under the Apache 2.0 License which has the fewest restrictions, even allowing proprietary modifications and proprietary forks of the project.

What is the GSF? OWASP GSF provides: Classifications of vulnerability types Technical guidance for new game developers Presentation OMG He HAXX! and introduction the OWASP Game Security Framework Project Leaders Jason Haddix Daniel Miessler

News and Events Talk to us on twitter: @game_hacking Classifications

As of Jan 22, 2014, the priorities are:

• initial categorization
• historical research
• content creation and wiki creation
• PDF guide

Involvement in the development and promotion of GSF is actively encouraged! You do not have to be a security expert in order to contribute. Some of the ways you can help:

• Tell us of of a new game hack! Contact via email or twitter!
• Offer technical breakdown of attack we are not experts on or practical defenses against them.