몬스터 때려잡는 매크로 때려잡기

#이상탐지

카카오게임즈에서 서비스하고 있는 게임인 오딘의 이상유저를 탐지한 경험을 소개드리려고 합니다. 매크로 작업장을 잡을 때 고민했던 부분들과 해결과정, 활용 등을 공유드리도록 하겠습니다.

발표자 : zoey.cho
카카오게임즈 BI팀에서 데이터분석 업무를 맡고 있는 조이입니다.

Transcript

1. $PQZSJHIU,BLBP$PSQ"MMSJHIUTSFTFSWFE3FEJTUSJCVUJPOPSQVCMJDEJTQMBZJTOPUQFSNJUUFEXJUIPVUXSJUUFOQFSNJTTJPOGSPN,BLBP
   ހझఠٸ۰੟חݒ௼۽ٸ۰੟ӝ
   ઑਮ৔[PFZDIP
   
   
   ஠஠য়ѱ੐ૉ
   JG LBLBP
   
   

   View Slide

2. *OUSP
   
   
   $BTF
   
   
   $BTF
   
   
   $PODMVTJPO
   

   View Slide

3. *OUSP
   
   
   $BTF
   
   
   $BTF
   
   
   $PODMVTJPO
   

   View Slide

4. ࠛߨ੸ੋ೐۽Ӓ۔೧ఊਸాೞৈ
   

   ѱ੐ղ੤ചܳ঳Ҋ അӘചदఃחਬ੷
   ݒ௼۽੘স੢
   

   View Slide

5. 2׮਺ࢎ૓੄ࢎրೞҊ੓חݺ੄ਬ੷઺
   
   
   पઁਬ੷оইצݒ௼۽חযڃਬ੷ੌөਃ
   

   View Slide

6. 2׮਺ࢎ૓੄ࢎրೞҊ੓חݺ੄ਬ੷઺
   
   
   पઁਬ੷оইצݒ௼۽חযڃਬ੷ੌөਃ
   

   View Slide

7. 2فਬ੷઺ݒ௼۽חযڃਬ੷ੌөਃ
   दрউীই੉మਸ
   
   
   ѐ੉࢚౸ݒೠਬ੷
   दрউীই੉మਸ
   
   
   ѐ౸ݒೠਬ੷
   

   View Slide

8. য়טоੑೞחਬ੷੄੺߈੉࢚਷ݒ௼۽
   नӏਬ੷ઁ੤࠺ਯ
   ઁ੤0
   ઁ੤9
   

   View Slide

9. /PSNBM "COPSNBM
   ࢎۈэ਷ݒ௼۽৬ݒ௼۽э਷ࢎۈਸ࠙߹ೞחѪ
   74
   

   View Slide

10. 
    /PSNBM "COPSNBM
    
    ੿࢚ਬ੷৬੉࢚ਬ੷ܳ࠙ܨೞחޙઁ
    

    View Slide

11. 
    /PSNBM "COPSNBM
    
    -BCFM੉হ׮
    ੿׹ࣇ੉হ਺
    ਷೯ъبܳ੟חؘࠁ੉झೖयߧદ੗੄೯زಁఢਸࠁҊ੟ਸࣻחহ਺
    

    View Slide

12. &%"ܳాೠ
    

    ੉࢚ਬ੷
    
    
    ౠ૚౵ঈ
    ౵ࢤ߸ࣻࢤࢿ
    ࠺૑ب೟णਸాೠ
    

    ੉࢚ਬ੷ఐ૑
    ܙ߬੉झఐ૑৬
    

    ࠺Үೞח
    

    ࢿמಣо
    ੿׹ࣇ੉হযب೟ण੉оמೠ࠺૑ب೟णਸࢎਊ
    

    View Slide

13. *OUSP
    
    
    $BTF
    
    
    $BTF
    
    
    $PODMVTJPO
    

    View Slide

14. ౵౭؍੹੉ۆ
    

    View Slide

15. ౵౭؍੹ݒ௼۽
    

    View Slide

16. ੉࢚ਬ੷ٜ੄ౠ૚਷j
    ਬ੷ ۨ߰ ѾઁӘঘ ౵౭ࢤࢿപࣻ
    ӣয়٥
    ӣషܰ
    ӣ۽ః
    ӣ೐ۨ੉ঠ
    ӣ೻੐׳
    ਬ੷ ۨ߰ ࢤࢿрѺ ୡ
    ౵౭ࢤࢿदр
    ӣয়٥
    
    
    
    
    
    ਬ੷ ۨ߰ ࢤࢿрѺ ୡ
    ౵౭ࢤࢿदр
    ӣషܰ
    
    
    
    
    
    多
    ౵౭݆ܳ੉ࢤࢿ ੌ੿ೠрѺਸفҊࢤࢿ ૣ਷઱ӝ۽ࢤࢿ
    ੘স੢ݒ௼۽҅੿ٜ੄ҕాౠ૚ٜ
    ؀ࠗ࠙੄ਬ੷ח౵౭ࢤࢿപࣻഥ੉ೞ
    $POTUBOUJDPONBEFCZIFJTFOCFSH@KS 5JNFJDPONBEFCZ'SFFQJLGSPNXXXGMBUJDPODPN
    

    View Slide

17. 多
    ౵౭݆ܳ੉ࢤࢿ
    3VMF
    -
    CBTF۽ఐ૑ೞӝয۰਍੉ਬ
    ੌ੿ೠрѺਸ
    

    فҊࢤࢿ
    ૣ਷઱ӝ۽ࢤࢿ
    $POTUBOUJDPONBEFCZIFJTFOCFSH@KS 5JNFJDPONBEFCZ'SFFQJLGSPNXXXGMBUJDPODPN
    

    View Slide

18. ӝઓಁఢ
    ࢜۽਍ಁఢ
    3VMF
    -
    CBTFE%FUFDUJPO
    ରױ
    դࣻ୶о
    ਬ੷ ۨ߰ ۽ӒदррѺ ୡ
    ۽Ӓߊࢤदр
    ӣয়٥
    
    
    
    
    
    ਬ੷ ۨ߰ ۽ӒदррѺ ୡ
    ۽Ӓߊࢤदр
    ӣয়٥
    
    
    
    
    
    3VMF
    -
    CBTF۽ఐ૑ೞӝয۰਍੉ਬ
    

    View Slide

19. -PHJTUJD3FHSFTTJPO
    %FDJTJPO5SFF
    47.
    /BïWF#BZFT"MHPSJUIN
    ,//
    ,NFBOT
    3BOEPN'PSFTU
    -JHIU(#.
    "EBCPPTU
    9(CPPTU
    "VUP&ODPEFS
    %//
    

    View Slide

20. -PHJTUJD3FHSFTTJPO
    %FDJTJPO5SFF
    47.
    /BïWF#BZFT"MHPSJUIN
    ,//
    ,NFBOT
    3BOEPN'PSFTU
    -JHIU(#.
    "EBCPPTU
    9(CPPTU
    "VUP&ODPEFS
    %//
    

    View Slide

21. ,NFBOT$MVTUFSJOH
    ؘ੉ఠܳ࠺तೠҵ૘ՙܻաׂࣻ੓ח؀಴੸ੋ࠺૑ب೟णӝࣿ
    
    
    
    
    ےؒ઺ब੼ࢸ੿
    D
    D
    

    View Slide

22. ,NFBOT$MVTUFSJOH
    
    
    
    
    ؘ੉ఠ߹઺ब੼੄Ѣܻܳ҅࢑
    D
    D
    ؘ੉ఠܳ࠺तೠҵ૘ՙܻաׂࣻ੓ח؀಴੸ੋ࠺૑ب೟णӝࣿ
    

    View Slide

23. ,NFBOT$MVTUFSJOH
    
    
    
    
    Ѣܻо੘਷ҵ૘ਵ۽ೡ׼
    D
    D
    ؘ੉ఠܳ࠺तೠҵ૘ՙܻաׂࣻ੓ח؀಴੸ੋ࠺૑ب೟णӝࣿ
    

    View Slide

24. ,NFBOT$MVTUFSJOH
    
    
    
    
    D
    D
    ؘ੉ఠܳ࠺तೠҵ૘ՙܻաׂࣻ੓ח؀಴੸ੋ࠺૑ب೟णӝࣿ
    Ѣܻо੘਷ҵ૘ਵ۽ೡ׼
    

    View Slide

25. ,NFBOT$MVTUFSJOH
    
    
    
    
    пҵ૘੄ಣӐчਵ۽઺ब੼ਸ৤ӟٍ
    
    
    TUFQࠗఠ׮दप೯ೞৈ઺ब੼੄੉ز੉হਸٸ઺ױ
    D
    D
    ؘ੉ఠܳ࠺तೠҵ૘ՙܻաׂࣻ੓ח؀಴੸ੋ࠺૑ب೟णӝࣿ
    

    View Slide

26. ҵ૘੄ѐࣻ੿ೞӝ
    ,
    पܖ৆੼ࣻ
    पܖ৆҅ࣻ &MCPX.FUIPE दпച
    , , ,
    ,
    , , ,
    ,
    

    View Slide

27. ੉࢚ਬ੷חযڃਬ੷৓ח૑
    ࢤࢿदррѺ
    ࢤࢿदррѺ
    

    ಴ળಞର
    ۨ߰
    ־੸ѾઁӘঘ
    ౵౭ࢤࢿപࣻ
    $MVTUFS $MVTUFS
    ౵౭ࢤࢿ਷੸૑݅
    

    ݒ௼۽੄ౠ૚ਸо૗
    
    
    ۨ߰੉؊ծ׮
    ౵౭ࢤࢿਸ݆੉ೞҊ
    
    
    рѺҗ಴ળಞରחծ਺
    
    
    
    
    
    $MVTUFS $MVTUFS
    ౵౭ࢤࢿ੉੸਺
    

    ࢤࢿрѺ੉ই઱ևҊ
    

    ੌ੿ೞ૑ঋ਺
    
    
    
    
    
    
    
    
    
    
    ౵౭ࢤࢿ੉੸Ҋ
    

    ࢤࢿрѺ਷ևਵա
    

    যו੿بੌ੿ೠрѺ
    1$
    
    
    
    
    1$
    

    View Slide

28. ੉࢚ਬ੷חযڃਬ੷৓ח૑
    ౵౭ࢤࢿ
    

    दррѺ
    ࢤࢿदр
    

    ಴ળಞର
    ౵౭ࢤࢿപࣻ
    ѾઁӘঘ
    ۨ߰
    

    View Slide

29. ,NFBOT৬ױࣽ3VMF
    -
    CBTFੋ*23੉࢚஖੄ࢿמ࠺Үಣо
    *23ਸ੉ਊೠ੉࢚஖ఐ࢝ߑߨ
    2Y*23
    

    ੉࢚ਸо૑חч
    
    
    
    
    3FDBMM 1SFDJTJPO '
    $MVTUFS
    *23
    ,NFBOT$MVTUFSJOH
    ߣҵ૘ਸݽف੉࢚ਬ੷۽فҊ࠺Ү
    D
    D
    

    View Slide

30. *OUSP
    
    
    $BTF
    
    
    $BTF
    
    
    $PODMVTJPO
    

    View Slide

31. ೙٘ࠁझݒ௼۽ۆ
    ޷٘оܰ٘ࠁझदр಴ ࠙઱ӝ
    ࠁझࢤࢿदрীݏ୾ױ୓۽੉زೞחݒ௼۽҅੿ٜ
    

    View Slide

32. ೙٘ࠁझݒ௼۽ۆ
    ޷٘оܰ٘ࠁझदр಴ ࠙઱ӝ
    ࠁझࢤࢿदрীݏ୾ױ୓۽੉زೞחݒ௼۽҅੿ٜ
    

    View Slide

33. ࠁझݒ௼۽੄ബҗח੿࢚ਬ੷੄ߓաػ׮
    ࠁझ Ӓ۽ই
    
    ࠁझ ݒ౟ܻঈ
    
    ࠁझ ۨۄ٘
    
    ࠁझ ఔӒַझ౟
    
    ࠁझ ண߄ۈೞೖ
    
    ࠺੿࢚೯زӝ؆ч
    ੿࢚೯زӝ؆ч
    

    View Slide

34. ੌభۨನ౟஠਍౟৬ਬ੷ࣻ
    ਬ੷ࣻ
    
    
    
    
    
    భۨನ౟஠਍౟
    ױࣽࣻ஖۽ݒ௼۽ܳ੿੄ೡࣻহ਺
    ੉ତغݶ
    
    
    ־оࠊبݒ௼۽
    ݒ௼۽о
    
    
    ߎןѱெ઎׮ݶ
    ࣻزਵ۽֢۱ೠ
    
    
    நܼఠۄݶ
    ਫ਼੗חदрী݅
    
    
    ݒ௼۽ܳఅ׮ݶ
    ࢎۈэ਷ݒ௼۽৬ݒ௼۽э਷ࢎۈਸҳ߹೧ঠೣ
    /PSNBM
    "COPSNBM
    

    View Slide

35. ױࣽࣻ஖۽ݒ௼۽ܳ੿੄ೡࣻহ਺
    ࢎۈэ਷ݒ௼۽৬ݒ௼۽э਷ࢎۈਸҳ߹೧ঠೣ
    /PSNBM
    "COPSNBM
    ੌభۨನ౟஠਍౟৬ਬ੷ࣻ
    ਬ੷ࣻ
    
    
    
    
    
    భۨನ౟஠਍౟
    ੉ତغݶ
    
    
    ־оࠊبݒ௼۽
    ݒ௼۽о
    
    
    ߎןѱெ઎׮ݶ
    ࣻزਵ۽֢۱ೠ
    
    
    நܼఠۄݶ
    ਫ਼੗חदрী݅
    
    
    ݒ௼۽ܳఅ׮ݶ
    

    View Slide

36. ݒ௼۽நܼఠחݽفэ੉੉زೞפө ੉ز۽Ӓо࠺तೡѪ
    భۨ
    

    ನ౟
    

    പࣻ
    दр दр
    భۨ
    

    ನ౟
    

    പࣻ
    ਬ੷ ਬ੷
    ਬ੷ ਬ੷
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    

    View Slide

37. ਬ੷ٜр੄दр׼੉زപࣻ߭ఠ੄Ѣܻܳ࠺Ү
    ਬ੷ ਬ੷
    ਬ੷ ਬ੷
    
    
    
    
    
    
    
    

    View Slide

38. భۨನ౟ܳೞ૑ঋও؍दр؀ܳѢܻоݣ׮Ҋ҅࢑ೞ૑ঋইঠೣ
    భۨ
    

    ನ౟
    

    പࣻ
    दр दр
    భۨ
    

    ನ౟
    

    പࣻ
    ਬ੷ ਬ੷
    ਬ੷ ਬ੷
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    

    View Slide

39. భۨನ౟ܳೞ૑ঋও؍दр؀ܳѢܻоݣ׮Ҋ҅࢑ೞ૑ঋইঠೣ
    భۨ
    

    ನ౟
    

    പࣻ
    दр दр
    భۨ
    

    ನ౟
    

    പࣻ
    ਬ੷ ਬ੷
    ਬ੷ ਬ੷
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    

    View Slide

40. ௏ࢎੋਬࢎبܳాೠਬ੷ٜр੄Ѣܻ҅࢑
    ਬ੷઺যוೠଃ੉ౠ੿दрী݅భۨನ౟ܳೞ૑ঋইѾஏੋ҃਋بਬࢎೠਬ੷۽౸ױоמ
    
    
    
    
    
    
    
    ௏ࢎੋਬࢎب
    ف߭ఠр੄௏ࢎੋпبܳ੉ਊೞৈҳೡࣻ੓חਬࢎب
    ௏ࢎੋਬࢎب ௏ࢎੋਬࢎب ௏ࢎੋਬࢎب ਬࢎبҳೞ૑ঋ਺
    যוೠଃ੉ੌٸীח௏ࢎੋпبܳҳೞ૑ঋ਺
    

    View Slide

41. )ZQFSQBSBNFUFSઑ੿
    ঴݃աоөਕঠಁఢ੉࠺तೞ׮ҊೡѪੋо
    3FDBMM1SFDJTJPO
    
    
    
    
    
    
    3FDBMM
    1SFDJTJPO
    3FDBMM"DDVSBDZ
    
    
    
    
    
    
    3FDBMM
    "DDVSBDZ
    3FDBMM'
    
    
    
    
    
    
    3FDBMM
    'TDSPF
    -PDBMNJOJNVN੉ࢤӝ૑חঋਵ޲۽ Ӓې೐оҀ஖ח੼ਸӝળਵ۽ೣ
    Ѣܻ Ѣܻ Ѣܻ
    

    View Slide

42. )ZQFSQBSBNFUFSઑ੿
    ঴݃աоөਕঠಁఢ੉࠺तೞ׮ҊೡѪੋо
    3FDBMM1SFDJTJPO
    
    
    
    
    
    
    3FDBMM
    1SFDJTJPO
    3FDBMM"DDVSBDZ
    
    
    
    
    
    
    3FDBMM
    "DDVSBDZ
    3FDBMM'
    
    
    
    
    
    
    3FDBMM
    'TDSPF
    -PDBMNJOJNVN੉ࢤӝ૑חঋਵ޲۽ Ӓې೐оҀ஖ח੼ਸӝળਵ۽ೣ
    Ѣܻ Ѣܻ Ѣܻ
    

    View Slide

43. ఐ૑ػਬ੷ٜ਷
    భۨನ౟പࣻоݒदрੌ੿ೠਬ੷
    ೞܖઙੌభۨನ౟ೞחਬ੷ ౠ੿दр؀ী݅భۨನ౟ೞחਬ੷
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    दр
    భۨ
    

    ನ౟
    

    പࣻ
    

    View Slide

44. ࢿמಣо
    3FDBMM 1SFDJTJPO '
    ঌҊ્ܻ
    *23
    2Y*23
    

    ੉࢚ਸо૑חч
    *23ਸ੉ਊೠ੉࢚஖ఐ࢝ߑߨ
    ਬ੷Ѣܻӝ߈ঌҊ્ܻ
    

    View Slide

45. *OUSP
    
    
    $BTF
    
    
    $BTF
    
    
    $PODMVTJPO
    

    View Slide

46. ബҗ
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ౵౭؍੹ݒ௼۽
    хࣗ
    

    View Slide

47. ബҗ
    ೙٘ࠁझݒ௼۽
    хࣗ
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    ઱
    ର
    

    View Slide

48. $PODMVTJPO
    
    
    
    
    
    
    /PSNBM "COPSNBM ࠺૑ب೟ण࠙ܨ
    
    
    ,NFBOTҵ૘࠙ࢳ
    
    
    ਬࢎبӝ߈ਬ੷ҵѨ୹
    ࢎۈэ਷ݒ௼۽৬ݒ௼۽э਷ࢎۈਸҳ߹
    /PSNBM
    "COPSNBM
    

    View Slide

49. E.O.D
    

    View Slide