Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Fafnir PR

Fafnir PR

Game Security System.

Yusuke Arakawa

June 04, 2019
Tweet

More Decks by Yusuke Arakawa

Other Decks in Technology

Transcript

  1. 3 Detect Mod APK. Wrap SafetyNet Speed hack, Anti debugger

    The detected cheats are logged so you can visualize the actual cheat damage. Cheat log Anti Cheating
  2. 4 Preparing to use SafetyNet Do you want to use

    SafetyNet? In order to call the methods of the SafetyNet Attestation API, you must use an API key. To create a key and embed this key. GET API KEY Before you use the SafetyNet Attestation API, you must ensure that the correct version of Google Play services is installed on the user's device. CHECK PLAYSERVICE In Unity, creating a native plugin is required. NATIVE CODING If your app requires an increased quota, make a request before deploying your app to users. APPLY QUOTA The SafetyNet Attestation API allows you to set a nonce to uniquely identify each API call. This feature can be used to prevent malicious users from reusing passing results instead of failing ones (this attack technique is also known as replay attack). ANTI REPLAY ATTACK We recommend planning your usage so that it takes changes and outages into account. HANDLE ERROR
  3. 5 Fafnir wrapped Do you want to use SafetyNet? In

    order to call the methods of the SafetyNet Attestation API, you must use an API key. To create a key and embed this key. GET API KEY Before you use the SafetyNet Attestation API, you must ensure that the correct version of Google Play services is installed on the user's device. CHECK PLAYSERVICE In Unity, creating a native plugin is required. NATIVE CODING If your app requires an increased quota, make a request before deploying your app to users. APPLY QUOTA The SafetyNet Attestation API allows you to set a nonce to uniquely identify each API call. This feature can be used to prevent malicious users from reusing passing results instead of failing ones (this attack technique is also known as replay attack). ANTI REPLAY ATTACK We recommend planning your usage so that it takes changes and outages into account. HANDLE ERROR
  4. 6 Use only Android Basic API Ultra lightweight Complete with

    a single line of code. You can also set the behavior of the app when cheat. Customize Easy to use
  5. 7 Getting started Fafnir public class FafnirAttestListener : AndroidJavaProxy {

    public FafnirAttestListener() : base("jp.co.cyberagent.FafnirPreLoginCallback") { } void onResult(String response){ } void Attest() { // Step1. Instantiate using (AndroidJavaObject Fafnir = new AndroidJavaObject("jp.co.cyberagent.Fafnir")) { // Step2. Attest Fafnir.Call("initialize", "USERID_HERE", new ActivityListener()); } } WRITE CODE Copy .aar files into Assets/Plugins/Android/ Place file
  6. 9 ” ” System Security Group Engineering team Our mission

    is to secure internal security with technology. In addition, it guarantees the quality of everything, and does not accept incomplete ones.