Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

Cybersecurity in the Gaming Industry

Massimo Nardone

PolicyTalks26 minBeginnerOpen on YouTube ↗

Where

Talks
Disobey 2024

Duration

26 min

Surveys cyber threats facing game companies, from DDoS and account takeovers to regulatory standards and secure development practice.

Summary

The talk opens by explaining why security matters so much in the games industry. The speaker names three main assets at stake: money moving through game platforms, players' personal data, and intellectual property such as unreleased titles. He stresses that players, developers and publishers each share responsibility, and that training and awareness are the most effective defence.

The middle section surveys the threats and the games most exposed to them. Massively multiplayer and competitive online titles draw DDoS attacks and cheating, while mobile and free-to-play games often lack strong protection. Cross-platform titles are hard to secure consistently, and legacy servers and game development tools can hide serious weaknesses. Phishing, account takeover, ransomware on game databases, insider leaks and fraud complete the list, with attacks rising sharply during the pandemic.

For the close, he recommends that studios adopt a recognised framework and map the regulations that apply, such as GDPR and payment card rules, since breaches can carry heavy fines. He suggests a security architecture reference model covering data, applications, endpoints, networks and cloud, backed by a secure development lifecycle and an incident response plan. His practical advice is to scan environments, run penetration tests regularly and act on findings through a remediation plan.

Related talks