Cybersecurity in the Gaming Industry
Where
Talks
Disobey 2024
Duration
26 min
Surveys cyber threats facing game companies, from DDoS and account takeovers to regulatory standards and secure development practice.
Summary
The talk opens by explaining why security matters so much in the games industry. The speaker names three main assets at stake: money moving through game platforms, players' personal data, and intellectual property such as unreleased titles. He stresses that players, developers and publishers each share responsibility, and that training and awareness are the most effective defence.
The middle section surveys the threats and the games most exposed to them. Massively multiplayer and competitive online titles draw DDoS attacks and cheating, while mobile and free-to-play games often lack strong protection. Cross-platform titles are hard to secure consistently, and legacy servers and game development tools can hide serious weaknesses. Phishing, account takeover, ransomware on game databases, insider leaks and fraud complete the list, with attacks rising sharply during the pandemic.
For the close, he recommends that studios adopt a recognised framework and map the regulations that apply, such as GDPR and payment card rules, since breaches can carry heavy fines. He suggests a security architecture reference model covering data, applications, endpoints, networks and cloud, backed by a secure development lifecycle and an incident response plan. His practical advice is to scan environments, run penetration tests regularly and act on findings through a remediation plan.
Related talks
Talks·46 min
Nancy Coblenz
Explains how data center power and infrastructure ownership shape data security, jurisdiction and governance for security teams.
Talks·28 min
Marina Bochenkova
Argues that smart city security needs a holistic view across IT, OT and IoT, illustrated with incidents from Amsterdam and Luxembourg.
Maritime Hacking Village·42 min
Sergey Bratis · Mary Brooks
Presents a policy-level panel on maritime gray zone operations, covering shadow fleet tankers, GPS spoofing, subsea cable incidents and the cyber side of ocean shipping.


