Kernel Level Anti-Cheats: Difference between revisions
security issue |
m removed helpful boxes |
||
Line 1: | Line 1: | ||
{{Stub}} | {{Stub}}Kernel Level Anti-Cheats are anti-cheat software that boot and run at the kernel level instead of the typical user level. These methods of anti-cheats have recently become more popular among big online service games. They are controversial because of privacy and security concerns. | ||
Kernel Level Anti-Cheats are anti-cheat software that boot and run at the kernel level instead of the typical user level. These methods of anti-cheats have recently become more popular among big online service games. They are controversial because of privacy and security concerns. | |||
==How it works== | ==How it works== | ||
Line 8: | Line 5: | ||
==Why it is a problem== | ==Why it is a problem== | ||
===Privacy Concerns=== | |||
=== Privacy Concerns === | |||
lorem ipsum | lorem ipsum | ||
=== Security Concerns === | ===Security Concerns=== | ||
Kernel level anti-cheats run at the kernel level, the deepest and most authoritative level of the computer. They are software that have access to everything the computer is doing. This is in contrast to traditional, user level anti-cheats, which only had access to user-level permissions and therefore could not detect certain cheat engines which were cleverly hidden. However, since Kernel Level anti-cheats are at the kernel level, if they can be hijacked and exploited, they create a massive security issue at the kernel level. This has happened with [[Genshin Impact]]. Hackers hijacked the anti-cheat and delivered ransomware.<ref>{{Cite web |last=Soliven |first=Ryan |last2=Kimura |first2=Hitomi |date=2022-08-24 |title=Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus |url=https://www.trendmicro.com/en_us/research/22/h/ransomware-actor-abuses-genshin-impact-anti-cheat-driver-to-kill-antivirus.html}}</ref> | Kernel level anti-cheats run at the kernel level, the deepest and most authoritative level of the computer. They are software that have access to everything the computer is doing. This is in contrast to traditional, user level anti-cheats, which only had access to user-level permissions and therefore could not detect certain cheat engines which were cleverly hidden. However, since Kernel Level anti-cheats are at the kernel level, if they can be hijacked and exploited, they create a massive security issue at the kernel level. This has happened with [[Genshin Impact]]. Hackers hijacked the anti-cheat and delivered ransomware.<ref>{{Cite web |last=Soliven |first=Ryan |last2=Kimura |first2=Hitomi |date=2022-08-24 |title=Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus |url=https://www.trendmicro.com/en_us/research/22/h/ransomware-actor-abuses-genshin-impact-anti-cheat-driver-to-kill-antivirus.html}}</ref> | ||
==Examples== | ==Examples== | ||
*[[Electronic Arts|EA]] has recently [[EA moves to in-house kernel-level anti-cheat on PC after purchase|moved to Kernel Level Anti-Cheats]]. | *[[Electronic Arts|EA]] has recently [[EA moves to in-house kernel-level anti-cheat on PC after purchase|moved to Kernel Level Anti-Cheats]]. | ||
*GTA V has recently [[GTA 5 moves to kernel-level anti-cheat on PC after purchase|moved to Kernel Level Anti-Cheats.]] | *GTA V has recently [[GTA 5 moves to kernel-level anti-cheat on PC after purchase|moved to Kernel Level Anti-Cheats.]] |