KR20190009206A - Method for hacking tool detecting and apparatus thereof - Google Patents

Abstract

The present invention relates to a method for detecting a hacking tool and an apparatus performing the same. More specifically, the present invention relates to a method for detecting a hacking tool which generates a virtual user character and detects the hacking tool based on game information obtained by controlling a virtual user character in a game space, and an apparatus performing the same. According to an embodiment of the present invention, as a technical means for achieving a technical object, an apparatus for detecting a hacking tool includes a control part for controlling a virtual user character on the game space, and a storage part for storing game information received from a game server according to the control. The control part analyzes the game information to detect a hacking tool.

Description

METHOD FOR HACKING TOOL DETECTING AND APPARATUS THEREOF BACKGROUND OF THE INVENTION [0001]

The embodiments disclosed herein relate to a hacking tool detection method and a hacking tool detection apparatus for performing the method, and more particularly, to a hacking tool detection method for generating a virtual user character and controlling a virtual user character And a hacking tool detection method and a hacking tool detection method.

As the field of hobby is diversified with the spread of the internet network, the game industry, especially online games, is developing. Online games are no longer a hobby for children or teenagers. In recent years, everyone is enjoying online games beyond the age and gender, and the development and research of games are actively conducted more than ever. As a result, online games are evolving both quantitatively and qualitatively.

Recently, however, the use of hacking tools has been increasing as an obstacle to the development of online games. The hacking tool hampers the developmental intentions of developers who have worked hard to play games, and halts the game's appeal to game users who play games honestly. In addition, the use of the hacking tool not only increases the load on the game server, but also consumes resources for detecting the hacking tool, which is a considerable negative factor in the game industry.

Conventionally, a method of searching for a game user who plays a game in an illegal manner by analyzing a game log such as 'anti-macro technology and algorithm for online game (Korean Patent Laid-open No. 10-2007-0039415)' has been mainly performed.

However, according to the related art described above, there is a problem in that a large amount of game logs need to be analyzed, resulting in a high cost and a high probability of false positives such as imposing sanctions on game users who do not use the hacking tool.

On the other hand, the background art described above is technical information acquired by the inventor for the derivation of the present invention or obtained in the derivation process of the present invention, and can not necessarily be a known technology disclosed to the general public before the application of the present invention .

The embodiments disclosed herein are aimed at providing an apparatus and method for detecting a hacking tool.

Embodiments also provide a hacking tool detection apparatus and a hacking tool detection method capable of reducing a load on a game server.

Embodiments also provide a hacking tool detection device and a hacking tool detection method capable of preventing misjudgment.

Embodiments also provide a hacking tool detection device and a hacking tool detection method capable of minimizing the development cost.

Embodiments also provide a hacking tool detection device and a hacking tool detection method capable of minimizing the cost of updating a condition for detecting a hacking tool.

Embodiments also provide a hacking tool detection apparatus and a hacking tool detection method that can promptly reflect information on a new hacking tool to quickly take action.

Embodiments also provide a hacking tool detection device and hacking tool detection method capable of leaving intuitive information, for example, image information, in sanctioning a hacking tool.

According to an embodiment of the present invention, there is provided a game system including a control unit for controlling a virtual user character on a game space, and a storage unit for storing game information received from the game server according to the control, Discloses a hacking tool detection apparatus for analyzing the game information to detect a hacking tool.

According to another embodiment, there is provided a method of detecting a hacking tool performed by a hacking tool detection device, comprising: controlling a virtual user character on a game space; acquiring game information according to the control; A method of detecting a hacking tool is disclosed.

According to yet another embodiment, a computer-readable recording medium on which a program for performing a hacking tool detection method is recorded is disclosed. At this time, the hacking tool detection method may include controlling the virtual user character on the game space, acquiring the game information according to the control, and detecting the hacking tool based on the game information.

According to yet another embodiment, a computer program stored on a medium for performing a hacking tool detection method, which is performed by a hacking tool detection apparatus, is disclosed. At this time, the hacking tool detection method may include controlling the virtual user character on the game space, acquiring the game information according to the control, and detecting the hacking tool based on the game information.

According to any one of the above-described task solutions, the embodiments disclosed herein may suggest an apparatus and method for detecting a hacking tool.

Embodiments can also provide a hacking tool detection apparatus and a hacking tool detection method that can reduce the load of a game server.

Embodiments can also provide a hacking tool detection device and a hacking tool detection method capable of preventing misjudgment.

Embodiments can also provide a hacking tool detection device and a hacking tool detection method that can minimize the development cost.

Embodiments can also provide a hacking tool detection device and a hacking tool detection method that can minimize the cost of updating conditions for detecting a hacking tool.

Embodiments may also provide a hacking tool detection device and a hacking tool detection method that can quickly take action by promptly reflecting information about a new hacking tool.

Embodiments can also provide a hacking tool detection apparatus and a hacking tool detection method that can leave intuitive information, for example, image information, in sanctioning a hacking tool.

The effects obtained in the disclosed embodiments are not limited to the effects mentioned above, and other effects not mentioned are obvious to those skilled in the art to which the embodiments disclosed from the following description belong It can be understood.

1 is a block diagram illustrating a hacking tool detection apparatus according to an embodiment of the present invention.
2 is a block diagram illustrating a configuration of a hacking tool detection apparatus according to an exemplary embodiment of the present invention.
3 and 4 are flowcharts for explaining a hacking tool detection method according to one embodiment.

Various embodiments are described in detail below with reference to the accompanying drawings. The embodiments described below may be modified and implemented in various different forms. In order to more clearly describe the features of the embodiments, detailed descriptions of known matters to those skilled in the art are omitted. In the drawings, parts not relating to the description of the embodiments are omitted, and like parts are denoted by similar reference numerals throughout the specification.

Throughout the specification, when a configuration is referred to as being "connected" to another configuration, it includes not only a case of being directly connected, but also a case of being connected with another configuration in between. In addition, when a configuration is referred to as "including ", it means that other configurations may be included, as well as other configurations, as long as there is no specially contradicted description.

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings.

Prior to the description, however, the meaning of the terms used below is defined.

The 'game user' may be one or more persons who receive the game from the game server, and the game server can identify the game user based on the user account corresponding to the game user. According to one embodiment of the present disclosure, a hacking tool detection device may create a virtual user account corresponding to a virtual game user that does not exist to detect a hacking tool.

'Administrator' refers to a person who manages a game server or a hacking tool detection device. The game user and manager may be the same person or different person.

The 'game space' is a virtual space in which the game is performed, and includes a certain range of areas in which the game objects to be described later can be moved, which are expressed by a two-dimensional graphic or a three-dimensional graphic. In a single game, a plurality of game spaces designed differently from each other can be selectively provided.

The 'game object' is placed in the above-mentioned game space and indicates graphic objects that affect the game result. In particular, an object to be selected, moved, or changed in status by the control of a game user, i.e., a control object of a game user. For example, it may be a character of an RPG (Roll Playing Game), a card game card, a block of a puzzle game, or the like. In addition, among the graphic objects disposed in the above-described game space and affecting the game result, the game object controlled by the game user is influenced, but is not controlled by the game user but is automatically moved according to the setting of the game itself, Objects. For example, it can be a non-player character (RPG), a feature of a shooting game, and the like.

And 'item' is a game element used for game play, which can be used for progressing the game or for improving the game performance result of the game user. For example, it is possible to at least temporarily improve the game performing ability of the control target controlled by the game user, or to improve the performance of the game object of the game object controlled by the opponent game user, Or may be a game object or any other game element that additionally grants the game user an opportunity to perform a given game, execute a specific action in the game, or exercise the special ability. The items can be sold in the game, and the items can be exchanged, traded, presented, or collected between game users. In particular, these items are optional elements in the game which determine whether to use or when to use according to the game user's choice.

At this time, 'collecting' is an act of acquiring an item in a game space. For example, it may include picking up an object in the game space, picking fruit from the tree in the game space, and mining ore from the earth in the game space. At this time, Fruits and ores are items.

On the other hand, 'user character' is a fictional character appearing in the game space, and is an object controlled by each game user, and is a subject performing a game operation. Each user character is visualized as a two-dimensional or three-dimensional graphic image, and is defined by various attributes. Here, the attribute of the user character may include 'role', 'level', 'ability value', and the like.

In the embodiment of the present invention, the user character is created corresponding to the account of the game user, and can perform the game under the operation of the game user. Also, the user character may be generated corresponding to the account of the virtual game user according to the embodiment, and may be controlled by the hacking tool detection apparatus 100 to detect the hacking tool. In order to distinguish this, a user character corresponding to an account of a game user and performing a game according to an operation of a game user is generated in correspondence with an account of a 'game user character' and a virtual game user and is controlled by a hacking tool detection device The user character performing the detection of the hacking tool is called a 'virtual user character'.

In this case, the 'virtual user character' is a character controlled by the hacking tool detection device to acquire game information based on the detection of the hacking tool, and the hacking tool detection device is a virtual character The user character can be controlled. In order to define a virtual user character on the side of a game server, the hacking tool detection device can create a virtual user account and create a virtual user character corresponding to a virtual user account.

According to the embodiment shown below, the user characters can cooperate with each other or fight each other. At this time, 'cooperation' refers to an action in which two or more user characters help each other, and 'battle' refers to an action in which two or more user characters harm each other. For example, co-operation involves two or more user characters forming a party (a team or alliance formed between user characters to perform the same purpose) or a heal (an action in which a user character raises the vitality of another user character) can do. In addition, the battle may include the act of the user character attacking another user character to reduce the life force or the ability of the user character to decline.

On the other hand, 'monster' is a character (NPC: Non-Player Charater) operated by artificial intelligence rather than a game user, and is a character that receives an attack of a game user character and provides compensation corresponding to the predetermined condition . For example, when a game user character kills a monster, compensation for game money, experience, and the like can be provided.

Terms other than those defined above are explained in the relevant sections.

1 is a block diagram of a hacking tool detection system including a hacking tool detection apparatus 100 and a game server 200 according to an embodiment of the present invention.

The game server 200 is a computing device that provides a game to a game user and processes game data generated by a game user playing the game. For example, the game server 200 may provide a game space.

The hacking tool detection apparatus 100 is a computing apparatus that acquires game information through a virtual user character and detects a hacking tool based on the acquired information.

According to an embodiment, the hacking tool detection apparatus 100 may be implemented as an electronic terminal equipped with a client for performing detection of a hacking tool or as a server-client system. If the hacking tool detection apparatus 100 is implemented as a server-client system, the server at this time may be included in the game server 200 or may include the game server 200.

At this time, the electronic terminal may be implemented as a computer, a portable terminal, a television, a wearable device, or the like, which may include an interface capable of interacting with an administrator. Here, the computer includes, for example, a notebook computer, a desktop computer, a laptop computer, and the like, each of which is equipped with a web browser (WEB Browser), and the portable terminal may be a wireless communication device , Personal Communication System (PCS), Personal Digital Cellular (PDC), Personal Handyphone System (PHS), Personal Digital Assistant (PDA), Global System for Mobile communications (GSM), International Mobile Telecommunication (IMT) (W-CDMA), Wibro (Wireless Broadband Internet), Smart Phone, Mobile WiMAX (Mobile Worldwide Interoperability for Microwave Access) (Handheld) based wireless communication device. In addition, the television may include an Internet Protocol Television (IPTV), an Internet television (TV), a terrestrial TV, a cable TV, and the like. Further, the wearable device is an information processing device of a type that can be directly worn on a human body, such as a watch, a glasses, an accessory, clothes, shoes, etc., and is connected to a remote server via a network N, Or may be connected to other terminals.

Meanwhile, the game server 200 and the hacking tool detection apparatus 100 can communicate with each other via a wired / wireless network (N). That is, the hacking tool detection apparatus 100 receives information necessary for detecting the hacking tool from the game server 200, and the game server 200 receives information about the detected hacking tool from the hacking tool detection apparatus 100 .

2 is a block diagram illustrating a configuration of a hacking tool detection apparatus 100 according to an embodiment of the present invention.

Referring to FIG. 2, the hacking tool detection apparatus 100 may include an input / output unit 110, a storage unit 120, a communication unit 130, and a control unit 140.

The input / output unit 110 may include an input unit for receiving an input of an administrator in hacking tool detection, and an output unit for displaying information necessary for hacking tool detection or status information of the hacking tool detection apparatus 100 . For example, the input / output unit 110 may include an operation panel for receiving an input of an administrator, a display panel for displaying a screen, and the like.

Specifically, the input unit may include devices capable of receiving input from various types of game users, such as a keyboard, a physical button, a touch screen, a camera or a microphone. Further, the output unit may include a display panel, a speaker, a headset, or the like. However, the present invention is not limited to this, and the input / output unit 110 may include various input / output support structures.

Meanwhile, the storage unit 120 may store applications for detecting a hacking tool and data for managing the hacking tool detection apparatus 100, and the like.

In particular, the storage unit 120 may store game information on which the hacking tool detection is based. At this time, the game information can be acquired as the virtual user character enters the game space, and various information can be stored in various formats according to the embodiment. Specific embodiments related to this will be described later in the related part.

Meanwhile, the communication unit 130 can perform wired / wireless communication with other devices or networks. For example, it is possible to perform communication with the game server 200 as described above. To this end, the communication unit 130 may include a communication module supporting at least one of various wired / wireless communication methods. For example, the communication module may be implemented in the form of a chipset.

As described above, the wired / wireless network format supported by the communication unit 130 may be Wi-Fi (Wireless Fidelity), Wi-Fi Direct, Bluetooth, UWB (Ultra Wide Band) Or an HDMI (High Definition Multimedia Interface).

Meanwhile, the control unit 140 controls the overall operation of the hacking tool detection apparatus 100, and may include a processor such as a CPU.

According to the embodiment, the control unit 140 can acquire game information by controlling the virtual user character in the game space, and control the storage unit 120 to store the acquired game information.

To this end, the control unit 140 may create a virtual user account and access the game server 200 through a virtual user account. Also, the control unit 140 may generate a virtual user character corresponding to a virtual user account. For example, the control unit 140 can log in to the virtual user account created in the game server 200 and control the virtual user character through a virtual user account.

Thus, in the aspect of the game server 200, the virtual user character can be recognized as one game user character corresponding to the game user account, and in transmitting the game information to the hacking tool detection apparatus 100, Lt; RTI ID = 0.0 > client < / RTI >

That is, the control unit 140 can receive game information as a client to the game server 200 when receiving the game information. In other words, the control unit 140 can receive game information in a format that the client receives.

At this time, the game information of the format received by the client may include image information. According to an embodiment, the image information may include a still image or a moving image.

Accordingly, the hacking tool detection apparatus 100 can prevent 'false positives' that apply sanctions to a game user who does not use the hacking tool. For example, the administrator can confirm the above-mentioned image information before the hacking tool is sanctioned, thereby preventing the mistake sanction or confirming the image information after sanctioning, thereby canceling the mistake sanction.

It is possible to reduce the complaints of the game users and to deal with the sanctions of the hacking tool more fairly by presenting the video information to the game users claiming that they are wrong sanctions.

In addition, the control unit 140 may generate two or more virtual user accounts and a virtual user character corresponding to each virtual user account. The control unit 140 may move the two or more virtual user characters to different areas.

At this time, the control unit 140 may generate more than one virtual user character satisfying a predetermined condition. For example, it may be configured to generate more than one virtual user character by an input of an administrator, or it may be determined that more than one virtual user character is required.

When it is determined that two or more virtual user characters are needed, for example, when a suspicious area is suspected to be used in a game space and a suspicious area is expected to be a predetermined number or more, Or may be expected to be driven more than one time. According to the embodiment, information on the suspected area where the hacking tool is used and information on the number of anticipated hacking tools may be received from the game server 200.

In addition, the control unit 140 can move the virtual user character to the suspicious area, thereby obtaining game information for hacking tool detection.

At this time, the controller 140 may determine the suspect area to move the virtual user character according to the notification of the game user, or may determine the abnormal area as the detected area. The abnormal flow may include, for example, a case in which the collection amount or collection speed of the item is rapidly increased or the speed at which the monster disappears or the speed at which the monster disappears is abnormal.

According to the embodiment, the controller 140 may sense the abnormal flow as described above, or may receive information about the suspicious area from the game server 200 that senses the abnormal flow. Alternatively, the control unit 140 can receive the setting of the suspicious area from the manager.

Meanwhile, as described above, the control unit 140 can move two or more virtual user characters to different areas. That is, according to the hacking tool detection apparatus 100 according to the embodiment of the present invention, when it is necessary to detect a hacking tool in a suspected area, game information in a suspicious area is obtained by moving a virtual user character to a suspected area You can easily check the suspicious areas.

On the other hand, the control unit 140 may include information that the game user obtains from the game server 200 in order for the game user to perform the game, or information generated when the game user performs the game.

For example, the control unit 140 may acquire image information on a game space of a predetermined area to be received from the game server 200 as the virtual user character moves through the game space. According to the embodiment, the control unit 140 may acquire game information including play information of a game user character in a predetermined area from a virtual user character.

At this time, the 'play information' is information on an event that occurs according to the operation of the game user. For example, information about at least one of a game user character's conversation, collection, movement, attack, defense, skill use, . ≪ / RTI >

Specifically, the information on the conversation time or the conversation contents, the collection amount of the items, the collection speed of the items, the attack time, the operation time of the skill, the time of the item use time, the hit of the attack, the hit of the skill, Information about the type of attack, the type of skill or the item to be used, the number of monsters that disappear according to the attack of the game user character, and information on the time at which the monsters disappear.

In addition, the control unit 140 controls the virtual user character to interact with the game user character, and controls the storage unit 120 to store the play information generated by the interaction.

Wherein the interaction may include at least one of conversation, collaboration, and battle. For example, the control unit 140 may control the virtual user character to approach the game user character and try to communicate, or to control the virtual user character to cooperate with or fight the game user character.

At this time, the control unit 140 determines whether play information generated by the interaction, for example, information about the talk time or conversation contents, information on the attack time, skill operation time, item use time, Information on whether or not the item is hit, information on the type of attack, skill type, or item to be used, and the like, and stores the information in the storage unit 120.

 Meanwhile, the control unit 140 can detect the hacking tool based on the game information stored in the storage unit 120 as described above.

For example, the control unit 140 may analyze the game information to detect the hacking tool. According to the embodiment, the control unit 140 can analyze the play pattern of the game user character and detect the hacking tool.

Specifically, the control unit 140 can analyze the dialogue time or the dialogue content included in the game information to grasp the dialogue pattern. Also, it can grasp battle patterns such as attack, skill, pattern in item use.

At this time, if it is determined that the pattern is not caused by a normal game user's manipulation, or if the pattern is too monotonous or identical to the pattern of the revealed hacking tool, the control unit 140 determines that the corresponding game user character is using the hacking tool It can be judged.

Also, the control unit 140 may calculate a hit rate in attack, skill, and item use, or calculate a range in attack, skill, and item use, and when the hit rate is too high or the range is set out, It can be judged that a hacking tool is being used.

At this time, in analyzing the game information, the control unit 140 may analyze the game information based on the hacking tool detection condition. At this time, the detection condition of the hacking tool may include a conversation pattern, a battle pattern, a normal hit rate, a normal range, and the like as a criterion for determining whether or not a hacking tool is used. The detection condition of the hacking tool may include a name of the game user character and a condition of the appearance of the game user character. For example, if the combination of characters included in the name of the game user character is out of a predetermined range, or if the game user character of a high level does not contour, it can be determined that the hacking tool detection condition is satisfied.

According to the embodiment, the control unit 140 may analyze the game information based on the predetermined hacking tool detection condition or receive the hacking tool detection condition from at least one of the game server 200 and the manager.

That is, according to the embodiment, the control unit 140 can update the hacking tool detection condition. Thus, the hacking tool detection condition can be updated on the hacking tool detection device, not on the game server 200, so that the action on the new hacking tool can be immediately reflected and the workload can be updated Can be reduced. In addition, by moving the virtual user character to the area where the use of the hacking tool is suspected, a specific area can be easily inspected. This saves time and money in hacking tool detection.

In addition, the hacking tool detection apparatus 100 does not analyze a vast amount of game logs processed by the game server 200, but inspects a specific region or a specific game user character through a virtual user character, And the load of the game server 200 can be reduced.

On the other hand, according to the embodiment, the image of the virtual user character may not be displayed for other game users. For example, the control unit 140 does not set the appearance of the virtual user character in creating the virtual user character, so that the image of the virtual user character can not be displayed to other game users. Alternatively, the game server 200 does not provide the image information of the virtual user character to the client of the other game user, thereby preventing the image from being displayed. At this time, the game server 200 can set the virtual user character not to interact with other game character, battle, talk, or the like.

3 is a flowchart illustrating a hacking tool detection method according to an embodiment of the present invention. The hacking tool detection method according to the embodiments shown in FIG. 3 includes steps that are processed in a time-series manner in the hacking tool detection apparatus 100 shown in FIG. 1 and FIG. Therefore, even when omitted from the following description, the above description of the hacking tool detection apparatus 100 shown in Figs. 1 and 2 can be applied to the hacking tool detection method according to the embodiment shown in Fig.

Referring to FIG. 3, the hacking tool detection apparatus 100 controls the virtual user character in the game space (S31), and obtains the game information under the control of the virtual user character (S32).

Referring to FIG. 4, the hacking tool detection apparatus 100 may create a virtual user account corresponding to a virtual user character and access the game server 200 through a virtual user account before step S31 (S41).

On the other hand, the hacking tool detection apparatus 100 can receive the game information of the format received by the client of the game user from the game server 200 as a client corresponding to the virtual user account in acquiring the game information (S32) .

For example, the hacking tool detection apparatus 100 may receive image information on a game space, and the image information may include at least one of a static image and a moving image. That is, the hacking tool detection apparatus 100 can acquire image information of a game space in a predetermined area from a virtual user character by having a virtual user character exist in a game space, and at this time, The video information of the game user character may be included.

Also, the hacking tool detection apparatus 100 can detect the hacking tool based on the acquired game information (S33).

In this regard, the hacking tool detection apparatus 100 may include receiving a hacking tool detection condition from at least one of the game server 200 and the manager before step S31. The hacking tool detection apparatus 100 can perform a subsequent hacking tool detection method based on the input hacking tool detection condition.

For example, when the hacking tool detection apparatus 100 controls the virtual user character (S31), the hacking tool detection apparatus 100 can receive the information about the suspected area from the game server 200 and move the virtual user character to the suspected area. At this time, game information according to the movement of the virtual user character, for example, game information about the area where the virtual user character has moved can be obtained.

In addition, the hacking tool detection apparatus 100 analyzes the play pattern of the game user character based on the game information in detecting the hacking tool based on the acquired game information (S33), and based on the input hacking tool detection condition Analyze play patterns, and detect hacking tools.

Thus, the hacking tool detection apparatus 100 can immediately take measures to detect a new hacking tool or when a suspicious area occurs. That is, unlike the existing detection method, the update can be performed without having to update the game server 200 dimension or stop the game provisioning by checking the game server 200 or the like. Therefore, time and workload can be reduced, which is economical.

The term " part " used in the above embodiments means a hardware component such as a software or a field programmable gate array (FPGA) or an ASIC, and the 'part' performs certain roles. However, 'part' is not meant to be limited to software or hardware. &Quot; to " may be configured to reside on an addressable storage medium and may be configured to play one or more processors. Thus, by way of example, 'parts' may refer to components such as software components, object-oriented software components, class components and task components, and processes, functions, , Subroutines, segments of program patent code, drivers, firmware, microcode, circuitry, data, databases, data structures, tables, arrays, and variables.

The functions provided within the components and components may be combined with a smaller number of components and components or separated from additional components and components.

In addition, the components and components may be implemented to play back one or more CPUs in a device or a secure multimedia card.

The hacking tool detection method according to the embodiments described with reference to FIG. 3 may also be implemented in the form of a computer-readable medium for storing instructions and data executable by a computer. At this time, the command and data may be stored in the form of program code, and when executed by the processor, a predetermined program module may be generated to perform a predetermined operation. In addition, the computer-readable medium can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. The computer-readable medium can also be a computer storage medium, which can be volatile and non-volatile, implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data, Volatile, removable and non-removable media. For example, the computer recording medium may be a magnetic storage medium such as an HDD and an SSD, an optical recording medium such as a CD, a DVD and a Blu-ray Disc, or a memory included in a server accessible via a network.

Also, the hacking tool detection method according to the embodiments described with reference to FIG. 3 may be implemented as a computer program (or a computer program product) including instructions executable by a computer. A computer program includes programmable machine instructions that are processed by a processor and can be implemented in a high-level programming language, an object-oriented programming language, an assembly language, or a machine language . The computer program may also be recorded on a computer readable recording medium of a type (e.g., memory, hard disk, magnetic / optical medium or solid-state drive).

Thus, the hacking tool detection method according to the embodiments described with reference to FIG. 3 can be implemented by a computer program as described above being executed by the computing device. The computing device may include a processor, a memory, a storage device, a high-speed interface connected to the memory and a high-speed expansion port, and a low-speed interface connected to the low-speed bus and the storage device. Each of these components is connected to each other using a variety of buses and can be mounted on a common motherboard or mounted in any other suitable manner.

Where the processor may process instructions within the computing device, such as to display graphical information to provide a graphical user interface (GUI) on an external input, output device, such as a display connected to a high speed interface And commands stored in memory or storage devices. As another example, multiple processors and / or multiple busses may be used with multiple memory and memory types as appropriate. The processor may also be implemented as a chipset comprised of chips comprising multiple independent analog and / or digital processors.

The memory also stores information within the computing device. In one example, the memory may comprise volatile memory units or a collection thereof. In another example, the memory may be comprised of non-volatile memory units or a collection thereof. The memory may also be another type of computer readable medium such as, for example, a magnetic or optical disk.

And the storage device can provide a large amount of storage space to the computing device. The storage device may be a computer readable medium or a configuration including such a medium and may include, for example, devices in a SAN (Storage Area Network) or other configurations, and may be a floppy disk device, a hard disk device, Or a tape device, flash memory, or other similar semiconductor memory device or device array.

It will be apparent to those skilled in the art that the above-described embodiments are for illustrative purposes only and that those skilled in the art will readily understand that various changes and modifications can be made without departing from the spirit and scope of the present invention. You will understand. It is therefore to be understood that the above-described embodiments are to be considered in all respects only as illustrative and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

It is to be understood that the scope of the present invention is defined by the appended claims rather than the foregoing description and should be construed as including all changes and modifications that come within the meaning and range of equivalency of the claims, .

100: hacking tool detection device 200: game server
110: input / output unit 120: storage unit
130: communication unit 140:

Claims (20)

A control unit for controlling a virtual user character on a game space provided by the game server; And
And a storage unit for storing game information acquired from the game server according to the control,
Wherein,
And detects a hacking tool based on the game information. The method according to claim 1,
Wherein,
A virtual user account is created, and the game information is acquired by accessing the game server through the virtual user account. The method according to claim 1,
Wherein,
And acquires game information as a client of the game user to the game server. The method according to claim 1,
The game information includes:
And image information for the game space. The method according to claim 1,
Wherein,
And controls the virtual user character to move to a suspicious area in the game space. The method according to claim 1,
The game information includes:
And play information of a game user character in a predetermined area from the virtual user character. The method according to claim 6,
Wherein,
And analyzing the play information, and analyzing a play pattern of the game user character to detect a hacking tool. The method according to claim 6,
The play information includes:
Wherein the information includes at least one of a conversation, gathering, movement, attack, defense, skill use, and item use of the game user character. The method according to claim 6,
Wherein,
And controls the virtual user character to interact with the game user character to obtain play information generated by the interaction. 10. The method of claim 9,
The interaction may include:
Wherein the at least one hacking tool comprises at least one of conversation, collaboration, and combat. The method according to claim 1,
Wherein,
And generates at least two virtual user characters and controls the two or more virtual user characters to move to different positions. The method according to claim 1,
Wherein the image of the virtual user character is not displayed to a game user. The method according to claim 1,
Wherein,
Detecting a hacking tool based on the game information and a hacking tool detection condition, and updating the hacking tool detection condition. A hacking tool detection method performed by a hacking tool detection apparatus,
Controlling a virtual user character on a game space;
Obtaining game information according to the control; And
And detecting a hacking tool based on the game information. 15. The method of claim 14,
Wherein the hacking tool detection device communicates with a game server providing the game space,
Before the step of controlling the virtual user character on the game space,
Creating a virtual user account corresponding to the virtual user character and accessing the game server via the virtual user account. 15. The method of claim 14,
And updating the hacking tool detection condition. 15. The method of claim 14,
Wherein the hacking tool detection device communicates with a game server providing the game space,
Wherein the step of acquiring game information in accordance with the control comprises:
And acquiring game information as a client of the game user to the game server. 15. The method of claim 14,
Wherein the step of acquiring game information in accordance with the control comprises:
And controlling the virtual user character to move to a suspicious area in the game space to obtain game information. A computer-readable recording medium on which a program for carrying out the method according to claim 14 is recorded. A computer program stored in a medium for performing the hacking tool detection method according to claim 14, which is performed by a hacking tool detection apparatus.

Images