Organizer
Partner Company
Owning Multiplayer Online Games
Donato Ferrante, Luigi Auriemma
Abstract
In this presentation we are going to cover a new field for computer security, which is finding bugs in multiplayer online games and exploiting them. In this presentation we will discuss several high profile bugs that we found with several examples, how to find vulnerabilities in games, and much more. We will also show a demo of 2 0days we found in: Call of Duty: Modern Warfare 3, and Crysis.
Speaker Info
Donato Ferrante is a Co-founder and Security Researcher at ReVuln Ltd. Prior to founding ReVuln Ltd., Donato was a Security Researcher for Research In Motion (Blackberry), where his daily job was performing security research and vulnerability assessments of RIM authored code, products and services including infrastructure, devices, and QNX operating system.
Before moving to RIM Donato analyzed and reversed several rootkits, malware, mobile malware and exploits for Sophos Antivirus. He presented one of his research projects on Java malware and Java Virtual Machine exploits during the CARO workshop in Prague.
Donato found several vulnerabilities in well known commercial products and open source software and his first public disclosed security advisory was released in 2003. He is very passionate about virtual machines and operating systems internals and security.
Luigi Auriemma is a Co-founder and Security Researcher at ReVuln Ltd. Luigi has been in the security field for more than a decade, as an Independent Security Researcher (www.aluigi.org) he is a world recognized expert in this field and discovered more than 2000 vulnerabilities in widely used software.
The following are some key points of Luigi's work:
- Highest number of security vulnerabilities disclosed in SCADA/HMI software: General Electric, Siemens,ABB/Rockwell, Wonderware, InduSoft, and others
- Most known server-side Microsoft vulnerabilities found: ms12-020, ms11-035
- Research on Samsung TV vulnerabilities (many not disclosed yet)
- Security vulnerabilities affecting the most diffused multiplayer game engines, libraries, middleware and games
- Performed vulnerability research on: multiplayer games, SCADA/HMI, TV hardware, enterprise software, media players, financial software, ActiveX, network servers and clients
Currently the most prolific vulnerability researcher in the following fields:
- total number of security bugs found in any software
- SCADA/HMI
- media players: QuickTime, RealPlayer, Winamp, VLC and others
- multiplayer games
- most prolific contributor for Zero Day Initiative currently disclosed advisories (28 Aug 2012)