Research And Analysis On Security And Guarantee Of Online Game Platform Based On Penetration Test

With the rapid growth of Internet industry, online game industry has pass its golden decade however it still in its high growth stage. And nowadays, with mobile network technology has deeply involved it has been pushed to a much higher development stage. Virtual items like in-game currency, equipment and prepared card of the game or the game platform are now has much higher virtual value and it equals to real world currency in some cases and this makes game platform becomes a huge target of hackers worldwide. And now, there are industry chain build to stealing and fishing virtual items, it has made huge loss to game companies and damaged their brand images.The internet security risk of the game company are mainly external and it is because that the most of the operation team are lacking necessary anti-hacking technology and experience to protect and maintain the security of the platform. Penetration testing technology could analysis aggressively to any weakness, vulnerability or defective virus and simulate the attacker to evaluate the security level of the system. This article will do a full analysis to a well-known game platform’s business model, functions demand, system procedure, system structure and network structure, and then perform black-box test by using acunetix web Vulnerablity scanner, IBM Rational Appscan and etc., to approve it has vulnerability such as SQL injection, XSS cross site script attack, admin panel exposure and password weakness. All result will be include in a full analytic report. And last, there will include suggested firewall configuration, repair script, server configuration and restructure of servers based on the result.The technicians of the game platform has fixed all problems based on the full analytic report and solution guidelines and then performed system check with famous vulnerability checking platform wooyun. The result shows no more vulnerabilities can be found. In this case, this project report has provides system respiration and security enhancement technical background, reduce the security risk of platform development and system administrator to the technicians and helps the system being protective and running smooth and efficiently.