Cheating in video games has escalated into a multi-billion dollar industry, prompting franchises like Call of Duty to dedicate significant resources to combating this issue. David Andrews, who previously worked to address cheating in Grand Theft Auto Online and now serves as Senior Director of Game Security for Call of Duty at Activision, recently detailed the complexities of this ongoing battle.
Andrews explained that the nature of cheating differs across game ecosystems. In titles like Grand Theft Auto Online and Red Dead Online, cheats often focus on economic progression, leading to problems such as money drops, which have since been addressed. Call of Duty, however, presents a different challenge due to its session-based gameplay. Regardless of the game's core loop, Andrews emphasized that undetected cheating is fundamentally disruptive and negatively impacts the player experience.
While acknowledging that companies often operate with distinct strategies, Andrews noted significant overlap in the challenges faced across the industry. Cheat developers are highly financially motivated, and many target multiple titles, not just Call of Duty. This shared threat landscape encourages informal communication and the exchange of information between game security teams. He highlighted that cheat developers often cast a wide net, developing tools for various popular titles, creating opportunities for security teams to compare notes and strategies.
Motivations Behind Cheating
Andrews delved into the motivations of cheat developers and users. While financial gain is a primary driver for many, a segment of developers are motivated by a fascination with game mechanics and a desire to understand how games function. Andrews has found success in recruiting some of these individuals, leveraging their unique expertise to bolster anti-cheat teams. For players who purchase cheats, the motivation often stems from a desire to appear competent within social circles, even if they lack the inherent skill to achieve that standing.
The Cat-and-Mouse Game
The fight against cheating is often described as a cat-and-mouse game, a continuous cycle of detection and evasion. Andrews discussed a shift in philosophy from historical reliance on large ban waves to a more immediate approach. The current strategy emphasizes preventing cheaters from entering the game in the first place and swiftly removing those who manage to get in. While every ban provides feedback to cheat developers, necessitating constant innovation in detection methods, Andrews believes this proactive stance is more effective.
Andrews addressed common misconceptions surrounding cheating in Call of Duty, particularly the perception fueled by viral social media clips. He stated that internal data indicates a very low match infection rate for the average player in titles like Modern Warfare 4 and Warzone. While acknowledging that content creators and professional players at the highest levels of competitive play may encounter cheaters more frequently, he asserted that this is not the typical experience for the majority of players. Efforts are continuously underway to address hotspots and problem areas.
The Review Process
Regarding the review process for suspected cheaters, Andrews explained that most bans are initiated through automated systems that employ signatures to detect specific cheats running in memory. These detections are then validated by analyzing game data, kill-death ratios, win-loss records, and replay renders. While automated systems handle the bulk of detections, manual reviews are also conducted for accounts flagged through reports or social media clips. This holistic approach ensures thoroughness and aims to minimize false positives.
He also touched upon an incident during a Modern Warfare 4 beta where a professional player was temporarily banned due to an error. Andrews clarified that betas serve as crucial testing grounds for anti-cheat systems, and false positives, though rare, are quickly identified and rectified. In such cases, affected accounts are restored, and systemic issues are addressed to prevent recurrence. He noted that highly skilled players can sometimes operate close to the detection thresholds, requiring constant tuning of behavioral analysis.
Legal and Evolving Tactics
Andrews confirmed Activision's involvement in legal actions against cheat developers, including issuing cease and desist letters. These actions are prioritized based on the prevalence and technological sophistication of the cheats, particularly targeting persistent developers who financially incentivize their customers and engage in deceptive practices.
Cheating tactics have evolved significantly since Andrews began his career. The rise of free-to-play games has lowered the barrier to entry, increasing player populations and demand for cheats. Cheat developers have become more sophisticated in their operational security, making detection more challenging. Cheats have moved beyond simple memory modification to include hardware-based solutions like Cronus devices and advanced techniques such as DMA cheats and computer vision-powered aimbots, often resulting in increased costs for these illicit tools.
Combating hardware-based cheats like Cronus devices presents a unique challenge. Andrews explained that Call of Duty employs a multi-tiered enforcement strategy for these devices, starting with a seven-day suspension for first-time offenders, followed by a permanent ban for repeat offenses. This approach has shown success in rehabilitating some players, while others face permanent account and potential hardware bans.
Andrews also clarified the concept of 'shadow banning,' describing it instead as limited matchmaking. This involves isolating suspicious accounts in specific matchmaking pools while further investigation is conducted. This allows the team to thoroughly review an account without immediately imposing an irreversible penalty, offering a chance for rehabilitation or confirmation of genuine malicious activity. Call of Duty's enforcement capabilities are extensive, ranging from temporary suspensions to hardware bans, with the appropriate measure chosen based on the specific type of cheating and the potential for rehabilitation.
Building the Anti-Cheat Team
Finally, Andrews highlighted the unconventional talent pool sought for anti-cheat teams. The field requires individuals with diverse backgrounds, including former malware researchers, theoretical mathematicians, and personnel from intelligence agencies. He noted that anti-cheat development is a niche area with no standardized educational pathways, necessitating the recruitment of bright, passionate individuals from various industries to tackle the complex challenge of protecting game integrity.