Game Black Production Blocking War: Half A Cup Of Retro Travel: 24 Hours Of Soul Stirring

If a game, on the first day of online, suddenly influx of users far more than expected, then there are two possibilities: one is that the game has become a blockbuster; the second is that it has been attacked by hackers.

Unfortunately, in reality, blockbuster products are not common, but hacker attacks occur frequently. As far as the purpose is concerned, hackers attack game products are driven by interests, some are peer competition, some are extortion, some are stealing game code, and then profit by selling plug-in or reverse swiping game currency. In addition, there are very few purely for personal show off.

However, no matter for which purpose, hackers will bring certain losses to game products, ranging from investing more protection costs to game collapse and user loss. In the middle of August, the simulated business game "banzhan retro Xing", which is the sole agent of Guangzhou Zhiqu Technology Co., Ltd., was launched on the same day. Hackers attacked the game and the server crashed for a time.

Later, only playing technology had to turn to Tencent's security team, and both sides worked together to launch a multi round attack and defense game with hackers. In the end, although hackers were repulsed, they also suffered heavy losses from playing only technology. The 24-hour thrill during this period taught a heavy lesson to only play with technology.

800000 accounts pouring in

At 10:00 a.m. on August 19, it was the planned launch time of "banzhan retro travel", but on the evening of August 18, some abnormal phenomena began to appear.

Yu Lin (Huaming), co-founder of only play technology, told the 21st century economic report that although half a cup of retro travel was not available for download on August 18, users can register accounts. At this stage, the number of registered accounts has far exceeded expectations.

However, since the server has not yet been opened, a large number of registered accounts have not had a substantial impact on the product. However, at about 7:00 a.m. on August 19, we only started the server by playing technology, and when preparing for the online game three hours later, we found that the proportion of server resources was extremely abnormal, and the occupancy rate of many servers was even as high as 100%.

In the face of such a situation, the technology team that only plays with technology has resisted some attacks by adjusting the front-end architecture and server settings. However, hackers can always find some new vulnerabilities on the server and launch attacks with huge traffic.

Rainforest said that as the opening time approached, the mentality of the whole team was extremely complicated and tense. The technical team had been investigating problems and blocking them. "Every time we finished plugging, we thought it was good, but the result was still not good.".

Soda (Huaming), a partner of only playing science and technology, said that the most difficult problem faced by hackers this time is that there are more CC attacks. It is reported that CC (challenge collapsar) attack is a type of DDoS attack, which uses proxy server to send a large number of seemingly legitimate requests to the victim server. This means that hackers simulate a lot of normal users to log in to the "half pot retro travel" server, and will selectively attack some rarely visited interfaces.

Not only that, in the defense process, the technology team only playing with technology also found a lot of Real ID cards, real IP information and real phone numbers, but for these accounts with real information, it is difficult to identify only playing technology.

"Half a pot of retro" has received about 150000 attention before it goes online, and it is also very popular on the game distribution platform taptap. In order to ensure the smooth opening of the service, only play technology actually has more server resources to deal with emergencies.

However, on August 19, there were as many as 800000 tourist accounts flooding into the server, as well as tens of thousands of accounts with real ID cards and mobile phone numbers. Such a large attack traffic, let only play technology a bit at a loss, to open the server time, the attack is still continuing.

"At this time, we also experienced psychological collapse and reconstruction," rain forest said. Since it is a fact that we can't open the server on time, the most important thing is to try our best to solve the attack problem. However, with the passage of time, five hours have passed since the planned service opening time, and the attack behavior still has no weakening trend.

Join hands with Tencent to prevent hackers

In the face of constant attacks, only playing technology has to turn to external forces. Because of the cooperative relationship with Tencent cloud, Tencent is the first person to ask for help when only playing with technology.

It is reported that Tencent security quickly organized a technical team of about 20 people to support after receiving the demand on the afternoon of August 19. Dong Wenhui, Tencent's security product R & D director, told the 21st century economic report that when dealing with hacker attacks only playing with technology, according to Tencent's past experience in security, they first put the attack traffic in to see the attack behavior; Then, with the help of security intelligence, we can find out these IP addresses; Finally, it analyzes the aggressive behavior and prescribes the medicine to the case.

For CC attacks, Dong Wenhui further said that Tencent security itself has many CC protection rules, which can be used for behavior identification. So after analyzing the above attack behavior, Tencent security and the technology team only play with technology establish a set of CC protection rules to resist the attack.

In taptap, in order to let more players understand what is happening in "half a game of retro", playing only technology also records the whole process of fighting with hackers. Looking through this record, the reporter learned that before Tencent's security team joined, "banzhan retro travel" had undergone eight rounds of attacks, among which 50000 real name ID cards requested real name system interfaces in the eighth round of attacks.

After the Tencent team joined, the defense effect also appeared quickly. For example, the information mentioned in the record that "we have located hackers, and we are processing and testing them. At present, the frequency of hacker attacks has been reduced!" and "through the efforts of our technical personnel, we have temporarily prevented hackers", etc., which are all updated information after Tencent's security team joined.

Rainforest also told reporters that in the process of cooperation with Tencent security, they also began to regain confidence, "because we can clearly see that after the deployment of a rule or the use of a product, a certain attack will immediately decrease.".

However, hackers' attacks are also "keeping pace with the times". After encountering resistance, they also add new ways of attack. For example, based on the original Web attack and CC attack, a large number of BOT requests have been launched.

At 21:30 on August 19, "half a pot of retro travel" tried to open the service, but it was still under attack, leading to the server crash. At 1:55 a.m. on August 20, only playing technology upgraded the security strategy with the help of Tencent security, and thousands of players entered the game and began to experience it.

At this point, "half a pot of retro travel" is really able to withstand the attack of hackers. Although hackers have also tried to carry out some attacks, including changing to foreign IP, these have not caused too much threat to the game server.

The server has been defended and can be affected by hackers' attacks. There are also many bugs in "half a cup of retro travel", such as abnormal data, file return, etc. For this reason, only playing technology can only be made up by issuing game rewards and supporting partial recharge users to refund.

According to rainforest, hackers have wasted many channels for promoting "half a pot of retro travel" and left many players who want to experience the game for the first time. However, through the real-time disclosure of the whole process of fighting against underworld industry in the community and other platforms, only playing technology can gain the understanding of most players.

From the early morning of August 19 to the early morning of August 20, a total of more than ten rounds of attacks were carried out. In the rainforest's view, these attacks can use a lot of information such as real ID card, which shows that it is not a simple prank, but an organized and premeditated attack. At present, only play technology has submitted all illegal intrusion information and various attack logs to relevant departments.

In fact, it is not only the game industry, but also the development of all industries. As long as there is interest driven, the black industry will exist. Therefore, it is not realistic to completely kill the black industry, which requires all enterprises to do a good job in security protection. For some large enterprises, because of the more investment, the security capability is stronger. On the contrary, small and medium-sized companies, such as only playing with technology, do not pay enough attention to safety considering the cost problem.

After experiencing the hacker attack, rainforest believes that security protection must be implemented as soon as possible, and can not be made up after the event, because the losses may be immeasurable after the real malicious attack.