SourcePlugins

Dabljuh · New User Joined: 09 Dec 2007 Posts: 9

Heyas. I wrote this plugin about a year ago as a reaction to the great 'autoban' plugin, which had a really effective wallhack blocker. The only thing that was missing was a good aimbot identification algorithm.

So I wrote this. Now recently I have recompiled it in version 0.5a, which works, if only on linux. The plugin is open source too, so anyone technically capable may be able to compile it for windows as well.

What does it do? It is still a beta, and I need your testing prowess. It doesn't detect aimbots, yet. It however generates a truckload of statistics on the hit behaviour from every player, i.e. average distance, average angle etc. This is very useful to detecting a player manually. I hope to get enough feedback to implement some periodic tests that will automatically ban or voteban players.

The idea is that aimbot users do not just have higher angles at all ranges, but that their angles are also regressing in a different way. So what I want you to do is: Install the plugin, and observe what statistics the plugin generates with regular players, as compared to aimbot users. Then come back here and post your findings, so that eventually an algorithm can be enabled that automatically kicks players that satisfy certain conditions.

How to set it up should be fairly simple, just copy the .vdf and .so to the right directory and restart your cs:source server.

Then, it's best to connect as a client and enter ad_menu in the console, and you get a list of players, for which you will receive statistical information then.

Dabljuh · New User Joined: 09 Dec 2007 Posts: 9

So. I spent the last 2 weeks just doing this. Now, ADPlugin features some VERY advanced math, which cumulates in the Chi-Square test which computes the probability that the guy in question is a cheater

What I need is beta testers. Do you manage to get high scores without cheating? How long can you keep your scores down while cheating?

Remember fellas: this is statistics, and only works on high numbers. So give it some time (and hits) to work with.

[edit]Apparently, there is some bugs in version 6a, leading to inflated probability. I'm removing that version until I figured the problem out.This will teach me to release a version without testing it at least a couple days.[/edit]

Dabljuh · New User Joined: 09 Dec 2007 Posts: 9

To give you an idea of what it does: This guy was just on my server (this is the ad_stats output) note that the 99.3% Significance there means, the plugin is 99.3% sure the guy cheats. (And yes, he is.)

Name SteamID NumHits AverageQuality AvgHSQuality Chi2 Significance
PASKA STEAM_0:1:10152273 40 91.0 152.5 24.2 99.3%
0.5 1.4 2.6 5.4 14.7 41.9 88.2 118.3 128.5 149.8
HistoT: (No Transform) ClassT: Log: 771.00
Histograph
0 0 0 0 1 4 8 4 6 16
Classes
0.0 0.0 0.0 0.1 0.3 0.9 2.9 9.3 30.5 99.6

Dabljuh · New User Joined: 09 Dec 2007 Posts: 9

Alright, I tested this one to up to 1000 hits without a false positive.

Also observe the "quality" display, it may work out as a quick way to dispatch aimbotters, where the chi-square test will only take over with a sufficient number of hits.

Mattie · Posted: Fri Dec 28, 2007 8:14 pm Post subject:

This plugin sounds really cool. I'll likely add it to one of my servers soon to give it a whirl.

Happy holidays,
-Mattie

dphiance · Newbie Joined: 17 Oct 2005 Posts: 61

Wow, a lot of advanced mathematical vector-age there :/ If GJ has the time he could look over it (he has a degree in Vectors, or something like that).

I've GOT to add this to my server, its just, SO GREAT!

1000 hit and 0 false positives, wow. Keep up the good work.

- Saul.

Dabljuh · New User Joined: 09 Dec 2007 Posts: 9

Don't get me wrong. With a "hit" I meant, a player_hurt event with a firearm. The previous release, b0.6a, had a calculation bug where the percentage would eventually begin to increase with more (a few hundred) hits. This bug was sorted, as well as a much smaller one. (it would possibly have taken hundreds of thousands of hits for that one to take effect)

So far, the problem I am having with the plugin is that it takes a ridiculous number of hits to give even the most blatant cheaters a high score. such cheaters would often empty a server before a sufficient number of hits is gathered, and thus the detection method would become worthless. This is why I'm currently designing more trivial methods of detection, to be able to remove a cheater after a few minutes. The upshot is that the gaussian chi-square fit mechanism may be able to detect even the most subtle of cheaters, with sufficient data.

As an Admin and a known cheater hunter, I've however found the plugin very useful to detect cheaters manually very quickly. Just looking at the figures usually answers the question to me whether some guy just seemed lucky, or if he's cheating.

dphiance · Newbie Joined: 17 Oct 2005 Posts: 61

Dabljuh · New User Joined: 09 Dec 2007 Posts: 9

Yes I saw the hackcam video. Never saw it in action though, even as I believe there is a possibility some of hackcam's code made it into VAC2.

Oh, there's more things wrong with CS. For example the AWP. CS revolves around the principle that it's not the caliber of the weapon, but the shot placement that kills you. The AWP flat out ignores that principle and kills you with a hit to your hand.

What's really depressing me is that CS is now over 8 years old. I played it back then in '99, and CS was ahead of its time. Most of the CS clones misunderstood it as a 'tactical shooter with realistic guns', back then the quakes and unreal tournaments were the FPS of choice. It really is time for something new to replace CS. Whatever that may be, it'll probably have the same problems with hackers.

dphiance · Newbie Joined: 17 Oct 2005 Posts: 61

Yeah, CS is way too old now. I might switch to Insurgency or make my own CS-like mod.

eric0279 · New User Joined: 15 Jan 2006 Posts: 24

Hi,

a version for windows ? Embarassed

Dabljuh · New User Joined: 09 Dec 2007 Posts: 9

Dabljuh · New User Joined: 09 Dec 2007 Posts: 9

Also note that the longer I use my plugin the more stuff I find that doesn't work. For example there appears to be a yet unidentified memory allocation problem that sometimes causes hard crashes on map start. This happens about once every two days for me. Furthermore I've put more thought into the actual detection mechanism and I figure I need to rework it some more. So don't give too much credit to the percentage values just yet.

eric0279 · New User Joined: 15 Jan 2006 Posts: 24

your-name-here · New User Joined: 20 Jan 2008 Posts: 3

Hey Dabljuh, I actually got your source-code to compile under windows! The only problem is the memory allocation problem that you mentioned. The plugin loads, but then crashes whenever someone is shot. I think it's a null-pointer exception.

Check this link out: http://forums.mattie.info/cs/forums/viewtopic.php?t=19641&postdays=0&postorder=asc&start=0

I hope we can get some help over there!