ideas for security threats to an online application

Ok.

For my dissertation, part of it is about finding possible threats to online gambling, relating to how a player can get some assurance that they are not gonna get cheated online. - either by a player, or host, intentionally or unintenionally.

A few obvious things I have:

-players could collude
-house could be corrupt
-software player installs could be buggy
-phishing (fake emails) could be sent asking players to install 'updates' which could be a trojan, telling players what cards they have
-players could use statistical software to aid them
-servers may crash
-may be problems with shuffle algorithm

and there may be a few more. Could people just give thier 2 cents, either by going into specifics on technical aspects (ie the ways in which the server could be attacked (ie by sniffing etc) OR and even better, suggest some new threats to online gambling, and if possible a possible solution to it?

Any ideas would be appreciated.

Andy

what is the other part of your dissertation about?

Quote:

---

Could people just give thier 2 cents, either by going into specifics on technical aspects (ie the ways in which the server could be attacked (ie by sniffing etc) OR and even better, suggest some new threats to online gambling, and if possible a possible solution to it?

---

(translated) "I'm trying to sound like I need help, but I'd prefer if you would just write my dissertation for me".

Sounds like you have a good start-you can finish on your own. Your best work is YOUR best work.

The software on the server could be buggy..

If you take Poker, part of the skill of the game is remembering cards, using print screen would seem to help???

Quote:

---

translated) "I'm trying to sound like I need help, but I'd prefer if you would just write my dissertation for me".

Sounds like you have a good start-you can finish on your own. Your best work is YOUR best work.

---

lol. I dont know who annoyed you today, but that is not what I am saying at all.

I have 20,000 words to write, and trying to get a few ideas that I might not have thought of certainly in my book is not against any rules. I have enough ideas to fill out the 20,000 words, as the other half of the project is on legal and regfulatory issues. Security is something which I am not too familiar with so was asking for some ideas...thats all.

If anyone else has any i'd appreciate it

Andy

I would think a big one would be the "house" (company running the site) doesn't make good on winnings, disappears and sets themselves up again under a different name and does the same thing.

You make a good point about players colluding. I know some people who are avid online poker players who have two PCs in the one room and often undertake this type of activity.

andrewsco, good points so far, I think you've managed to nail most of them. In a tournament or 'for money' game situation, one player may resort to out-of-band (at least considering the poker applet/program being used) attacks to knock out or DoS opponents. If you are winning, and the game has no "All In Protection", you could DoS someone off their ISP connection if you knew their IP, just so they'd loose their money to the pot, increasing your odd's and potential winnings.

/me hasn't been playing online poker AT ALL lately... :rolleyes:
Well, I play a LOT...but never for real money. I save that for when I can drink beer and play against so-called-friends and look them in the eye. ;)