{"id":729,"date":"2009-02-06T16:56:45","date_gmt":"2009-02-07T00:56:45","guid":{"rendered":"http:\/\/cubist.cs.washington.edu\/Security\/?p=729"},"modified":"2009-02-06T16:56:45","modified_gmt":"2009-02-07T00:56:45","slug":"security-review-eve-online-alliance","status":"publish","type":"post","link":"https:\/\/secblog.cs.washington.edu\/Security\/2009\/02\/06\/security-review-eve-online-alliance\/","title":{"rendered":"Security Review &#8211; Eve Online Alliance"},"content":{"rendered":"<p>According to an article from Massively, Eve Online experienced an upset in their internal politics this week.  &#8220;Band of Brothers (aka &#8220;BoB&#8221;), the self-styled villain alliance in the game,&#8221; has been taken down from within their own ranks.  Not having played EVE, I can&#8217;t comment on the exact details of the event, but it appears the alliance was disbanded by a single, well-placed deserter.\u00a0 This is one example of a lack of security leading to the loss of a great deal of in-game assets.<\/p>\n<p>The specifics of the situation are not entirely clear to me, but according to massively:<\/p>\n<blockquote><p>Once assured a place within GoonSwarm, Agamar [the deserter] proceeded to disband the Band of Brothers alliance using his director level access. In addition to shutting down the alliance, he cleaned out his corporation&#8217;s ISK reserves and stole their dreadnaught (capital ship) fleet, which became a gift to GoonSwarm.<\/p><\/blockquote>\n<p>Other MMOs have a similar situation where player organizations have a single person in charge.\u00a0 This makes management easy, since only the leader needs to be online to make any changes to the group, but at the same time this creates a single point of failure.\u00a0 If this leader decides he no longer wants his position, he can simply hand off control to someone else.\u00a0 If he&#8217;s malicious, however, he has the sole power to disband the group and keep any group-controlled assets.\u00a0 In the case of other MMOs, these are generally not extremely valuable assets, but in Eve Online, they can be immensely valuable in terms of the time required to obtain them.\u00a0 In particular, with the disband of their alliance, BoB lost sovereignty of its territories, meaning any infrastructure there is useless for the next three months.\u00a0 Their territories are conquerable, their cyno-jammers that prevent capital ships from entering the territory, and jump bridges that allow smaller ships to move between systems, are all inoperable.\u00a0 These assets took years to build and aqcuire, and they became inoperable for a few months due to the actions of a single individual.<\/p>\n<p>Since Eve Online alliance comprise thousands of players, it would seem that there should be a more secure system to protect the assets of these groups that relying on a single individual to be in charge of everything.\u00a0 In a real world setting, bureaucracy prevents any one individual from taking actions that could negatively affect the entire organization, and it would seem something like that is needed in Eve if this situation is something to be avoided in the future.\u00a0 Then again, maybe it&#8217;s just what makes the game what it is.<\/p>\n<h3><span style=\"color: #808000;\">Assets &amp;Security Goals:<\/span><\/h3>\n<ul>\n<li>Maintain control and access to in-game assets, including defenses and manufacturing stations.<\/li>\n<li>Privacy of communications made on private message boards.<\/li>\n<\/ul>\n<h3><span style=\"color: #808000;\">Potential Adversaries &amp; Threats:<\/span><\/h3>\n<ul>\n<li>Rival Alliances: the goal of PvP in the game is to conquer territories for your alliance\/cop at the expense of other alliances and corps.\u00a0 In this case, the GoonSwarm&#8217;s main goal was to dismantle BoB.<\/li>\n<li>Malicious Insiders: a disgruntled member of the alliance might wish to cause harm to the alliance before he leaves for greener pastures.<\/li>\n<\/ul>\n<h3><span style=\"color: #808000;\">Potential Weaknesses:<\/span><\/h3>\n<ul>\n<li>A lack of any sort of bureaucratic system to make changes creates a single point of failure in the leader of the alliance.\u00a0 If that player deserts, the member corps have no way of preventing him from dealing serious damage.<\/li>\n<li>Likewise anyone who happened to gain access to that player&#8217;s account through insidious means, such as a keylogger, would be able to perform the same actions without any member of the alliance&#8217;s consent.<\/li>\n<\/ul>\n<h3><span style=\"color: #808000;\">Potential Defenses:<\/span><\/h3>\n<ul>\n<li>Extraordinary permissions could be required to enact any sweeping changes to alliances.\u00a0 In particular, removing a corp from an alliance could require a minimum number of director level players.<\/li>\n<li>There could be a holding period before a corp can be removed from an alliance, allowing a day or two for other corps in the alliance to respond.<\/li>\n<\/ul>\n<p>Some sort of balance needs to be struck between the security against malicious actions and the ability of leaders to make the actions at all.\u00a0 Perhaps this is already balanced in a way that makes the game what it is.\u00a0 In order to make the politics and metagaming accessible to players and move in time frames of months rather than years, it makes sense that some of these actions would be a little too easy to be entirely secure.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>According to an article from Massively, Eve Online experienced an upset in their internal politics this week. &#8220;Band of Brothers (aka &#8220;BoB&#8221;), the self-styled villain alliance in the game,&#8221; has been taken down from within their own ranks. Not having &hellip; <a href=\"https:\/\/secblog.cs.washington.edu\/Security\/2009\/02\/06\/security-review-eve-online-alliance\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":71,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-729","post","type-post","status-publish","format-standard","hentry","category-security-reviews"],"_links":{"self":[{"href":"https:\/\/secblog.cs.washington.edu\/Security\/wp-json\/wp\/v2\/posts\/729","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/secblog.cs.washington.edu\/Security\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/secblog.cs.washington.edu\/Security\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/secblog.cs.washington.edu\/Security\/wp-json\/wp\/v2\/users\/71"}],"replies":[{"embeddable":true,"href":"https:\/\/secblog.cs.washington.edu\/Security\/wp-json\/wp\/v2\/comments?post=729"}],"version-history":[{"count":10,"href":"https:\/\/secblog.cs.washington.edu\/Security\/wp-json\/wp\/v2\/posts\/729\/revisions"}],"predecessor-version":[{"id":741,"href":"https:\/\/secblog.cs.washington.edu\/Security\/wp-json\/wp\/v2\/posts\/729\/revisions\/741"}],"wp:attachment":[{"href":"https:\/\/secblog.cs.washington.edu\/Security\/wp-json\/wp\/v2\/media?parent=729"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/secblog.cs.washington.edu\/Security\/wp-json\/wp\/v2\/categories?post=729"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/secblog.cs.washington.edu\/Security\/wp-json\/wp\/v2\/tags?post=729"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}