Monitoring game activity to detect a surrogate computer program

1. A computer-implemented method for monitoring game activity of a game system, the method comprising:

monitoring, by a processing device, game activity of the game system;

determining, by the processing device, characteristics of the game activity;

determining, by the processing device, expected characteristics of the game activity based at least in part on a cognitive reaction time of a human and a motor reaction time of the human, wherein determining the expected characteristics of the game activity comprises generating, based at least in part on the cognitive reaction time and the motor reaction time, a three-dimensional closed-hull boundary representing human limits;

analyzing, by the processing device, the characteristics of the game activity and the expected characteristics of the game activity;

determining, based at least in part on analyzing the characteristics of the game activity and the expected characteristics of the game activity, whether a human is controlling the game system, wherein it is determined that the human is controlling the game system when game activity is within the three-dimensional closed-hull boundary; and

determining, based at least in part on analyzing the characteristics of the game activity and the expected characteristics of the game activity, whether a surrogate computer program is controlling the game system, wherein it is determined that the surrogate computer program is controlling the game system when game activity is not within the three-dimensional closed-hull boundary.

2. The computer-implemented method of claim 1 further comprising initiating, by the processing device, a corrective action based at least in part on determining the entity that is controlling the game system.

3. The computer-implemented method of claim 2 , wherein the corrective action is selected from the group consisting of: sending an alert, removing a game player from an electronic game, nullifying any gain resulting from surrogate computer program usage, changing a color of an avatar of a user, removing points from a game player, removing a game item from the game player, stopping a game, posting a message to social media indicating that a game player is using a surrogate computer program, and slowing down a game player as if a character of the game player is moving through a viscous substance.

4. The computer-implemented method of claim 2 , wherein:

analyzing the characteristics of the game activity and the expected game activity comprises comparing the characteristics of the game activity to the expected characteristics of the game activity; and

the expected characteristics of the game activity comprise game play limits that are based at least in part on an expected human level of game play.

5. The computer-implemented method of claim 4 , wherein the expected human level of game play is based on human physiological, neuro-motor, or neuro-musculature data, and wherein the expected human level of game play is based at least in part on a type of game controller used to generate the game activity.

6. The computer-implemented method of claim 4 , wherein comparing the characteristics of the game activity to expected characteristics of the game activity comprises determining a confidence level that the game activity exceeds the game play limits.

7. The computer-implemented method of claim 6 , wherein:

the corrective action is selected from a plurality of corrective actions ranging in severity based at least in part on the confidence level;

a less severe corrective action corresponds to a lower confidence level; and

a more sever corrective action corresponds to a higher confidence level.

8. The computer-implemented method of claim 6 , wherein determining the confidence level comprises applying deep neural nets to one or more of game player behavior for a plurality of game players, the game activity, or the game play limits.

9. The computer-implemented method of claim 8 , wherein the game player behavior comprises a game level attained by each of the plurality game players, a skill level of each of the plurality game players, a time since joining a game for each of the plurality game players, a user history for each of the plurality game players, a typical duration of use per day for each of the plurality game players, and historical game activity for each of the plurality game players.

10. The computer-implemented method of claim 1 , wherein the game activity is generated from a game controller selected from the group comprising a joystick, a gamepad, a touchscreen, a keyboard, and a mouse.

11. The computer-implemented method of claim 4 , wherein comparing the characteristics of the game activity to the expected characteristics of the game activity further comprises comparing the characteristics of the game activity to the three-dimensional closed-hull boundary of normal human play.

12. The computer-implemented method of claim 11 , wherein the three-dimensional closed-hull boundary comprises a player memory component, a player reaction time component, and a player sensory motor integration component.