Gaming machine security devices and methods
A security support device installed within or affixed to an electronic gaming machine includes at least one network interface configured to inspect network traffic being generated by one or more components of the electronic gaming machine. The security support device also includes a security support component configured to receive network packets from the at least one network interface, the network packets are transmitted between a game controller of the electronic gaming machine and one of the external server, extract one or more components of operational data from the network packets, the operational data related to the operation of the electronic gaming machine, detect fraudulent player conduct based on the one or more components of operational data, and generate a security alert in response to the detected fraudulent player conduct.
1 . A security support device for an electronic gaming device, the security support device comprising:
a security support component comprising at least one processor communicatively coupled with a game controller of the electronic gaming device and a player tracking interface of the electronic gaming device, wherein the at least one processor is configured to:
detect data transmitted between the game controller and the player tracking interface, wherein the data is addressed to at least one of the game controller or the player tracking interface, and wherein the data includes operational data associated with operation of the electronic gaming device;
input the operational data into a machine-learning model, the machine-learning model trained with historical operational data of a plurality of other electronic gaming devices including labeled data for identifying fraudulent player conduct from predefined normal player conduct;
identify suspected fraudulent player conduct based on an output from the machine-learning model based upon the input of the operational data of the electronic gaming device; and
in response to identifying the suspected fraudulent player conduct, cause a mitigating action to be performed, wherein the mitigating action comprises at least one of i) disabling the electronic gaming device, ii) generating a security alert, or iii) removing the electronic gaming device from participation in a multiplayer electronic game.
2 . The security support device of claim 1 , wherein the at least one processor is further configured to input the operational data to the machine-learning model by transmitting the operational data to a security support server, wherein the security support server is configured to:
apply the operational data into the machine-learning model; and
transmit the output from the machine-learning model to the electronic gaming device.
3 . The security support device of claim 2 , wherein the security support server is further configured to train the machine-learning model based on the operational data.
4 . The security support device of claim 1 , wherein the machine-learning model comprises a classification model trained with labeled data associated with a plurality of electronic gaming devices.
5 . The security support device of claim 1 , wherein the machine-learning model comprises an unsupervised anomaly detection model configured to identify instances of abnormal activity in the operational data by comparing the operational data to historical training data associated with prior game play.
6 . The security support device of claim 1 , wherein the operational data includes video data associated with the electronic gaming device, and wherein the at least one processor is further configured to input the video data associated with the electronic gaming device to the machine-learning model, and wherein the output is further associated with the video data.
7 . The security support device of claim 1 , wherein the operational data includes audio data associated with the electronic gaming device, and wherein the at least one processor is further configured to input the audio data associated with the electronic gaming device to the machine-learning model, and wherein the output is further associated with the audio data.
8 . At least one non-transitory computer-readable storage medium with instructions stored thereon that, in response to execution by at least one processor communicatively coupled with a game controller of an electronic gaming device and a player tracking interface of the electronic gaming device, cause the at least one processor to:
detect data transmitted between the game controller and the player tracking interface, wherein the data is addressed to at least one of the game controller or the player tracking interface, and wherein the data includes operational data associated with operation of the electronic gaming device;
cause the operational data to be inputted into a machine-learning model, the machine-learning model trained with historical operational data of a plurality of other electronic gaming devices including labeled data for identifying fraudulent player conduct from predefined normal player conduct;
detect suspected fraudulent player conduct based on an output from the machine-learning model based upon the input of the operational data of the electronic gaming device; and
in response to detecting the suspected fraudulent player conduct, cause a mitigating action to be performed, wherein the mitigating action comprises at least one of i) disabling the electronic gaming device, ii) generating a security alert, or iii) removing the electronic gaming device from participation in a multiplayer electronic game.
9 . The at least one non-transitory computer-readable storage medium of claim 8 , wherein the instructions further cause the at least one processor to input the operational data to the machine-learning model by transmitting the operational data to a security support server, wherein the security support server is configured to:
apply the operational data into the machine-learning model; and
transmit the output from the machine-learning model to the electronic gaming device.
10 . The at least one non-transitory computer-readable storage medium of claim 8 , wherein the machine-learning model comprises a classification model trained with labeled data associated with a plurality of electronic gaming devices.
11 . The at least one non-transitory computer-readable storage medium of claim 8 , wherein the machine-learning model comprises an unsupervised anomaly detection model configured to identify instances of abnormal activity in the operational data by comparing the operational data to historical training data associated with prior game play.
12 . The at least one non-transitory computer-readable storage medium of claim 8 , wherein the operational data includes video data associated with the electronic gaming device, and wherein the instructions further cause the at least one processor to input the video data associated with the electronic gaming device to the machine-learning model, and wherein the output is further associated with the video data.
13 . The at least one non-transitory computer-readable storage medium of claim 8 , wherein the operational data includes audio data associated with the electronic gaming device, and wherein the instructions further cause the at least one processor to input the audio data associated with the electronic gaming device to the machine-learning model, and wherein the output is further associated with the audio data.
14 . A method for detecting suspected fraudulent player conduct at an electronic gaming device, the method comprising:
detecting, by a security support device comprising at least one processor communicatively coupled with a game controller of the electronic gaming device and a player tracking interface of the electronic gaming device, data transmitted between the game controller and the player tracking interface, wherein the data is addressed to at least one of the game controller or the player tracking interface, and wherein the data includes operational data associated with operation of the electronic gaming device;
inputting the operational data into a machine-learning model, the machine-learning model trained with historical operational data of a plurality of other electronic gaming devices including labeled data for identifying fraudulent player conduct from predefined normal player conduct;
identifying the suspected fraudulent player conduct based on an output from the machine-learning model based upon the input of the operational data of the electronic gaming device; and
in response to identifying the suspected fraudulent player conduct, causing a mitigating action to be performed, wherein the mitigating action comprises at least one of i) disabling the electronic gaming device, ii) generating a security alert, or iii) removing the electronic gaming device from participation in a multiplayer electronic game.
15 . The method of claim 14 , wherein inputting the operational data to the machine-learning model is performed by transmitting the operational data to a security support server, wherein the security device is configured to:
apply the operational data into the machine-learning model; and
transmit the output from the machine-learning model to the electronic gaming device.
16 . The method of claim 15 , wherein the security support server is further configured to train the machine-learning model based on the operational data.
17 . The method of claim 14 , wherein the machine-learning model comprises a classification model trained with labeled data associated with a plurality of electronic gaming devices.
18 . The method of claim 14 , wherein the machine-learning model comprises an unsupervised anomaly detection model configured to identify instances of abnormal activity in the operational data by comparing the operational data to historical training data associated with prior game play.
19 . The method of claim 14 , wherein the operational data includes video data associated with the electronic gaming device, and the method further comprising inputting the video data associated with the electronic gaming device to the machine-learning model, wherein the output is further associated with the video data.
20 . The method of claim 14 , wherein the operational data includes audio data associated with the electronic gaming device, and the method further comprising inputting the audio data associated with the electronic gaming device to the machine-learning model, wherein the output is further associated with the audio data.