对于在线Android游戏，可以使用哪些服务来确保APK文件的完整性以防止作弊? [英] For online Android games, what services are available to ensure the integrity of the APK file to prevent cheating?

问题描述

假设我开发了一个与Android服务器交互的在线游戏.我要确保的是，在给定用户设备上运行的APK文件是我已上传到Google Play商店的APK. (意思是，我试图避免有人从设备中提取APK，对其进行黑客攻击，将其侧面加载回设备上，然后使用它来玩游戏的情况.)

Suppose I develop an online game that interacts with a server for Android. What I want to ensure is that the APK file running on a given users' device is the APK that I have uploaded to the Google Play Store. (Meaning, I'm trying to avoid situations where someone extracts the APK from a device, hacks it, sideloads it back onto the device and then uses it to play the game).

Google，Play商店，Android等提供的服务可以做到这一点吗?例如，Play商店可能具有该APK文件的SHA256校验和.由于我的游戏已与Google Play集成(用于保存游戏和进度)，我可以调用某些服务来将当前运行的游戏与Play商店注册的内容进行比较吗?

Are there services provided by Google, the Play Store, Android, etc that can do that? For instance, the Play Store might have a SHA256 checksum of that APK file. Since my game is integrated with Google Play (for saving your game and progress), is there some service that I could invoke to compare the currently running game with what the Play Store has registered?

我的想法是我无法向应用程序本身添加验证，因为动机足够高的修改器可能会绕过或伪造.我希望平台级别可能存在某些东西.

My thinking is that I can't add validation to my application itself since a sufficiently motivated modder could just bypass or forge. I was hoping something might exist at the platform-level.

提前谢谢！

推荐答案

这似乎就是 查看全文