Game plug-in monitoring method, device and system

Abstract

The invention relates to the field of games, in particular to a game plug-in monitoring method, device and system, and the method can determine suspicious potential plug-in players by comparing the operation behaviors of players with the operation behaviors of plug-in software, and further misleads the potential plug-in software by replacing response parameters. If the misleading degree of the potential plug-in player is low and the corresponding operation difference degree is small, it can be judged that the player does not use the plug-in software, and on the contrary, if the misleading degree of the potential plug-in player is high and the corresponding operation difference degree is large, it can be judged that the player uses the plug-in software. Therefore, the accuracy of judging the plug-in players is greatly improved, the risk of misjudgment is reduced, and the experience feeling of the players is ensured.

Description

Technical Field

[0001] The present invention relates to the field of games, and in particular to a method, device and system for monitoring game cheats. Background Art

[0002] A game cheat is a software tool that can achieve automatic operation by modifying the game program or exploiting game loopholes. A game cheat can automatically match the input operation characters by identifying the parameters of the previous game response in the memory, thereby achieving automatic operation;

[0003] In order to ensure the fairness of the game, the game platform often monitors whether the players use game plug-ins, and takes corresponding restrictive measures against players who use game plug-ins; however, the existing game plug-in monitoring methods mainly focus on whether the players obtain special game benefits. However, many plug-ins are not intended to obtain special benefits for players, but to replace the player's operation. Due to their highly simulated operation mode, the existing monitoring methods are difficult to accurately distinguish whether it is a plug-in operation or a player operation, which is prone to misjudgment. Summary of the invention

[0004] Based on this, it is necessary to provide a game cheat monitoring method, device and system to address the above-mentioned problems.

[0005] The embodiment of the present invention is implemented by providing a method for monitoring game cheats, the method comprising:

[0006] S1: Obtain a plug-in software library, call each plug-in software in the plug-in software library to perform game simulation, and thus determine a set of operation behaviors of each plug-in software in the game;

[0007] S2: When any player plays the game, determine the set of operation behaviors of the player;

[0008] S3: Determine the similarity between the operation behavior set of the player and the operation behavior set of each plug-in software, and if any similarity reaches a preset similarity, determine the player as a potential plug-in player;

[0009] S4: For each potential cheating player, replace the game response parameters in real time, wherein after the game response parameters are replaced, when the same game response is displayed on the display screen, the replaced parameters are stored in the memory;

[0010] S5: monitoring the first operation character input by the potential cheating player for the game response after the parameter replacement, and retrieving the second operation character corresponding to the same game response before the parameter replacement;

[0011] S6: Determine the operation difference based on the first operation character and the second operation character. If the operation difference exceeds a preset difference, the potential cheating player is determined to be a cheating player. Otherwise, the player is not a cheating player.

[0012] In one embodiment, the present invention provides a game cheat monitoring device, the device comprising:

[0013] The acquisition module is used to acquire the plug-in software library, call each plug-in software in the plug-in software library to perform game simulation, and thus determine the set of operation behaviors of each plug-in software in the game;

[0014] A first processing module is used to determine the operation behavior set of any player when the player plays the game;

[0015] The second processing module is used to determine the similarity between the operation behavior set of the player and the operation behavior set of each plug-in software, and if any similarity reaches a preset similarity, the player is determined as a potential plug-in player;

[0016] The third processing module is used to replace the parameters of the game response in real time for each potential cheating player, wherein after the game response is replaced with the parameters, when the same game response is displayed on the display screen, the replaced parameters are stored in the memory;

[0017] A monitoring module, used to monitor the first operation character input by the potential cheating player for the game response after the parameter replacement, and retrieve the second operation character corresponding to the same game response before the parameter replacement;

[0018] The fourth processing module is used to determine the operation difference based on the first operation character and the second operation character. If the operation difference exceeds a preset difference, the potential cheating player is determined to be a cheating player. Otherwise, the player is not a cheating player.

[0019] In one embodiment, the present invention provides a game cheat monitoring system, the system comprising:

[0020] Storage server, used to store plug-in software library;

[0021] A computer device communicates with a storage server and is used to execute the steps of the game cheat monitoring method.

[0022] The present invention provides a method, device and system for monitoring game plug-ins, wherein the method comprises obtaining a plug-in software library, calling each plug-in software in the plug-in software library to perform game simulation, thereby determining the operation behavior set of each plug-in software in the game; when any player plays the game, determining the operation behavior set of the player; determining the similarity between the operation behavior set of the player and the operation behavior set of each plug-in software, and if any similarity reaches a preset similarity, determining the player as a potential plug-in player; for each potential plug-in player, performing parameter replacement on the game response in real time; monitoring the first operation character input by the potential plug-in player for the game response after the parameter replacement, calling the second operation character corresponding to the same game response before the parameter replacement; and The second operation character determines the operation difference. If the operation difference exceeds the preset difference, the potential plug-in player is judged as a plug-in player, otherwise, the player is not a plug-in player. In the present application, suspicious potential plug-in players can be determined by comparing the player's operation behavior with the operation behavior of the plug-in software, and then the potential plug-in software can be misled by replacing the response parameters. If the potential plug-in player is misled to a low degree and the corresponding operation difference is small, it can be determined that the player is not using plug-in software. On the contrary, if the potential plug-in player is misled to a high degree and the corresponding operation difference is large, it can be determined that the player is using plug-in software, which greatly improves the accuracy of determining plug-in players, reduces the risk of misjudgment, and ensures the player's experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 A first flow chart of a method for monitoring game cheats provided in one embodiment;

[0024] Figure 2 A second flow chart of a method for monitoring game cheats provided in one embodiment;

[0025] Figure 3 A module flow chart of a game cheat monitoring device provided in one embodiment;

[0026] Figure 4 A schematic diagram of the composition of a game cheat monitoring system provided in one embodiment;

[0027] Figure 5 FIG. 4 is a block diagram of the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0028] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0029] It is understood that the terms "first", "second", etc. used in the present invention may be used herein to describe various elements, but unless otherwise specified, these elements are not limited by these terms. These terms are only used to distinguish a first element from another element. For example, a first xx script may be referred to as a second xx script, and similarly, a second xx script may be referred to as a first xx script without departing from the scope of the present invention.

[0030] like Figure 1-Figure 2 As shown, in one embodiment, a game cheat monitoring method is proposed, the method comprising:

[0031] S1: Obtain a plug-in software library, call each plug-in software in the plug-in software library to perform game simulation, and thus determine a set of operation behaviors of each plug-in software in the game;

[0032] S2: When any player plays the game, determine the set of operation behaviors of the player;

[0033] S3: Determine the similarity between the operation behavior set of the player and the operation behavior set of each plug-in software, and if any similarity reaches a preset similarity, determine the player as a potential plug-in player;

[0034] S4: For each potential cheating player, replace the game response parameters in real time, wherein after the game response parameters are replaced, when the same game response is displayed on the display screen, the replaced parameters are stored in the memory;

[0035] S5: monitoring the first operation character input by the potential cheating player for the game response after the parameter replacement, and retrieving the second operation character corresponding to the same game response before the parameter replacement;

[0036] S6: Determine the operation difference based on the first operation character and the second operation character. If the operation difference exceeds a preset difference, the potential cheating player is determined to be a cheating player. Otherwise, the player is not a cheating player.

[0037] In this embodiment, this method is executed in a computer device, which can be an independent physical server or terminal, or a server cluster composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud servers, cloud databases, cloud storage and CDN; the computer device communicates with the storage server, and the plug-in database of the storage server stores all known plug-in software collected by the staff (and is constantly updated). The computer device can obtain the plug-in software library from the storage server, and then obtain each plug-in software.

[0038] In this embodiment, after the player inputs the operation characters (which will be stored in the memory), the game will make a corresponding response, i.e., the game response, and then store the response parameters in the memory (the parameters that the game stores in the memory for reference after executing the game response to record the game process); the operation behavior set of the plug-in software in the game represents the operation behavior characteristics of the plug-in software in the game, and the operation behavior set of the player represents the operation behavior characteristics of the player; when the similarity between the operation behavior set of the player and the operation behavior set of the plug-in software reaches a preset similarity (set to a higher ratio, such as 90%), the operation behavior characteristics representing the player are highly similar to the operation behavior characteristics of the plug-in software, and the probability of the player using the plug-in software is high, so the player is determined as a potential plug-in player;

[0039] In this embodiment, after the game response is replaced with parameters, the replaced parameters are stored in the memory when the same game response is displayed on the display screen; since the plug-in software inputs the operation characters by scanning the response parameters in the memory, and the player inputs the operation characters through the game response displayed on the display screen; therefore, after the parameter replacement, when the game executes the same game response, if the player does not use the plug-in software, the operation characters input by the player will most likely not change, resulting in a relatively small corresponding operation difference; and if the player uses the plug-in software, the operation characters input by the plug-in software will change (equivalent to misleading the plug-in software), resulting in a very large operation difference between the two (almost every time the input operation parameters are inconsistent); therefore, when the operation difference exceeds the preset difference (which can be set to a larger difference to avoid misjudging the player as a plug-in player due to the increase in operation difference caused by the player's misoperation), it can be accurately determined that the player is a plug-in player.

[0040] In the present application, suspicious potential plug-in players can be identified by comparing the player's operating behavior with the operating behavior of the plug-in software, and then the potential plug-in software can be misled by replacing the response parameters. If the potential plug-in player is misled to a low degree and the corresponding operation difference is small, it can be determined that the player is not using plug-in software. On the contrary, if the potential plug-in player is misled to a high degree and the corresponding operation difference is large, it can be determined that the player is using plug-in software, which greatly improves the accuracy of determining plug-in players, reduces the risk of misjudgment, and ensures the player's experience.

[0041] As a preferred embodiment, the calling of each plug-in software in the plug-in software library to perform game simulation, thereby determining the set of operation behaviors of each plug-in software in the game includes:

[0042] S11: Select a plug-in software from the plug-in software library;

[0043] S12: Start the game and the selected plug-in software;

[0044] S13: Control the game to execute a game response, so that the plug-in software recognizes the response parameters in the memory and inputs matching operation characters;

[0045] S14: Integrate the response parameter and the input operation character into a mapping group;

[0046] S15: Repeat step S13 to step S14 until all mapping groups corresponding to the game responses are obtained, and all mapping groups are integrated into an operation behavior set of the plug-in software;

[0047] S16: Repeat steps S11 to S15 until a set of operation behaviors of each plug-in software in the plug-in software library is obtained.

[0048] Determine the operation behavior set of the player, that is, monitor the operation characters input by the player when each response parameter is stored in the memory, and form the monitored operation characters into the operation behavior set of the player;

[0049] Determining the similarity between the player's operation behavior set and the operation behavior set of each plug-in software includes:

[0050] S31: when each set of response parameters is stored in the memory, the operation characters input by the player are identified, and the response parameters and the operation characters are integrated into a comparison mapping group;

[0051] S32: Determine whether there is a mapping group identical to the compared mapping group in the operation behavior set of each plug-in software, and if so, mark the mapping group;

[0052] S33: Repeating steps S31 to S32 for a first set number of times, counting the number of marked mapping groups in the operation behavior set of each plug-in software, so as to calculate the similarity between the operation behavior set of the player and the operation behavior set of the plug-in software, wherein the operation behavior set of the player is a set integrated by the compared mapping groups;

[0053] The similarity between the player's operation behavior set and the plug-in software's operation behavior set is calculated using the following formula:

[0054]

[0055] Among them, S is the similarity, t f is the first set number, t m It is the number of marked mapping groups in the operation behavior set of the plug-in software.

[0056] In this embodiment, the operation behavior is characterized by the operation character input for a response parameter; each plug-in software has a built-in parameter-character matching table, which includes various response parameters generated in the game and matching operation characters set for each parameter; the plug-in software can scan the memory to identify the response parameters of the game, and then automatically input matching operation characters to make the game further respond, and so on and so forth to achieve automatic operation of the game; through the method of this embodiment, by simulating the execution of all game responses, all matching operation parameters of the plug-in software can be extracted, and the extracted operation parameters can reflect the operation behavior characteristics of the plug-in software (that is, which set of operation characters should be entered when encountering a certain game response); further, in the player's game, its operation behavior characteristics can be directly identified, thereby sorting out its operation behavior set; the first set number of times can be 20 times or other times, which can be set according to the actual computing power of the computer device, and the more times the number is set, the higher the accuracy of the similarity.

[0057] As a preferred embodiment, the real-time parameter replacement of the game response includes:

[0058] Whenever it is detected that the game is about to execute a game response, the corresponding relationship of the parameters of the game response is changed, so that the game stores the replaced response parameters in the memory when executing the game response;

[0059] After storing the replaced response parameters, restoring the parameter correspondence of the game response;

[0060] Replacement information of the replaced response parameter is identified for restoring the replaced response parameter after the monitoring is completed, wherein the replacement information includes a storage location and the replaced response parameter.

[0061] The parameter correspondences that change the game response include:

[0062] Identifying initial response parameters corresponding to the game response;

[0063] Performing character comparison between the initial response parameter and other response parameters, thereby selecting a set number of response parameters with the lowest degree of character matching among the other response parameters, and integrating the selected response parameters into a replacement set;

[0064] A response parameter is randomly selected from the replacement set to replace the initial response parameter.

[0065] When the monitoring times in step S5 reaches the second set times, step S6 is executed; determining the operation difference between the first operation character and the second operation character includes:

[0066] For each monitored game response, determine whether the first operation character corresponding to the game response is the same as the second operation character, and if so, add 1 to the number of first scores;

[0067] If not, retrieve the third operation character previously input by the potential cheating player for the replaced response parameter, and determine whether the first operation character is the same as the third operation character. If not, add 1 to the number of the second score. If yes, add 1 to the number of the third score.

[0068] The operation difference is determined according to the first score, the second score, the third score, the number of the first scores, the number of the second scores, and the number of the third scores.

[0069] The operation difference is calculated by the following formula:

[0070] D=-αP1+βP2+θP3

[0071] Among them, D is the operation difference, P1 is the first score, P2 is the second score, P3 is the third score, α is the number of the first score, β is the number of the second score, θ is the number of the third score; the sum of α, β and θ is equal to the second set number of times.

[0072] In this embodiment, the parameter correspondence relationship is a response parameter corresponding to a game response. After each replacement response parameter is stored, the parameter correspondence relationship of the game response is restored, so that the parameter replacement is performed again when the game response appears next time, so that the response parameters of the game response stored each time are different, thereby increasing the misleading effect on the plug-in software. Furthermore, by storing the replacement information, the replaced parameters can be restored to the corresponding position in the memory after the monitoring is completed, thereby ensuring the accuracy of the game process recorded in the memory.

[0073] In this embodiment, the operation difference is represented by the final cumulative score, and the higher the score, the greater the difference; the first score, the second score and the third score can be 10, 5 and 10 respectively; when the first operation character is the same as the second operation character, it is highly likely that the first operation character is manually input, so 10 points are subtracted; when the first operation character is different from the second operation character, there are two situations at this time. One is that the first operation character is the same as the third operation character, which indicates that the potential cheating player only inputs the operation character according to the response parameter, and it can be inferred that it is highly likely that the input is executed by the cheating software, and it should be Accumulate more points, such as 10 points; and another situation is that the first operation character is different from the third operation character, this situation may also be due to the player's wrong operation, so the accumulated points are less, such as 5 points; the second set number of times can be 10 times, 20 times, and the preset difference can be set according to the second set number of times, for example, when the second set number of times is 10 times, the preset difference can be set to 70 points, and the specific setting value is not limited here; in this embodiment, the degree to which the potential plug-in player is misled after the parameter replacement can be determined according to the size of the operation difference, and then it can be accurately determined whether he is a plug-in player.

[0074] like Figure 3 As shown, in one embodiment, a game cheat monitoring device is provided, the device comprising:

[0075] The acquisition module is used to acquire the plug-in software library, call each plug-in software in the plug-in software library to perform game simulation, and thus determine the set of operation behaviors of each plug-in software in the game;

[0076] A first processing module is used to determine the operation behavior set of any player when the player plays the game;

[0077] The second processing module is used to determine the similarity between the operation behavior set of the player and the operation behavior set of each plug-in software, and if any similarity reaches a preset similarity, the player is determined as a potential plug-in player;

[0078] The third processing module is used to replace the parameters of the game response in real time for each potential cheating player, wherein after the game response is replaced with the parameters, when the same game response is displayed on the display screen, the replaced parameters are stored in the memory;

[0079] A monitoring module, used to monitor the first operation character input by the potential cheating player for the game response after the parameter replacement, and retrieve the second operation character corresponding to the same game response before the parameter replacement;

[0080] The fourth processing module is used to determine the operation difference based on the first operation character and the second operation character. If the operation difference exceeds a preset difference, the potential cheating player is determined to be a cheating player. Otherwise, the player is not a cheating player.

[0081] The process of each module in the game cheat monitoring device provided in the embodiment of the present application realizing its own function can be specifically referred to the aforementioned Figure 1 The description of the illustrated embodiment will not be repeated here.

[0082] like Figure 4 As shown, in one embodiment, a game cheat monitoring system is provided, the system comprising:

[0083] Storage server, used to store plug-in software library;

[0084] A computer device communicates with a storage server and is used to execute the steps of the game cheat monitoring method.

[0085] In this embodiment, the computer device and the storage server cooperate to execute the method, which can determine suspicious potential plug-in players by comparing the player's operating behavior and the operating behavior of the plug-in software, and then mislead the potential plug-in software by replacing the response parameters. If the potential plug-in player is misled to a low degree and the corresponding operation difference is small, it can be determined that the player is not using plug-in software. On the contrary, if the potential plug-in player is misled to a high degree and the corresponding operation difference is large, it can be determined that the player is using plug-in software, which greatly improves the accuracy of determining plug-in players, reduces the risk of misjudgment, and ensures the player's experience.

[0086] Figure 5 FIG. 2 shows an internal structure diagram of a computer device in one embodiment. Figure 5 As shown, the computer device includes a processor, a memory, a network interface, an input device and a display screen connected through a system bus. Among them, the memory includes a non-volatile storage medium and an internal memory. The non-volatile storage medium of the computer device stores an operating system and may also store a computer program. When the computer program is executed by the processor, the processor can implement the game cheat monitoring method provided in the embodiment of the present invention. The internal memory may also store a computer program. When the computer program is executed by the processor, the processor can execute the game cheat monitoring method provided in the embodiment of the present invention. The display screen of the computer device may be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device may be a touch layer covering the display screen, or a button, trackball or touchpad provided on the housing of the computer device, or an external keyboard, touchpad or mouse, etc.

[0087] Those skilled in the art will understand that Figure 5 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present invention, and does not constitute a limitation on the computer device to which the solution of the present invention is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0088] In one embodiment, the game cheat monitoring device provided by the embodiment of the present invention can be implemented in the form of a computer program. The computer program can be Figure 5 The computer device shown in the figure is run. The memory of the computer device can store various program modules that constitute the game cheat monitoring device, such as: Figure 3 The acquisition module, the first processing module, the second processing module, the third processing module, the monitoring module, and the fourth processing module shown in the figure are computer programs composed of various program modules, which enable the processor to execute the steps of the game cheat monitoring method of each embodiment of the present invention described in this specification.

[0089] For example, Figure 5 The computer device shown can be Figure 3 The acquisition module in the game cheat monitoring device shown executes step S1; the computer device can execute step S2 through the first processing module; the computer device can execute step S3 through the second processing module; the computer device can execute step S4 through the third processing module; the computer device can execute step S5 through the monitoring module; the computer device can execute step S6 through the fourth processing module.

[0090] In one embodiment, a computer device is provided, the computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the following steps are implemented:

[0091] S1: Obtain a plug-in software library, call each plug-in software in the plug-in software library to perform game simulation, and thus determine a set of operation behaviors of each plug-in software in the game;

[0092] S2: When any player plays the game, determine the set of operation behaviors of the player;

[0093] S3: Determine the similarity between the operation behavior set of the player and the operation behavior set of each plug-in software, and if any similarity reaches a preset similarity, determine the player as a potential plug-in player;

[0094] S4: For each potential cheating player, replace the game response parameters in real time, wherein after the game response parameters are replaced, when the same game response is displayed on the display screen, the replaced parameters are stored in the memory;

[0095] S5: monitoring the first operation character input by the potential cheating player for the game response after the parameter replacement, and retrieving the second operation character corresponding to the same game response before the parameter replacement;

[0096] S6: Determine the operation difference based on the first operation character and the second operation character. If the operation difference exceeds a preset difference, the potential cheating player is determined to be a cheating player. Otherwise, the player is not a cheating player.

[0097] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the processor performs the following steps:

[0098] S1: Obtain a plug-in software library, call each plug-in software in the plug-in software library to perform game simulation, and thus determine a set of operation behaviors of each plug-in software in the game;

[0099] S2: When any player plays the game, determine the set of operation behaviors of the player;

[0100] S3: Determine the similarity between the operation behavior set of the player and the operation behavior set of each plug-in software, and if any similarity reaches a preset similarity, determine the player as a potential plug-in player;

[0101] S4: For each potential cheating player, replace the game response parameters in real time, wherein after the game response parameters are replaced, when the same game response is displayed on the display screen, the replaced parameters are stored in the memory;

[0102] S5: monitoring the first operation character input by the potential cheating player for the game response after the parameter replacement, and retrieving the second operation character corresponding to the same game response before the parameter replacement;

[0103] S6: Determine the operation difference based on the first operation character and the second operation character. If the operation difference exceeds a preset difference, the potential cheating player is determined to be a cheating player. Otherwise, the player is not a cheating player.

[0104] It should be understood that, although each step in the flow chart of each embodiment of the present invention is shown in sequence according to the indication of the arrow, these steps are not necessarily performed in sequence according to the order indicated by the arrow. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be performed in other orders. Moreover, at least a portion of the steps in each embodiment may include a plurality of sub-steps or a plurality of stages, and these sub-steps or stages are not necessarily performed at the same time, but can be performed at different times, and the execution order of these sub-steps or stages is not necessarily performed in sequence, but can be performed in turn or alternately with at least a portion of other steps or sub-steps or stages of other steps.

[0105] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by instructing the relevant hardware through a computer program, and the program can be stored in a non-volatile computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided by the present invention can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0106] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0107] The above-mentioned embodiments only express several implementation methods of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the patent of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.

Claims

1. A method for monitoring game cheats, characterized in that: The method comprises: S1: Obtain a plug-in software library, call each plug-in software in the plug-in software library to perform game simulation, and thus determine a set of operation behaviors of each plug-in software in the game; S2: When any player plays the game, determine the set of operation behaviors of the player; S3: Determine the similarity between the operation behavior set of the player and the operation behavior set of each plug-in software, and if any similarity reaches a preset similarity, determine the player as a potential plug-in player; S4: For each potential cheating player, replace the game response parameters in real time, wherein after the game response parameters are replaced, when the same game response is displayed on the display screen, the replaced parameters are stored in the memory; S5: monitoring the first operation character input by the potential cheating player for the game response after the parameter replacement, and retrieving the second operation character corresponding to the same game response before the parameter replacement; S6: Determine the operation difference based on the first operation character and the second operation character. If the operation difference exceeds a preset difference, the potential cheating player is determined to be a cheating player. Otherwise, the player is not a cheating player.

2. The method according to claim 1, characterized in that The calling of each plug-in software in the plug-in software library to perform game simulation, thereby determining the set of operation behaviors of each plug-in software in the game includes: S11: Select a plug-in software from the plug-in software library; S12: Start the game and the selected plug-in software; S13: Control the game to execute a game response, so that the plug-in software recognizes the response parameters in the memory and inputs matching operation characters; S14: Integrate the response parameter and the input operation character into a mapping group; S15: Repeat step S13 to step S14 until all mapping groups corresponding to the game responses are obtained, and all mapping groups are integrated into an operation behavior set of the plug-in software; S16: Repeat steps S11 to S15 until a set of operation behaviors of each plug-in software in the plug-in software library is obtained.

3. The method according to claim 2, characterized in that Determine the operation behavior set of the player, that is, monitor the operation characters input by the player when each response parameter is stored in the memory, and form the monitored operation characters into the operation behavior set of the player; Determining the similarity between the player's operation behavior set and the operation behavior set of each plug-in software includes: S31: when each set of response parameters is stored in the memory, the operation characters input by the player are identified, and the response parameters and the operation characters are integrated into a comparison mapping group; S32: Determine whether there is a mapping group identical to the compared mapping group in the operation behavior set of each plug-in software, and if so, mark the mapping group; S33: Repeating steps S31 to S32 for a first set number of times, counting the number of marked mapping groups in the operation behavior set of each plug-in software, so as to calculate the similarity between the operation behavior set of the player and the operation behavior set of the plug-in software, wherein the operation behavior set of the player is a set integrated by the compared mapping groups; The similarity between the player's operation behavior set and the plug-in software's operation behavior set is calculated using the following formula: Among them, S is the similarity, t f is the first set number, t m It is the number of marked mapping groups in the operation behavior set of the plug-in software.

4. The method according to claim 3, characterized in that Real-time parameter replacement of game responses includes: Whenever it is detected that the game is about to execute a game response, the corresponding relationship of the parameters of the game response is changed, so that the game stores the replaced response parameters in the memory when executing the game response; After storing the replaced response parameters, restoring the parameter correspondence of the game response; Replacement information of the replaced response parameter is identified for restoring the replaced response parameter after the monitoring is completed, wherein the replacement information includes a storage location and the replaced response parameter.

5. The method according to claim 4, characterized in that The parameter correspondences that change the game response include: Identifying initial response parameters corresponding to the game response; Performing character comparison between the initial response parameter and other response parameters, thereby selecting a set number of response parameters from other response parameters, and integrating the selected response parameters into a replacement set; A response parameter is randomly selected from the replacement set to replace the initial response parameter.

6. The method according to claim 5, characterized in that When the monitoring times in step S5 reaches the second set times, step S6 is executed; determining the operation difference between the first operation character and the second operation character includes: For each monitored game response, determine whether the first operation character corresponding to the game response is the same as the second operation character, and if so, add 1 to the number of first scores; If not, retrieve the third operation character previously input by the potential cheating player for the replaced response parameter, and determine whether the first operation character is the same as the third operation character. If not, add 1 to the number of the second score. If yes, add 1 to the number of the third score. The operation difference is determined according to the first score, the second score, the third score, the number of the first scores, the number of the second scores, and the number of the third scores.

7. The method according to claim 6, characterized in that The operation difference is calculated by the following formula: D=-αP1+βP2+θP3 Among them, D is the operation difference, P1 is the first score, P2 is the second score, P3 is the third score, α is the number of the first score, β is the number of the second score, θ is the number of the third score; the sum of α, β and θ is equal to the second set number of times.

8. A game cheat monitoring device, characterized in that: The device comprises: The acquisition module is used to acquire the plug-in software library, call each plug-in software in the plug-in software library to perform game simulation, and thus determine the set of operation behaviors of each plug-in software in the game; A first processing module is used to determine the operation behavior set of any player when the player plays the game; The second processing module is used to determine the similarity between the operation behavior set of the player and the operation behavior set of each plug-in software, and if any similarity reaches a preset similarity, the player is determined as a potential plug-in player; The third processing module is used to replace the parameters of the game response in real time for each potential cheating player, wherein after the game response is replaced with the parameters, when the same game response is displayed on the display screen, the replaced parameters are stored in the memory; A monitoring module, used to monitor the first operation character input by the potential cheating player for the game response after the parameter replacement, and retrieve the second operation character corresponding to the same game response before the parameter replacement; The fourth processing module is used to determine the operation difference based on the first operation character and the second operation character. If the operation difference exceeds a preset difference, the potential cheating player is determined to be a cheating player. Otherwise, the player is not a cheating player.

9. A game cheat monitoring system, characterized in that: The system comprises: Storage server, used to store plug-in software library; A computer device, communicating with a storage server, is used to execute the steps of the game cheat monitoring method as described in any one of claims 1-7.

Images