These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
123Next pageLast page
 

Update from Team Security (graphs within!)

First post
Author
CCP Peligro
Doomheim
#1 - 2014-07-28 18:06:27 UTC  |  Edited by: CCP Peligro
Greetings, honorable spaceship pilots,

I hope everybody is having a great summer so far!
You haven’t heard much from us lately, so I thought it would be prudent to provide you all with an update, and make good on some promises we made earlier this year.

First, we are publishing the slides from our presentation at this year’s fanfest. You can grab those here, in glorious high-quality PDF format.
Now that the slides have been cleared for public consumption, we hope to continue this practice in the future, and we apologize for the delay in getting these out to you. Enjoy!

If you have not had a chance to check out the presentation, please check it out on YouTube: Fanfest 2014 - From Evidence to Bans

We are also sharing some brand new data on the ISK worth of assets located on accounts permanently banned by the team. These numbers have never been shown before, I hope you like them!
EDIT: Forums seemingly can't handle graphs of this magnitude, you'll find the graph here.

If you have any questions or comments, please feel free to leave us a reply in this thread, we will do our best to answer you. If tweeting is more up your alley, you’ll find us there as well! Give us your best 140 characters:
CCP Bugartist, Director of Information Security
CCP Random, Security Engineer
CCP Grimmi, Security Analyst
CCP Peligro, Security Analyst

Reminder of upcoming RMT policy changes
We are currently working on another dev blog to announce our move to a three-strike ISK Buyer policy. We mentioned these intentions at this year’s fanfest, but I think it warrants repeating.

Our current 4-strike policy for ISK buyers is too lenient:
• 1st strike, ISK removed and a warning
• 2nd strike, ISK removed and 7 day ban
• 3rd strike, ISK removed and 30 day ban
• 4th strike, permanent ban

Going forward, our new policy for ISK Buyers will be:
• 1st strike, 7 days temporary ban and removal of ISK
• 2nd strike, 21 days temporary ban and removal of ISK
• 3rd strike, permanent ban

As the vast majority of ISK Buyers are newer players (see slides, page 23), we want to get the message out there before making the switch. Expect more on this subject soon.
We’d also love your thoughts on the data we have presented, and perhaps requests for information you’d like to see us talk about.

Oh, and last but not least, CCP Bugartist demands that I also state: please, validate your email address at:
https://secure.eveonline.com.

As usual, send us anything fishy, suspicious or just how much you like us to security@ccpgames.com.

Best regards,
CCP Peligro
Security Analyst

More from Team Security:
-Don’t try this at home!
-This is Team Security

More about Security:
-Scams and Exploits
-Policies

CCP Peligro - Team Security

Ralph King-Griffin
New Eden Tech Support
#2 - 2014-07-28 18:10:42 UTC  |  Edited by: Ralph King-Griffin
Yeah graphs. \o/

Edit: holy **** that's a lot of assets,
has this year's increase been as a result of improving your methods or them improving theirs?

Also, good work lads, happy to hear from ye.
Bianca Silver
Division 13
#3 - 2014-07-28 18:11:26 UTC
First? Second(?)

Thank you for the update, keep up the good/hard work. Smile
Tippia
Sunshine and Lollipops
#4 - 2014-07-28 18:13:12 UTC
CCP Peligro wrote:
Greetings, honorable spaceship pilots,
I'm sorry, but I think you may have misposted.
This is EVE General Discussion… P


That aside, yay, graphs!
Marsha Mallow
#5 - 2014-07-28 18:13:33 UTC
Ralph King-Griffin wrote:
Yeah graphs. \o/

So glad you said that. Was my first thought too, then I mentally slapped myself for being a nerd Oops

PDFs of all the Fanfest presentations would be awesome actually if they were used for all them. The vids are great but there's literally hours of footage to watch and I'd prefer to just skim the highlights.

Cheers for this though

Ripard Teg > For the morons in the room:

Sweets > U can dd my face any day

CCP Peligro
Doomheim
#6 - 2014-07-28 18:18:33 UTC
Ralph King-Griffin wrote:
Yeah graphs. \o/


Cool

Bianca Silver wrote:
First? Second(?)

Thank you for the update, keep up the good/hard work. Smile


No, thank YOU! Seriously though, thanks for the kind words, we appreciate it.

Tippia wrote:
CCP Peligro wrote:
Greetings, honorable spaceship pilots,
I'm sorry, but I think you may have misposted.
This is EVE General Discussion… P

That aside, yay, graphs!


Shocked That 5-digit-liked posts count... o/ o/

CCP Peligro - Team Security

Ralph King-Griffin
New Eden Tech Support
#7 - 2014-07-28 18:23:07 UTC
CCP Peligro wrote:


Tippia wrote:
CCP Peligro wrote:
Greetings, honorable spaceship pilots,
I'm sorry, but I think you may have misposted.
This is EVE General Discussion… P

That aside, yay, graphs!


Shocked That 5-digit-liked posts count... o/ o/

Tippia is the General discussion logic automated defense system, or possibly a raptor of some nature that preys upon the belligerent misinformed.
Jenn aSide
Worthless Carebears
The Initiative.
#8 - 2014-07-28 18:23:52 UTC
CCP Peligro wrote:


Shocked That 5-digit-liked posts count... o/ o/


That tends to happen when a poster uses logic instead of emotion. Tip's like count is a direct measure of the amount of emotional poster butt hurt he's caused Cool

-Signed, Knights of the Tippian White Order..Twisted
Jenn aSide
Worthless Carebears
The Initiative.
#9 - 2014-07-28 18:24:41 UTC
Ralph King-Griffin wrote:
CCP Peligro wrote:


Tippia wrote:
CCP Peligro wrote:
Greetings, honorable spaceship pilots,
I'm sorry, but I think you may have misposted.
This is EVE General Discussion… P

That aside, yay, graphs!


Shocked That 5-digit-liked posts count... o/ o/

Tippia is the General discussion logic automated defense system, or possibly a raptor of some nature that preys upon the belligerent misinformed.


Belligerent Misinformed! I'm so stealing that phrase!
Valterra Craven
#10 - 2014-07-28 18:30:47 UTC
And yet, I see nothing here about people that bot but don't RMT.... apparently that's still not important enough for you guys to look at since its not a security concern and makes sure you guys get a paycheck every month (or two weeks)?
Ralph King-Griffin
New Eden Tech Support
#11 - 2014-07-28 18:34:01 UTC
^^I sense tippia's like count increaseing
Unsuccessful At Everything
The Troll Bridge
#12 - 2014-07-28 18:34:57 UTC
First off, yay graphs!!! \o\ IoI \o/ IoI /o/ (<--- hes waving his hands in the air, he may or may not care..)

Secondly..

::looks left:: ::looks right::

INB4 move to Eve Information Portal.

Since the cessation of their usefulness is imminent, may I appropriate your belongings?

Tippia
Sunshine and Lollipops
#13 - 2014-07-28 18:36:43 UTC
Valterra Craven wrote:
And yet, I see nothing here about people that bot but don't RMT.
Eh?
So pages 14–17, 27, 31, 33–37, and 39 (and maybe even 51–53) count as nothing? Ugh
Archibald Thistlewaite III
The Royal Society for the Prevention of Miners
#14 - 2014-07-28 18:47:24 UTC
Love the after botting picture Big smile

User of 'Bumblefck's Luscious & Luminous Mustachio Wax'

CCP Peligro
Doomheim
#15 - 2014-07-28 18:51:03 UTC  |  Edited by: CCP Peligro
Valterra Craven wrote:
And yet, I see nothing here about people that bot but don't RMT.... apparently that's still not important enough for you guys to look at since its not a security concern and makes sure you guys get a paycheck every month (or two weeks)?


Slide 17, 18 & 19 cover mostly botting players. "ESTF" stands for the "EVE Security Task Force", they designed and implemented the first version of our automated bot detection and banning system back in 2011.
Here's an old dev blog on that subject: http://community.eveonline.com/news/dev-blogs/the-eve-security-taskforce-report-a-bot/
The ESTF system currently catches mostly botting players, as RMT bots are usually swept up in larger targeted sweeps.

All in all, we've banned roughly 30,000 bots since the beginning of 2013, whether or not those are RMT Bots or players makes little difference to us. If they are engaged in RMT, we'll use that as an excuse to drop the hammer extra hard (no second chances, instant permanent ban).

For players, we are operating on a two-strike policy when it comes to botting:
1st offense – 30 day temporary ban
2nd offense – permanent ban

As well as the removal of proceeds made from such illegal activities, this is covered in our suspension and ban policy.
“Severe offences may result in an immediate ban without warning; however, warnings may be given for first time offenses, followed by account suspensions of varying degree and ultimately a permanent ban if a player is discovered to be employing the use of a third party program to macro illegally. Funds or goods received from the benefits of macroing are subject to removal from the player’s inventory."

We also apply a permanent outbound character transfer lock to all accounts banned for macro use. Botting is definitely a security concern and one of our priorities.

CCP Peligro - Team Security

Yokai Mitsuhide
Doomheim
#16 - 2014-07-28 18:59:49 UTC  |  Edited by: Yokai Mitsuhide
CCP Peligro wrote:


Going forward, our new policy for ISK Buyers will be:
• 1st strike, 7 days temporary ban and removal of ISK
• 2nd strike, 21 days temporary ban and removal of ISK
• 3rd strike, permanent ban


Not severe enough! :p

Maybe something like

• 1st strike, permanent ban. :D
Noriko Mai
#17 - 2014-07-28 19:07:09 UTC
Bring the old advertisement back. "Joe did business with the enemy."

"Meh.." - Albert Einstein

Shilalasar
Dead Sky Inc.
#18 - 2014-07-28 19:08:17 UTC
Every time I read somewhere "Bought Isk from this site, 2 days later CCP took it away" it warms my dark heart. And I love it even more when RMT Isk are more expensive than buying Plex Twisted
Best team at CCP, keep on hunting them down.
CCP Peligro
Doomheim
#19 - 2014-07-28 19:12:20 UTC
Noriko Mai wrote:
Bring the old advertisement back. "Joe did business with the enemy."


An old favorite!

CCP Peligro - Team Security

Benny Ohu
Royal Amarr Institute
Amarr Empire
#20 - 2014-07-28 19:16:06 UTC
the graphs talk about ratting, mission, mining and market bots. which of those categories includes factional warfare complex bots? is there such a thing as a fw bot? have there ever been large numbers of them?
123Next pageLast page