Method to detect and counteract suspicious activity in an application environment

Abstract

Aspects of the subject disclosure may include, for example, comparing an input received from a peripheral device associated with an execution of a gaming application with a threshold value, wherein the threshold value is based on a first identification of a first user, a second identification of the peripheral device, and a third identification of stimuli presented as part of the execution of the gaming application. Responsive to the comparing, a determination may be made that the input exceeds the threshold value. Responsive to the determination, a validation request may be transmitted to a user device of the first user. Other embodiments are disclosed.

What is claimed is: 
     
         1 . A device, comprising:
 a processing system including a processor; and   a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations comprising:
 presenting an execution of a first application; 
 obtaining first inputs from an end user device associated with a user during the execution of the first application; 
 generating a user profile based on modeling according to the presenting of the execution of the first application and the first inputs, the user profile providing a signature for the user for behavior related to interacting with the first application; 
 obtaining second inputs associated with the user during an execution of a second application; 
 analyzing the second inputs based on the user profile resulting in an analysis; and 
 determining a probability that the user is engaging in an unauthorized activity based on the analysis. 
   
     
     
         2 . The device of  claim 1 , wherein the second inputs are from the end user device, wherein the obtaining the first inputs is during a simulation of the execution of the first application that includes selecting and presenting particular scenarios executable by the first application, and wherein the first and second applications are gaming applications. 
     
     
         3 . The device of  claim 1 , wherein the second application is one of a gaming application, a voting application, a test taking application, or a finance application. 
     
     
         4 . The device of  claim 1 , wherein the operations further comprise:
 responsive to the obtaining the second inputs, polling at least one additional user, wherein the determining the probability that the user is engaging in an unauthorized activity based the polling.   
     
     
         5 . The device of  claim 1 , wherein the operations further comprise:
 presenting a validation request.   
     
     
         6 . The device of  claim 5 , wherein the presenting of the validation request comprises presenting the validation request to the user, and wherein the operations further comprise:
 receiving a response to the validation request from the user.   
     
     
         7 . The device of  claim 5 , wherein the presenting of the validation request comprises presenting the validation request to a component of the device, and wherein the operations further comprise:
 receiving a response to the validation request from the component, wherein the response to the validation request is not based on user input.   
     
     
         8 . The device of  claim 5 , wherein the presenting of the validation request causes an activation of a sensor that monitors the user, an environment where the user is located, or a combination thereof. 
     
     
         9 . The device of  claim 1 , wherein the operations further comprise:
 responsive to the second inputs, limiting an ability of the user to engage in communication during the executing of the second application.   
     
     
         10 . A non-transitory, machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:
 accessing a user profile that is generated based on modeling according to an execution of a first application and first inputs, wherein the first inputs are generated by an end user device associated with a user during the execution of the first application, and wherein the user profile provides a signature for the user for behavior related to interacting with the first application;   obtaining second inputs associated with the user during an execution of a second application;   analyzing the second inputs based on the user profile resulting in an analysis; and   determining a probability that the user is engaging in an unauthorized activity based on the analysis, wherein the second application is one of a gaming application, a voting application, a test taking application, or a finance application.   
     
     
         11 . The non-transitory, machine-readable medium of  claim 10 , wherein the operations comprise:
 polling at least one additional user; and   determining a probability that the user is engaging in an unauthorized activity based on the polling.   
     
     
         12 . The non-transitory, machine-readable medium of  claim 10 , wherein the operations further comprise:
 presenting a validation request to the user; and   receiving a response to the validation request from the user.   
     
     
         13 . The non-transitory, machine-readable medium of  claim 10 , wherein the operations further comprise:
 causing an activation of at least one sensor responsive to a validation request, wherein the at least one sensor comprises a camera, a microphone, a biometric sensor, or a combination thereof.   
     
     
         14 . The non-transitory, machine-readable medium of  claim 10 , wherein the operations further comprise:
 performing an integrity test on a component of a first input device responsive to obtaining a validation request; and   transmitting a result associated with the performing of the integrity test to a server,   wherein the component is included in a gaming console, a peripheral device coupled to the gaming console, or a combination thereof, and   wherein the validation request is based on a probability of cheating by a macro, hacked code, or software assistance exceeding a threshold.   
     
     
         15 . The non-transitory, machine-readable medium of  claim 10 , wherein the operations further comprise:
 responsive to the second inputs, limiting an ability of the user to engage in communication during the execution of the second application.   
     
     
         16 . The non-transitory, machine-readable medium of  claim 10 , wherein the operations further comprise:
 monitoring traffic in a network; and   identifying, in accordance with the monitoring, an abnormality in terms of a pattern or volume of data traversing the network exceeding a threshold.   
     
     
         17 . The non-transitory, machine-readable medium of  claim 10 , wherein the determining of the probability that the user is engaging in an unauthorized activity comprises determining a probability that the user is receiving unauthorized assistance from a second user. 
     
     
         18 . The non-transitory, machine-readable medium of  claim 10 , wherein the operations further comprise:
 responsive to the second inputs, transmitting a message that causes a posting on a social media platform, wherein the posting identifies the user and the second application.   
     
     
         19 . A method, comprising:
 presenting, by a processing system including a processor, an execution of a first application;   obtaining, by the processing system, first inputs from an end user device associated with a user during the execution of the first application;   generating, by the processing system, a user profile based on modeling according to the presenting of the execution of the first application and the first inputs, the user profile providing a signature for the user for behavior related to interacting with the first application;   obtaining, by the processing system, second inputs associated with the user during an execution of a second application;   analyzing, by the processing system, the second inputs based on the user profile resulting in an analysis; and   determining, by the processing system, a probability that the user is engaging in an unauthorized activity based on the analysis.   
     
     
         20 . The method of  claim 19 , further comprising receiving, by the processing system, a response to a validation request, wherein the response comprises data originating from a sensor that monitors the user, an environment where the user is located, or a combination thereof, wherein the response comprises user feedback, and wherein the user feedback is based on a query included in the validation request.