Security best practices for gaming development?

Hello everyone I am posting this in alt coz I don’t want to give away a lot info. So basically I work as application security engineer in a popular gaming development company. This company is going to develop near future games in a “specific” gaming engine. The CTO has asked my boss (CISO) to make cybersecurity plan about that upcoming gaming engine.

Now my CISO even doesn’t know what to do so he asked me to research about this gaming engine and make a security plan. He was looking for some advanced shit like making a fuzzer or something. I am a basic security engineer/pentester, I can write scripts, automate tasks and use ready made fuzzers or tools so this shit is too advance for me neither it’s a one man job. I searched entire internet yet I cannot find security best practices for gaming in general let alone for this specific gaming engine.

Now my question is wtf should I do now? What my boss is expecting from me? Good thing is he is very chill person and doesn’t micromanage nor gives his team any stress but I feel like I am stuck in this situation not knowing what to do? submitted by /u/Any-Gur1697
[link] [comments]


http://dlvr.it/T5BkFb