GLI-19: - Gaming Laboratories International

GLI Standard #19 – Standards for Interactive Gaming Systems (Suppliers) Version 1.0
Final
perform Gaming Platform level commands.
d) Any publicly installable theme packages must be hosted and monitored on the official
website for the game, and all themes uploaded must be verified to ensure they contain no
potential exploits or malware.
7.3 Technical Controls
7.3.1 Proxy Servers.
a) The Gaming Platform must be capable of operating through multiple proxy servers.
Correct operation of games must not depend on a refresh request from the end player
device reaching the Gaming Platform.
7.3.2 Self-Monitoring.
a) The Gaming Platform must implement the self-monitoring of critical components (e.g.
central hosts, network devices, firewalls, links to third parties, etc.).
b) A critical component which fails self-monitoring tests must be taken out of service
immediately. The component must not be returned to service until there is reasonable
evidence that the fault has been rectified.
7.3.3 Protection from Attacks.
a) All reasonable precautions must be taken to protect the Gaming Platform against attacks
based upon the replay of authentic or non-authentic messages (for example, Distributed
Denial of Service Attack).
b) The software must be able to reasonably detect and/or prevent a man-in-the-middle style
attack without invading the end user’s privacy.
c) If a man-in-the-middle attack has been suspected, all communications between the
suspected client and server must be terminated with a message displayed to the end user
as to why communications were terminated.
d) Upon termination of client-server communications, the appropriate steps to determine if
the end user was performing a man-in-the-middle attack. If it was determined that a manin-the-middle
attack was attempted, the appropriate actions in regards to cheating must be
Chapter Seven: Information Systems Security (ISS) Requirements Page 54
Copyright © 2011 Gaming Laboratories International, LLC
All Rights Reserved.