Client-Server Anti-Cheat System with Custom Encryption

UPDATE LOG

Website Launched:

CanSecurity Wait-List

1 Like

website doesnt seem to be up? could u check it

The website is down and I do not plan to enable it until I optimize and make it more advanced

3 Likes

Please let me know when the site is back up, I am really interested.

ill give you studio access and you can view everything if you want message me if you are interested.

2 Likes

Update

I’m enhancing our security protocols by implementing a more sophisticated method for managing encryption keys between the client and server. Here’s how im going to implement it:

  • Dynamic Key Generation: The server creates 50 string values, each assigned a unique, random 30-character name. Both the names and values are refreshed every 0.4 seconds to maintain high security and prevent predictability.
  • Secure Key Retrieval: The client uses a specially encrypted default key to securely request the next encryption key from the server. This process allows the client to access one of the 50 dynamically generated strings stored in replicated storage.
  • Protected Communication: The client must obtain one of these randomly generated encryption keys to decrypt the server’s pings. This ensures that attackers cannot intercept or access the encryption keys to decode the special prompt needed to respond to the server’s ping requests.

This layered encryption mechanism significantly strengthens our system’s security, ensuring that communication between the client and server remains secure and resilient against potential attacks.

im really excited to see an exploiters reaction to seeing a replicatedstorage folder with 50 string values that change their names every 0.4 seconds

1 Like

have you checked to see if this has any hit on performance for both the server and the client, I can imagine it does to an extent.

I thought of that i came up with a solution so that everything will update in batches of 10 so it doesnt update all 50 at once therefor causing lag

1 Like

beware Roblox may terminate accounts that publish spam or assets with malicious or obfuscated code

Gets bypassed in zero seconds using any exploit that doesnt inject

funny that another person didint read the thread because it doesnt matter if the exploit injects or not the anti cheat is still going to have all of its anti cheat and security measures???

If an exploit doesnt inject, you cant detect said exploit, which makes your ac useless

it doesnt matter if i cant detect the exploit on the client i have access to a wide range of detections i can use for the malicious code they run

If the malicious code runs outside the roblox process you cannot detect that

you know i can detect its effects right?

Good luck detecting an aimbot, esp, autoparry or saveinstance when even a human moderator cant. Only thing you can detect is a macro bot

my Critical Components Protection System detects if any of the elements in the experience got deleted and if any of the elements with the is_protected tag gets deleted it will shutdown the server

a human moderator uses visual eye sight to detect those types of things. with access to the client detecting them will be made a-lot easier

Except human moderators cannot detect those things as you can mask unnatural aimbot movement easily. Access to the client wont show you anything either because you simply dont have access to the exploit running

Just stop commenting on my post you keep trying to say that the anti cheat is entirely useless just because of one specific exploit type