Systems and methods for anti-cheat detection

A non-transitory computer storage medium storing computer-useable instructions that, when used by one or more computing devices, cause the one or more computing devices to perform operations comprising:

• based on a launch of a gaming application on a gaming device, establishing a first network session between the gaming device and an anti-cheat server, and a second network session between the gaming device and a gaming server;
• receiving an anti-cheat module communicated to the gaming device from the anti-cheat server for on-demand execution by the gaming device, wherein the anti-cheat module is selected from a plurality of anti-cheat modules stored on the anti-cheat server;
• sending the anti-cheat module to an anti-cheat kernel driver that was loaded into a memory of the gaming device, wherein the anti-cheat kernel drive was loaded into the memory prior to a completion of an initial booting process of the gaming device and the anti-cheat module is sent to the loaded anti-cheat kernel driver after the initial booting process is completed;
• after the initial booting process is completed, executing the anti-cheat module in the kernel layer of the gaming device based on the anti-cheat module being sent to the loaded anti-cheat kernel driver;
• communicating a result of the executed anti-cheat module from the gaming device to the anti-cheat server, the result indicating a detected cheat on the gaming device;
• and
• providing for display a notification received from one of the gaming server or the anti-cheat server, the displayed notification indicative of the detected cheat.

A computer-implemented method for anti-cheat detection, the method comprising:

• loading, by a gaming device, an anti-cheat kernel driver into a memory of the gaming device prior to a completion of a booting process of the gaming device;
• prior to the completion of the booting process, validating, by the gaming device via the loaded anti-cheat kernel driver, a system state of the gaming device;
• after the booting process is completed, detecting, by the gaming device via the loaded anti-cheat kernel driver, a change to the system state;
• determining, by the gaming device via the loaded anti-cheat kernel driver, that the system state is compromised based on the detected change to the system state;
• and
• responsive to a game application associated with the anti-cheat kernel driver being launched, blocking, by the gaming device, access to a gaming server associated with the game application based on the determined compromised system state.