What security can be added to Java applets?

Question

When creating a Java applet, are there any steps that can be taken to prevent the user from invoking internal methods?

Theoretically, most objects can be analyzed and methods can be called on the client machine.

In addition to obfuscation, are there any other steps that can help prevent this?

My situation is to provide a game in which the highest score is sent directly from the client.

Answer 1

If your game is too complicated to automate and play the bot in a very fruitful manner than any person could do, then it would be nice to request the status of the game from the server at certain random intervals. You could implement the CAPTCHA mechanism, which would fit into the history of the game and bring the level of “Authentication with Answers to Challenges” to a small test similar to Turing, where the player “prove” from time to time that he is a person, solving a particular riddle. All this time, you check the evolution of the score and reject any values ​​that would not correspond to the previously calculated formula for the maximum score per level or per unit of time, given the current state of the system. I am not a security expert, but I think that all this would give the potential attacker a rather difficult time.