GPS Spoofing Protection for AR App
Budget: $250 – $750 USD
We are developing an innovative Location-Based AR Social Platform. The app features a monetization/ad model called (Aura Cash), where advertisers drop real financial rewards (Auras) at specific geographic coordinates (e.g., coffee shops, retail stores). Users must physically visit the location, wait for a countdown, and use their AR camera to claim the reward.
The Technical Challenge (The Vulnerability):
Since the platform processes real-time monetary payouts, we face a critical vulnerability: GPS Spoofing and Mock Locations. Users can exploit the system by spoofing their coordinates to claim rewards from home. This includes utilizing Mock Location apps on Android, tethered desktop simulation tools via USB on iOS, and rooted/jailbroken devices to bypass standard client-side checks.
Scope of Work / Requirements:
We are seeking a Cybersecurity Engineer or a Senior Backend/Mobile Architect to implement a robust, multi-layered Anti-Cheat System to secure our architecture. The solution must achieve the following:
1 Client-Side Detection: Effectively detect and block location emulation on both iOS and Android (e.g., catching isFromMockProvider on Android, software-simulated environments on iOS, and Jailbreak/Root detection).
2 Server-Side Validation: Implement velocity/speed anomalies checks (preventing impossible geographical jumps), and validate incoming API requests against multi-source telemetry data.
3 Integration of Industry Standards: Recommend and leverage official security frameworks (such as Google Play Integrity API and Apple DeviceCheck) to safeguard our wallet infrastructure.
Please provide your proposed technical approach, estimated timeline, and financial quotation for delivering this security layer.
The Technical Challenge (The Vulnerability):
Since the platform processes real-time monetary payouts, we face a critical vulnerability: GPS Spoofing and Mock Locations. Users can exploit the system by spoofing their coordinates to claim rewards from home. This includes utilizing Mock Location apps on Android, tethered desktop simulation tools via USB on iOS, and rooted/jailbroken devices to bypass standard client-side checks.
Scope of Work / Requirements:
We are seeking a Cybersecurity Engineer or a Senior Backend/Mobile Architect to implement a robust, multi-layered Anti-Cheat System to secure our architecture. The solution must achieve the following:
1 Client-Side Detection: Effectively detect and block location emulation on both iOS and Android (e.g., catching isFromMockProvider on Android, software-simulated environments on iOS, and Jailbreak/Root detection).
2 Server-Side Validation: Implement velocity/speed anomalies checks (preventing impossible geographical jumps), and validate incoming API requests against multi-source telemetry data.
3 Integration of Industry Standards: Recommend and leverage official security frameworks (such as Google Play Integrity API and Apple DeviceCheck) to safeguard our wallet infrastructure.
Please provide your proposed technical approach, estimated timeline, and financial quotation for delivering this security layer.