My first thought there would be to just build up randomness entropy on game launch, and when mouse movements/keyboard events break that, detected. I assume I’m missing something.
The problem isn't only detecting suspicious statistical or computational patterns, it's doing the detection on a device you ultimately don't control, and entirely in software (at least for PCs, at least for now).
With enough effort, all software can be virtualized, and whether the defender's effort can even theoretically be scaled more easily than the attacker's is an open question.
I guess my thought was, if a cursor just "jumps" or moves quickly in a mathematically straight line, probably an indicator. Or if inputs had almost the exact time gap between them for a series of actions.
