at a server including one or more processors and a non-transitory memory, wherein the server includes a game engine connected to a plurality of client devices via a network, a cheating analyzer coupled with the game engine and the non-transitory memory stores game data from the game engine, cheat data and counter cheat data;

identifying suspected cheating originated from a first client device in a game provided by the game engine by analyzing the game data, wherein the game data associated with the game are exchanged via the network between the game engine and one or more client devices;

determining a probability of the suspected cheating based on the cheat data derived from the game data;

selecting a counter cheat of the suspected cheating corresponding to the probability based on the cheat data and the counter cheat data assigned to counter one or more classifications associated with the suspected cheating; and

applying, via transmitting instructions to a second client device through the network, the counter cheat approximate the probability in the game.