Game Based Cyber Security Training: are Serious Games suitable for cyber security training?

Hendrix, Maurice; Al-Sherbaz, Ali; Bloom, Victoria

doi:10.17083/ijsg.v3i1.107

Cited by 124 publications

(88 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Gamification is an interactive mood for education on specific topic, engaging and keeping learner focuses on activities with fun, compared to the traditional methods like instructor-based, or email based message methods. Cybersecurity has just started dedicating gamification to make user aware about threats and adopt safety behaviors [11]. There are considerable solutions relying on gamification to fight against phishing ( [3,4], [12][13][14][15][16][17]).…”

Section: Introductionmentioning

confidence: 99%

A Review of Gamification Applied to Phishing

Tchakounté¹,

L²,

Atemkeng³

2020

Preprint

View full text Add to dashboard Cite

Phishing is a set of devastating techniques which lure target users to provide critical resources. They are successful because they rely on human weaknesses. Gamification which is a recent and non-traditional learning method with purpose to motivate and engage user to carry out activities, is more and more applied to prevent such cyber threats. This paper provides the first survey of gamified solutions dedicated to educate against phishing from 2007 to 2019. The investigation is conducted on eight proposals in terms of core concepts, game mechanics and learning process. We provide three taxonomies of dimensions to systematically characterize researches on gamified solutions, discuss lacks of surveyed works and opens further orientations to enhance this research area. Some key results are: solutions do not consider elementary level of knowledge and do no offer basic notions; solutions are not adapted to general audience and therefore not reliably applicable in different contexts; platforms partially educate about phishing; learners are evaluated predictably and within a short period. This study constitutes a cornerstone to understand and enhance research on phishing education.

show abstract

Section: Introductionmentioning

confidence: 99%

A Review of Gamification Applied to Phishing

Tchakounté¹,

L²,

Atemkeng³

2020

Preprint

View full text Add to dashboard Cite

show abstract

“…Serious games are also effective training tools for educating the users. Serious games are goal-oriented games rather than purely for entertainment and have been effectively deployed to achieve behavioural change in school education; healthcare; advertising; and, recently, in cybersecurity [39]. The game-based approach motivates players to move towards the goal using the appropriate actions and allows them to observe the consequences of failure to do so without incurring real-life costs.…”

Section: Literature Reviewmentioning

confidence: 99%

Design and Evaluation of an Augmented Reality Game for Cybersecurity Awareness (CybAR)

Alqahtani

Kavakli

2020

Information

View full text Add to dashboard Cite

The number of damaging cyberattacks is increasing exponentially due in part to lack of user awareness of risky online practices, such as visiting unsafe websites, ignoring warning messages, and communicating with unauthenticated entities. Although research has established the role that game-based learning can play in cognitive development and conceptual learning, relatively few serious mobile games have been developed to educate users about different forms of cyberattack and ways of avoiding them. This paper reports the development of an effective augmented reality (AR) game designed to increase cybersecurity awareness and knowledge in an active and entertaining way. The Cybersecurity Awareness using Augmented Reality (CybAR) game is an AR mobile application that teaches not only cybersecurity concepts, but also demonstrates the consequences of actual cybersecurity attacks through feedback. The design and evaluation of the application are described in detail. A survey was conducted to verify the effectiveness of the game received positive responses from 91 participants. The results indicate that CybAR is useful for players to develop an understanding of cybersecurity attacks and vulnerabilities.

show abstract

“…Several schools hold annual cyber security training fairs to promote a secure culture within the campus, provide information-security education and training to all constituents, provide hands on peer-topeer mentoring about security, teach users how to protect data through the deployment of common security practices, and to evaluate the cybersecurity awareness levels of the student population (Larson, 2015). Gaming has also been promoted as a technique to teach security awareness (Hendrix, Al-Sherbaz, & Bloom, 2016). Huang (2015) notes that an issue with existing cyber security training is that it relies mostly on lecture-style instructions without much hand-on experience.…”

Section: Literature Reviewmentioning

confidence: 99%

Do Students and Instructors See Cybersecurity the Same? A Comparison of Perceptions About Selected Cybersecurity Topics

Ciampa

Blankenship

2019

Int J Innov Educ Res

View full text Add to dashboard Cite

Cybersecurity attacks continue to increase. This is particularly true for attacks based on social engineering or relying on the weaknesses of individuals as a means of gathering information or crafting an attack. Along with an increase in attacks there is likewise an increase in the number of calls for educating users about attacks and equipping them with the knowledge and skills for warding off attacks. Many entities advocate that institutions of higher education should be responsible for providing practical, applied security awareness instruction. This study compared student and instructor attitudes towards security to determine if there is an apathy on the part of students regarding security or if they are concerned about selected security topics, and if instructors perceive that practical, applied security instruction is a necessary component to their courses, or if security instruction belongs elsewhere. The relationship of student attitudes towards security was compared with those of instructors over six current security topics. When comparing students to instructors to students there was no significant difference between them on the topics of using anti-virus software, using a firewall, securing wireless networks, and using spam filters. The results seem to indicate that there is a significant difference between the perceptions of students and instructors regarding the security topics of protection from phishing and how to create a strong password.

show abstract

Game Based Cyber Security Training: are Serious Games suitable for cyber security training?

Cited by 124 publications

References 27 publications

A Review of Gamification Applied to Phishing

A Review of Gamification Applied to Phishing

Design and Evaluation of an Augmented Reality Game for Cybersecurity Awareness (CybAR)

Do Students and Instructors See Cybersecurity the Same? A Comparison of Perceptions About Selected Cybersecurity Topics

Contact Info

Product

Resources

About