GAP: A Game for Improving Awareness About Passwords

Tupsamudre, Harshal; Wasnik, Rahul; Biswas, Shubhankar; Pandit, Sankalp; Vaddepalli, Sukanya; Gokul, C. J.; Banahatti, Vijayanand; Lodha, Sachin

doi:10.1007/978-3-030-02762-9_8

Cited by 6 publications

(3 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Apart from this, the participants could rate their confidence levels on the judgment of each email. This method of identifying games' effectiveness using pre-test and posttest was followed by the previous studies [14,16,17,18]. There were eight emails with an equal number of observational points (Table 1).…”

Section: B Study Methodsmentioning

confidence: 99%

“…Studies have shown that serious games have the potential to be more effective in education than textbooks [20]. Serious games have been used for training in academia [30,31,32], teaching cultural heritage [21,22], training social interactions [23], medical education [24,25] and healthcare [27], manufacturing education [26], language learning [28], cybersecurity awareness [14,15,16,17,18], and various other fields. A study on the effectiveness of serious games [29] concluded with a fair amount of evidence to suggest that serious games have positive effects on learning.…”

Section: Background and Related Workmentioning

confidence: 99%

“…Anti-phishing Phil [14], Phishy [16], and What.Hack [18] focus on anti-phishing education. GAP [17], Passworld [43], PASDJO [33] train in password security awareness. Other games for cybersecurity education include Control-Alt-Hack [34], CyberCIEGE [15], Cyberaware [35] to name a few.…”

Section: Background and Related Workmentioning

confidence: 99%

See 2 more Smart Citations

PickMail: A Serious Game for Email Phishing Awareness Training

Jayakrishnan¹,

Banahatti²,

Lodha³

2022

Proceedings 2022 Symposium on Usable Security

View full text Add to dashboard Cite

Phishing threats are on the rise, especially through Business Email Compromise (BEC). Despite having several tools for phishing email detection, the attacks are becoming smarter and personal, targeting individuals to gain access to personal and organizational information. Game-based cybersecurity training methods are found to have positive results in educating users. Along this line, we introduce PickMail, an anti-phishing awareness game that simulates typical real-life email scenarios to train an organization's employees. In PickMail, we train participants to judge the legitimacy of an email by inspecting its various parts, such as the sender's email domain, hyperlinks, attachments, and forms. The game also records participants' decision-making steps that lead to their final judgment. Our study with 478 participants shows how the serious game-based training helped the participants make better judgments on emails, with the correctness in identifying email legitimacy reaching 92.62%. The study also provided us with insights that could help develop better training methods and user interfaces.Usable Security and Privacy (USEC) Symposium 2022

show abstract

Section: B Study Methodsmentioning

confidence: 99%