Putting security on the table

Gutfleisch, Marco; Schöps, Markus; Sayin, Sibel; Wende, Frederic; Sasse, M. Angela

doi:10.1145/3510456.3514139

Cited by 4 publications

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

TASEP: A Collaborative Social Engineering Tabletop Role-Playing Game to Prevent Successful Social Engineering Attacks

Hafner,

Wutz,

Pöhn

et al. 2023

Proceedings of the 18th International Conference on Availability, Reliability and Security

View full text Add to dashboard Cite

Data breaches resulting from targeted attacks against organizations, e. g., by advanced persistent threat groups, often involve social engineering (SE) as the initial attack vector before malicious software is used, e. g., for persistence, lateral movement, and data exfiltration. While technical security controls, such as the automated detection of phishing emails, can contribute to mitigating SE risks, raising awareness for SE attacks through education and motivation of personnel is an important building block to increasing an organization's resilience. To facilitate hands-on SE awareness training as one component of broader SE awareness campaigns, we created a SE tabletop game called Tabletop As Social Engineering Prevention (TASEP) in two editions for (a) small and medium enterprises and (b) large corporations, respectively. Its game design is inspired by Dungeons & Dragons role-playing games and facilitates LEGO models of the in-game target organizations. Participants switch roles by playing a group of SE penetration testers and conducting a security audit guided by the game master. We evaluated the created game with different student groups, achieving highly immersive and flexible training, resulting in an entertaining way of learning about SE and raising awareness. CCS CONCEPTS• Security and privacy → Human and societal aspects of security and privacy; • Human-centered computing;

show abstract

TASEP: A Collaborative Social Engineering Tabletop Role-Playing Game to Prevent Successful Social Engineering Attacks

Hafner,

Wutz,

Pöhn

et al. 2023

Proceedings of the 18th International Conference on Availability, Reliability and Security

View full text Add to dashboard Cite

show abstract

The Effects of Group Discussion and Role-playing Training on Self-efficacy, Support-seeking, and Reporting Phishing Emails: Evidence from a Mixed-design Experiment

Chen,

Sacré,

Lenzini

et al. 2024

Proceedings of the CHI Conference on Human Factors in Computing Systems

View full text Add to dashboard Cite

Fostering Collaboration and Advancing Research in Software Engineering and Game Development for Serious Contexts

Bucchiarone,

Cooper,

Lin

et al. 2023

SIGSOFT Softw. Eng. Notes

View full text Add to dashboard Cite

The potential benefits of using the engaging and interactive nature of games to achieve specific objectives have been recognized by researchers and professionals from numerous domains. Serious games have been developed to impart knowledge, skills, and awareness in areas such as education, healthcare and the environment, while gamification has been applied to enhance the engagement, motivation, and participation of users in non-game activities such as sustainability and learning. As a result, the fields of game engineering, software engineering, and user experience are increasingly converging to create innovative solutions that blend the strengths of games with real-world applications.

show abstract

Putting security on the table

Cited by 4 publications

References 25 publications

TASEP: A Collaborative Social Engineering Tabletop Role-Playing Game to Prevent Successful Social Engineering Attacks

TASEP: A Collaborative Social Engineering Tabletop Role-Playing Game to Prevent Successful Social Engineering Attacks

The Effects of Group Discussion and Role-playing Training on Self-efficacy, Support-seeking, and Reporting Phishing Emails: Evidence from a Mixed-design Experiment

Fostering Collaboration and Advancing Research in Software Engineering and Game Development for Serious Contexts

Contact Info

Product

Resources

About