Graduate Programs in Computer Science Design of cyber security awareness game utilizing a social media framework WA Labuschagne

Graduate Programs in Computer Sciencehttp://www.cs.utsa.edu

Design of cyber security awareness game utilizing a

social media frameworkWA Labuschagne

UNISAPretoria, South Africa

N Veerasamy

CSIRPretoria, South Africa

In Information Security South Africa (ISSA), 2011

I Burke


I Burke



Outline

Introduction

Motivation For Game Design

Requirements

Security Awareness Games

Design of Game

Future Work

Conclusions


Introduction

To be aware of safe cyber practices Not just technical staff, but all users

A number of universities now recommend providing security awareness training and education components for students and staff

Home users could also benefit from cyber security awareness


Motivation For Game Design Directed Communication

One-directional communication Pamphlets, emails, intranet pages, screen savers, posters, mouse pads,

pens, games, formal presentations and training sessions

Information Richness Web Three medias:

Hypermedia Multimedia Hypertext


Requirements

A comprehensive database of questions

Weighting of the questions

The use of practical data

Tool should be automated

Game dynamics

Easy accessible

Effortless

Acceptance by the user


Requirements


Determine the current knowledge level

Critical game component

Random set to be selected each time

An extensive database to prevent presenting the same questions

Ensure the topic is sufficiently


Requirements





Game dynamics

Easy accessible

Effortless



Requirements


The higher the weights, the harder the questions

More challenging

Progressively become more difficult

Create different levels


Requirements





Game dynamics

Easy accessible

Effortless



Requirements


The data should reflect real life scenarios

The knowledge acquired during the game could be applied in the current

environment

The relevance of the data should be applicable and disseminated into easy

interpretable knowledge fragments

The trends provide a list of threats


Requirements





Game dynamics

Easy accessible

Effortless



Requirements


No intervention and supervision of humans

Computation has to be done by the system

Users will be guided by the system

Multiple users can play the game simultaneously

Social network allows multiple users to interact with the game


Requirements





Game dynamics

Easy accessible

Effortless



Requirements

Game dynamics

Namely appointment

Influence and status

Progression

Communal discovery


Requirements





Game dynamics

Easy accessible

Effortless



Requirements

Easy accessible

Resources located on a PC at home or within a private internal network are

not easily accessible

Using internet

Web browser

Mobile devices, such as smartphones


Requirements





Game dynamics

Easy accessible

Effortless



Requirements

Effortless A good interface provides the users with an experience which build trust

with the application, increase productivity and reduces erroneous use, which frustrates the user

A list of critical factors: Visibility of system status Match between system and the real world User control and freedom Consistency and standards Error prevention Help users recognize, diagnose, and recover from errors Recognition rather than recall Flexibility and efficiency of use Aesthetic and minimalist design Help and documentation


Requirements





Game dynamics

Easy accessible

Effortless



Requirements


The Technology Acceptance Model (TAM)

Perceived Usefulness (PU)

Perceived Ease of Use (PE)

Extended TAM Model to accommodate social networking sites

Perceived Usefulness (PU)

Perceived Ease of Use (PE)

Perceived Playfulness (PP)

Perceived Security (PS)


Security Awareness Games

There are two games from the USA Department of Defense:

CyberCiege

Highly extensible game for teaching information assurance concepts

Runs on a standalone computer system

CyberProtect

With an interactive security experience

On-line game, but not use a social networking site.

* Both of the two games are designed for technical staffs


Design of Game


Design of Game

High-level view of game


Design of Game

Mix of hypertext and multimedia


Design of Game

Sample question and status


Design of GameBadge and achievements


Future Work

A functional prototype that can be effectively used as part of awareness program

Test more

Deploy the game in a social networking site environment


Conclusions

Present the design of an online game which utilizes social networking sites

Create awareness on cyber security topics by using a virtual tool to educate and test users using a social networking environment


Thank you!

Questions?

Documents

Graduate Programs in Computer Science Design of cyber security awareness game utilizing a social media framework WA Labuschagne