<p>The complexity and spread of cyber threats are increasing. The risks associated with employee behavior can be mitigated with proper cybersecurity risk management. Conventional cybersecurity training programs may not adequately enhance employees’ awareness of the latest cyber threats. We introduce the Cyber-Alert game that utilizes interactive scenarios and real-world threat simulations to enhance cybersecurity awareness. The proposed game consists of physical security and malware threats levels. In each level, the players face different threat scenarios where they need to identify the threat and respond to it. The proposed cybersecurity training and awareness program consists of a pre-game survey, Cyber-Alert game, and a post-game survey. Forty employees agreed to attend our training program. Employees’ feedback and the two survey results are utilized to assess training program’s effectiveness. Results indicate an improvement in employees’ cybersecurity awareness levels and reduction in their human errors during daily cybersecurity practices. This research demonstrates that gamification can be used in cybersecurity training of latest cyber threats.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Cyber-alert: gamifying cybersecurity awareness through interactive training

  • Fadi Abu-Amara,
  • Nasir Awad,
  • Fatima Alameri

摘要

The complexity and spread of cyber threats are increasing. The risks associated with employee behavior can be mitigated with proper cybersecurity risk management. Conventional cybersecurity training programs may not adequately enhance employees’ awareness of the latest cyber threats. We introduce the Cyber-Alert game that utilizes interactive scenarios and real-world threat simulations to enhance cybersecurity awareness. The proposed game consists of physical security and malware threats levels. In each level, the players face different threat scenarios where they need to identify the threat and respond to it. The proposed cybersecurity training and awareness program consists of a pre-game survey, Cyber-Alert game, and a post-game survey. Forty employees agreed to attend our training program. Employees’ feedback and the two survey results are utilized to assess training program’s effectiveness. Results indicate an improvement in employees’ cybersecurity awareness levels and reduction in their human errors during daily cybersecurity practices. This research demonstrates that gamification can be used in cybersecurity training of latest cyber threats.