Utilize este identificador para referenciar este registo:
http://hdl.handle.net/10071/21498
Autoria: | Gasiba, T. Lechner, U. Pinto-Albuquerque, M. |
Data: | 2020 |
Título próprio: | Cybersecurity challenges in industry: measuring the challenge solve time to inform future challenges |
Volume: | 11 |
Número: | 11 |
ISSN: | 2078-2489 |
DOI (Digital Object Identifier): | 10.3390/info11110533 |
Palavras-chave: | Education Training Secure coding Industry Cybersecurity Capture-the-flag Game analysis Cybersecurity challenge Challenge solve time |
Resumo: | Cybersecurity vulnerabilities in industrial control systems have been steadily increasing over the last few years. One possible way to address this issue is through raising the awareness (through education) of software developers, with the intent to increase software quality and reduce the number of vulnerabilities. CyberSecurity Challenges (CSCs) are a novel serious game genre that aims to raise industrial software developers' awareness of secure coding, secure coding guidelines, and secure coding best practices. An important industry-specific requirement to consider in designing these kinds of games is related to the whole event's duration and how much time it takes to solve each challenge individually-the challenge solve time. In this work, we present two different methods to compute the challenge solve time: one method based on data collected from the CSC dashboard and another method based on a challenge heartbeat. The results obtained by both methods are presented; both methods are compared to each other, and the advantages and limitations of each method are discussed. Furthermore, we introduce the notion of a player profile, which is derived from dashboard data. Our results and contributions aim to establish a method to measure the challenge solve time, inform the design of future challenges, and improve coaching during CSC gameplay. |
Arbitragem científica: | yes |
Acesso: | Acesso Aberto |
Aparece nas coleções: | CTI-RI - Artigos em revistas científicas internacionais com arbitragem científica ISTAR-RI - Artigos em revistas científicas internacionais com arbitragem científica |
Ficheiros deste registo:
Não existem ficheiros associados a este registo.
Todos os registos no repositório estão protegidos por leis de copyright, com todos os direitos reservados.