Please use this identifier to cite or link to this item:
http://hdl.handle.net/10071/21498
Author(s): | Gasiba, T. Lechner, U. Pinto-Albuquerque, M. |
Date: | 2020 |
Title: | Cybersecurity challenges in industry: measuring the challenge solve time to inform future challenges |
Volume: | 11 |
Number: | 11 |
ISSN: | 2078-2489 |
DOI (Digital Object Identifier): | 10.3390/info11110533 |
Keywords: | Education Training Secure coding Industry Cybersecurity Capture-the-flag Game analysis Cybersecurity challenge Challenge solve time |
Abstract: | Cybersecurity vulnerabilities in industrial control systems have been steadily increasing over the last few years. One possible way to address this issue is through raising the awareness (through education) of software developers, with the intent to increase software quality and reduce the number of vulnerabilities. CyberSecurity Challenges (CSCs) are a novel serious game genre that aims to raise industrial software developers' awareness of secure coding, secure coding guidelines, and secure coding best practices. An important industry-specific requirement to consider in designing these kinds of games is related to the whole event's duration and how much time it takes to solve each challenge individually-the challenge solve time. In this work, we present two different methods to compute the challenge solve time: one method based on data collected from the CSC dashboard and another method based on a challenge heartbeat. The results obtained by both methods are presented; both methods are compared to each other, and the advantages and limitations of each method are discussed. Furthermore, we introduce the notion of a player profile, which is derived from dashboard data. Our results and contributions aim to establish a method to measure the challenge solve time, inform the design of future challenges, and improve coaching during CSC gameplay. |
Peerreviewed: | yes |
Access type: | Open Access |
Appears in Collections: | CTI-RI - Artigos em revistas científicas internacionais com arbitragem científica ISTAR-RI - Artigos em revistas científicas internacionais com arbitragem científica |
Files in This Item:
There are no files associated with this item.
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.