Please use this identifier to cite or link to this item:
Author(s): Zhao, T.
Lechner, U.
Pinto-Albuquerque, M.
Ata, E.
Gasiba, T.
Editor: Wang, G., Choo, K.-K. R., Wu, J., and Damiani, E.
Date: 2023
Title: CATS: A serious game in industry towards stronger cloud security
Volume: 1768
Book title/volume: Ubiquitous Security. UbiSec 2022. Communications in Computer and Information Science
Pages: 64 - 82
Event title: Second International Conference, UbiSec 2022
Reference: Zhao, T., Lechner, U., Pinto-Albuquerque, M., Ata, E., & Gasiba, T. (2023). CATS: A serious game in industry towards stronger cloud security. In G. Wang, K.-K. R. Choo, J. Wu, & E. Damiani (Eds.) Ubiquitous Security. UbiSec 2022. Communications in Computer and Information Science (vol. 1768, pp. 64-82). Springer.
ISSN: 1865-0929
ISBN: 978-981-99-0272-9
DOI (Digital Object Identifier): 10.1007/978-981-99-0272-9_5
Keywords: Serious game
Cloud security
Abstract: Cloud computing has become a widely applied technology in the industry. Broad network access as a characteristic of cloud computing brings business value. It poses threats to cloud assets due to a greater attack surface than on-premises and other service models. Industry standards aim to regulate cloud security by enforcing best practices. To comply with the standards, practitioners in the industry are mandated to be trained to understand basic concepts of attack and defense mechanisms in cloud security to protect assets in the cloud. This work presents a serious game: Cloud of Assets and Threats (CATS), as an enrichment to the traditional training material to raise awareness about the cloud security challenges. In this paper, we introduce the design elements and implementation details of CATS. We organized eight game events with 94 industrial practitioners to validate our design. We applied a questionnaire and conducted semi-structured interviews with the game participants to evaluate the impact of the game and collect feedback. The evaluation indicates that CATS is a promising innovative method for promoting awareness of cloud security issues among practitioners in the industry, regardless of their technical background. Our main contributions are the design of such a game and the understanding of the impact of playing the CATS game in the industry.
Peerreviewed: yes
Access type: Open Access
Appears in Collections:ISTAR-CRI - Comunicações a conferências internacionais

Files in This Item:
File SizeFormat 
conferenceobject_93575.pdf939,15 kBAdobe PDFView/Open

FacebookTwitterDeliciousLinkedInDiggGoogle BookmarksMySpaceOrkut
Formato BibTex mendeley Endnote Logotipo do DeGóis Logotipo do Orcid 

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.