Utilize este identificador para referenciar este registo:
http://hdl.handle.net/10071/27967
Autoria: | Zhao, T. Lechner, U. Pinto-Albuquerque, M. Ata, E. Gasiba, T. |
Editor: | Wang, G., Choo, K.-K. R., Wu, J., and Damiani, E. |
Data: | 2023 |
Título próprio: | CATS: A serious game in industry towards stronger cloud security |
Volume: | 1768 |
Título e volume do livro: | Ubiquitous Security. UbiSec 2022. Communications in Computer and Information Science |
Paginação: | 64 - 82 |
Título do evento: | Second International Conference, UbiSec 2022 |
Referência bibliográfica: | Zhao, T., Lechner, U., Pinto-Albuquerque, M., Ata, E., & Gasiba, T. (2023). CATS: A serious game in industry towards stronger cloud security. In G. Wang, K.-K. R. Choo, J. Wu, & E. Damiani (Eds.) Ubiquitous Security. UbiSec 2022. Communications in Computer and Information Science (vol. 1768, pp. 64-82). Springer. https://doi.org/10.1007/978-981-99-0272-9_5 |
ISSN: | 1865-0929 |
ISBN: | 978-981-99-0272-9 |
DOI (Digital Object Identifier): | 10.1007/978-981-99-0272-9_5 |
Palavras-chave: | Serious game Cloud security Awareness Industry |
Resumo: | Cloud computing has become a widely applied technology in the industry. Broad network access as a characteristic of cloud computing brings business value. It poses threats to cloud assets due to a greater attack surface than on-premises and other service models. Industry standards aim to regulate cloud security by enforcing best practices. To comply with the standards, practitioners in the industry are mandated to be trained to understand basic concepts of attack and defense mechanisms in cloud security to protect assets in the cloud. This work presents a serious game: Cloud of Assets and Threats (CATS), as an enrichment to the traditional training material to raise awareness about the cloud security challenges. In this paper, we introduce the design elements and implementation details of CATS. We organized eight game events with 94 industrial practitioners to validate our design. We applied a questionnaire and conducted semi-structured interviews with the game participants to evaluate the impact of the game and collect feedback. The evaluation indicates that CATS is a promising innovative method for promoting awareness of cloud security issues among practitioners in the industry, regardless of their technical background. Our main contributions are the design of such a game and the understanding of the impact of playing the CATS game in the industry. |
Arbitragem científica: | yes |
Acesso: | Acesso Aberto |
Aparece nas coleções: | ISTAR-CRI - Comunicações a conferências internacionais |
Ficheiros deste registo:
Ficheiro | Tamanho | Formato | |
---|---|---|---|
conferenceobject_93575.pdf | 939,15 kB | Adobe PDF | Ver/Abrir |
Todos os registos no repositório estão protegidos por leis de copyright, com todos os direitos reservados.