Exportar Publicação

Zhao, T., Gasiba, T., Lechner, U., Pinto-Albuquerque, M. & Ongu, D. (2024). COPYCAT: Applying serious games in industry for defending supply chain attack. In Frank Phillipson, Gerald Eichler, Christian Erfurth, Günter Fahrnberger (Ed.), Innovations for community services: 24th International Conference, I4CS 2024,  Proceedings. (pp. 321-336).: Springer Nature.

T. Zhao et al.,  "COPYCAT: Applying serious games in industry for defending supply chain attack", in Innovations for community services: 24th Int. Conf., I4CS 2024,  Proc., Frank Phillipson, Gerald Eichler, Christian Erfurth, Günter Fahrnberger, Ed., Springer Nature, 2024, vol. 2109, pp. 321-336

@inproceedings{zhao2024_1787692310734,
	author = "Zhao, T. and Gasiba, T. and Lechner, U. and Pinto-Albuquerque, M. and Ongu, D.",
	title = "COPYCAT: Applying serious games in industry for defending supply chain attack",
	booktitle = "Innovations for community services: 24th International Conference, I4CS 2024,  Proceedings",
	year = "2024",
	editor = "Frank Phillipson, Gerald Eichler, Christian Erfurth, Günter Fahrnberger",
	volume = "2109",
	number = "",
	series = "",
	doi = "10.1007/978-3-031-60433-1_18",
	pages = "321-336",
	publisher = "Springer Nature",
	address = "",
	organization = "",
	url = "https://link.springer.com/chapter/10.1007/978-3-031-60433-1_18#citeas"
}

TY  - CPAPER
TI  - COPYCAT: Applying serious games in industry for defending supply chain attack
T2  - Innovations for community services: 24th International Conference, I4CS 2024,  Proceedings
VL  - 2109
AU  - Zhao, T.
AU  - Gasiba, T.
AU  - Lechner, U.
AU  - Pinto-Albuquerque, M.
AU  - Ongu, D.
PY  - 2024
SP  - 321-336
SN  - 1865-0929
DO  - 10.1007/978-3-031-60433-1_18
UR  - https://link.springer.com/chapter/10.1007/978-3-031-60433-1_18#citeas
AB  - Serious games have found their application in many cases for improving cybersecurity; one of those cases is for building a successful strategy for defending against potential attacks. Our research tries to simulate supply chain attacks involving cloud data by adapting serious game frameworks. In this paper, we present the usage of a serious game called COPYCAT to help the participants raise awareness of supply chain attack threats and build a valid defense strategy against them. COPYCAT is an abbreviation of CONTAIN suPplYChain ATtack and CONTAIN is the name of the project that is the larger context of this study. The game originates from CATS (Cloud of Assets and Threats), designed to raise cloud security awareness. In this work, CATS is adapted to the new attack scenarios specifically for data-related supply chain attacks, and the adaption is verified in two game events conducted with practitioners from the industry. This paper marks a milestone in positioning a new game dedicated to incident response. In this paper, we share the design of our serious game and the results we collected during the game events and provide insight into the topic of serious game application for training purposes to raise awareness on data-related supply chain attacks.
ER  -