Publicação em atas de evento científico
Exploring a board game to improve cloud security training in industry
Tiange Zhao (Zhao, T.); Tiago Espinha Gasiba (Gasiba, T. E.); Ulrike Lechner (Lechner, U.); Maria Pinto-Albuquerque (Albuquerque, M. P.);
Second International Computer Programming Education Conference (ICPEC 2021)
Ano (publicação definitiva)
2021
Língua
Inglês
País
Alemanha
Mais Informação
Web of Science®

Esta publicação não está indexada na Web of Science®

Scopus

N.º de citações: 4

(Última verificação: 2024-03-29 02:32)

Ver o registo na Scopus

Google Scholar

N.º de citações: 10

(Última verificação: 2024-03-28 21:51)

Ver o registo no Google Scholar

Abstract/Resumo
Nowadays, companies are increasingly using cloud-based platform for its convenience and flexibility. However, companies still need to protect their assets when deploying their infrastructure in the cloud. Over the last years, the number of cloud-specific vulnerabilities has been increasing. In this work, we introduce a serious game to help participants to understand the inherent risks, understand the different roles, and to encourage proactive defensive thinking. Our game includes an automated evaluator as a novel element. The players are invited to build defense plans and attack plans, which will be checked by the evaluator. We design the game and organize a trial-run in an industrial setting. Our preliminary results bring insight into the design of such a game, and constitute the first step in a research using design science.
Agradecimentos/Acknowledgements
The authors would like to thank the survey participants for their useful and insightful discussions and for their participation in the test run. This work is partially financed by national funds through FCT - Fundação para a Ciência e Tecnologia, I.P., un
Palavras-chave
Cloud security,Cloud control matrix,Shared-responsibility model,Industry,Training,Gamification
  • Matemáticas - Ciências Naturais
  • Geografia Económica e Social - Ciências Sociais
Registos de financiamentos
Referência de financiamento Entidade Financiadora
UIDB/04466/2020 Fundação para a Ciência e a Tecnologia
UIDP/04466/2020 Fundação para a Ciência e a Tecnologia
Projetos Relacionados

Esta publicação é um output do(s) seguinte(s) projeto(s):