Nowadays, companies are increasingly using cloud-based platform for its convenience and flexibility. However, companies still need to protect their assets when deploying their infrastructure in the cloud. Over the last years, the number of cloud-specific vulnerabilities has been increasing. In this work, we introduce a serious game to help participants to understand the inherent risks, understand the different roles, and to encourage proactive defensive thinking. Our game includes an automated evaluator as a novel element. The players are invited to build defense plans and attack plans, which will be checked by the evaluator. We design the game and organize a trial-run in an industrial setting. Our preliminary results bring insight into the design of such a game, and constitute the first step in a research using design science.

The authors would like to thank the survey participants for their useful and insightful discussions and for their participation in the test run. This work is partially financed by national funds through FCT - Fundação para a Ciência e Tecnologia, I.P., un

Cloud security,Cloud control matrix,Shared-responsibility model,Industry,Training,Gamification

• Mathematics - Natural Sciences
• Social and Economic Geography - Social Sciences

This publication is an output of the following project(s):

• Alternative Shaper
• Impact of Blockchains and Decentralised Ledger Technologies