Artigo em revista científica Q2
Raising awareness about cloud security in industry through a board game
Tiange Zhao (Zhao, T.); Tiago Espinha Gasiba (Gasiba, T.); Ulrike Lechner (Lechner, U.); Maria Pinto-Albuquerque (Pinto-Albuquerque, M.);
Título Revista
Information
Ano
2021
Língua
Inglês
País
Suíça
Mais Informação
Web of Science®

N.º de citações: 0

(Última verificação: 2022-05-17 18:31)

Ver o registo na Web of Science®

Scopus

N.º de citações: 0

(Última verificação: 2022-05-12 20:29)

Ver o registo na Scopus

Google Scholar

N.º de citações: 0

(Última verificação: 2022-05-17 16:08)

Ver o registo no Google Scholar

Abstract/Resumo
Today, many products and solutions are provided on the cloud; however, the amount and financial losses due to cloud security incidents illustrate the critical need to do more to protect cloud assets adequately. A gap lies in transferring what cloud and security standards recommend and require to industry practitioners working in the front line. It is of paramount importance to raise awareness about cloud security of these industrial practitioners. Under the guidance of design science paradigm, we introduce a serious game to help participants understand the inherent risks, understand the different roles, and encourage proactive defensive thinking in defending cloud assets. In our game, we designed and implemented an automated evaluator as a novel element. We invite the players to build defense plans and attack plans for which the evaluator calculates success likelihoods. The primary target group is industry practitioners, whereas people with limited background knowledge about cloud security can also participate in and benefit from the game. We design the game and organize several trial runs in an industrial setting. Observations of the trial runs and collected feedback indicate that the game ideas and logic are useful and provide help in raising awareness of cloud security in industry. Our preliminary results share insight into the design of the serious game and are discussed in this paper.
Agradecimentos/Acknowledgements
Maria Pinto-Albuqueque thanks the Instituto Universitário de Lisboa and ISTAR, for their support. Ulrike Lechner acknowledges partial funding of this work in project LIONS by dtec.bw.
Palavras-chave
Cloud security,Cloud control matrix,Shared-responsibility model,Industry,Awareness,training,Serious game
  • Ciências da Computação e da Informação - Ciências Naturais
Registos de financiamentos
Referência de financiamento Entidade Financiadora
UIDB/04466/2020 Fundação para a Ciência e a Tecnologia
UIDP/04466/2020 Fundação para a Ciência e a Tecnologia
Projetos Relacionados