<p>Serious games offer a promising avenue for effective cybersecurity awareness training due to their proven efficacy as educational tools in many fields. Although recent years have seen progress in developing standards and methodologies for designing serious games, there is a lack of studies on collaborative cybersecurity serious games. Under this prism, this study introduces Yellow Training, an innovative collaborative tabletop game designed to increase cybersecurity awareness for people who use computers individually and as part of their work. The study explores how Yellow Training establishes a Community of Practice through the team-centric Conceptual Framework for eLearning and Training (tCOFELET) which underpins the methodology of this research. Yellow Training implements key game mechanisms such as card-driven actions with associated costs and action points (or vitality points), multi-use cards, events introducing various challenges, and policy cards determining how actions can be performed reflecting realistic cybersecurity practices. Several attack patterns are modeled as tCOFELET Scenario Execution Flows based on cybersecurity standards. Through this approach, learners associate theoretical knowledge with practical skills. The game boards depict the company’s assets and resources, demonstrating how the learners’ actions influence the final results. A comparative evaluation presents the potential of Yellow Training to create collaborative gameplay and its compliance with modern learning theories. A pilot study conducted with postgraduate students demonstrated that the tCOFELET’s key mechanisms (e.g., a common repertoire of actions, action limits) promote participants’ realization of common goals, communication, collaboration, and resource sharing that are important factors in forming a pedagogically productive Community of Practice.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Yellow training: a collaborative tCOFELET tabletop serious game for cybersecurity awareness and training

  • Menelaos N. Katsantonis,
  • Athanasios Manikas,
  • Nikolaos Partarakis,
  • Ioannis Mavridis

摘要

Serious games offer a promising avenue for effective cybersecurity awareness training due to their proven efficacy as educational tools in many fields. Although recent years have seen progress in developing standards and methodologies for designing serious games, there is a lack of studies on collaborative cybersecurity serious games. Under this prism, this study introduces Yellow Training, an innovative collaborative tabletop game designed to increase cybersecurity awareness for people who use computers individually and as part of their work. The study explores how Yellow Training establishes a Community of Practice through the team-centric Conceptual Framework for eLearning and Training (tCOFELET) which underpins the methodology of this research. Yellow Training implements key game mechanisms such as card-driven actions with associated costs and action points (or vitality points), multi-use cards, events introducing various challenges, and policy cards determining how actions can be performed reflecting realistic cybersecurity practices. Several attack patterns are modeled as tCOFELET Scenario Execution Flows based on cybersecurity standards. Through this approach, learners associate theoretical knowledge with practical skills. The game boards depict the company’s assets and resources, demonstrating how the learners’ actions influence the final results. A comparative evaluation presents the potential of Yellow Training to create collaborative gameplay and its compliance with modern learning theories. A pilot study conducted with postgraduate students demonstrated that the tCOFELET’s key mechanisms (e.g., a common repertoire of actions, action limits) promote participants’ realization of common goals, communication, collaboration, and resource sharing that are important factors in forming a pedagogically productive Community of Practice.