Gamification is increasingly applied in cybersecurity training to enhance engagement and support knowledge retention through elements such as points, challenges, and rewards. However, its effectiveness remains debated, as employees’ experiences vary, and specific game elements may not be equally beneficial for all learners. This study explores employees’ perceptions of engagement, learning outcomes, and challenges in gamified cybersecurity training through an online survey of 53 participants in Germany. Findings indicate that while game elements were generally engaging, participants valued real-world problem-solving tasks, story-based scenarios, and simulated cyber-attacks over leaderboards and competition-based mechanics. Challenges such as extended training duration and unclear game mechanics led to frustration and reduced perceived effectiveness for some participants. Additionally, participants emphasized the importance of training that balances engagement with practical relevance. These findings suggest that gamified strategies should prioritize realistic, problem-solving tasks over competitive elements and ensure clarity in-game elements to maximize training effectiveness in workplace cybersecurity programs.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Game Elements in Cybersecurity Education: Hype or Help?

  • Mehrdad Bahrini,
  • Violetta Burdina,
  • Karsten Sohr,
  • Rainer Malaka

摘要

Gamification is increasingly applied in cybersecurity training to enhance engagement and support knowledge retention through elements such as points, challenges, and rewards. However, its effectiveness remains debated, as employees’ experiences vary, and specific game elements may not be equally beneficial for all learners. This study explores employees’ perceptions of engagement, learning outcomes, and challenges in gamified cybersecurity training through an online survey of 53 participants in Germany. Findings indicate that while game elements were generally engaging, participants valued real-world problem-solving tasks, story-based scenarios, and simulated cyber-attacks over leaderboards and competition-based mechanics. Challenges such as extended training duration and unclear game mechanics led to frustration and reduced perceived effectiveness for some participants. Additionally, participants emphasized the importance of training that balances engagement with practical relevance. These findings suggest that gamified strategies should prioritize realistic, problem-solving tasks over competitive elements and ensure clarity in-game elements to maximize training effectiveness in workplace cybersecurity programs.