Successful Gamification of Cybersecurity Training

Cyberpsychol Behav Soc Netw. 2021 Sep;24(9):593-598. doi: 10.1089/cyber.2020.0526. Epub 2021 Sep 2.

Abstract

The behavioral aspect of cybersecurity has gained more attention in recent years. By their actions, people can improve the security of their devices and organizations, but also hinder the successful implementation of security in these areas. As awareness campaigns where information is merely distributed are not effective, we designed a cybersecurity serious game applicable for cybersecurity training. The effectiveness of this game was experimentally tested against a noncybersecurity game that did or did not contain cybersecurity information, through measures of the theory of planned behavior. Results showed that the cybersecurity game resulted in higher self-reported scores on attitudes, perceived behavioral control, intentions, and behavior compared with both noncybersecurity games. For subjective norms, we only found an effect in the comparison between the cybersecurity game and the noncybersecurity game without additional information.

Keywords: behavior change; behavioral cybersecurity; cybersecurity training; gamification; serious games; theory of planned behavior.

MeSH terms

  • Behavior Control
  • Computer Security*
  • Humans
  • Intention*