
Improving software security awareness using a serious game
Author(s) -
Yasin Affan,
Liu Lin,
Li Tong,
Fatima Rubia,
Jianmin Wang
Publication year - 2019
Publication title -
iet software
Language(s) - English
Resource type - Journals
ISSN - 1751-8814
DOI - 10.1049/iet-sen.2018.5095
Subject(s) - brainstorming , computer science , security awareness , software security assurance , computer security , game design , knowledge management , information security , human–computer interaction , security service , artificial intelligence
Protecting people from cyber threats imposes great challenges, not only technically, but also socially. To achieve the intended level of awareness, software security principles need to be shown with concrete examples during security education. This study aims to design a serious game integrating software security knowledge and concepts into the processes to make it more engaging to learn while playing. In this paper, we have: (i) designed a serious game to compensate the deficiencies in the literature; (ii) performed empirical evaluations including survey, brainstorming and observation to the proposed game. Results: Our study shows that: (i) Cyber Security‐Requirements Awareness Game (CSRAG) has a positive effect on players security learning outcomes, level of engagement and participation; (ii) Game‐based learning can be an effective way of teaching security related scenarios.