Authors:
Maria Leitner
1
;
2
Affiliations:
1
AIT Austrian Institute of Technology GmbH, Center for Digital Safety & Security, Vienna, Austria
;
2
University of Vienna, Faculty of Computer Science, Vienna, Austria
Keyword(s):
Cyber Security, Awareness, Cyber Security Exercises, Cyber Security Education, Methodology.
Abstract:
As cyber security capabilities are becoming more relevant for society, the need for cyber security skills and teaching methods have increased. For example, cyber security exercises have emerged to train and test skills and abilities of people in emergency situations (e.g., under cyber attacks). While cyber security knowledge has become essential for everyone, we propose a cyber security awareness exercise that targets people with or without cyber security knowledge. Our novel approach uses dynamic surveys to visualize decisions during the exercise. In this paper, we describe the idea behind the exercise and specify the design, implementation and evaluation of this method. We validate our methodology with a cloud-based implementation that enables a low-barrier entry and a responsive design for the participants. We apply our methodology to four case studies. Our findings show that this methodology is an easy tool for organizers and helps participants to learn about cyber security. For
future work, we aim to develop the methodology further and increase the scenarios to conduct more experiments with a diverse audience.
(More)