Sifu Reloaded: An Open-Source Gamified Web-Based CyberSecurity Awareness Platform (Short Paper)

Authors José Carlos Paiva , Ricardo Queirós , Tiago Gasiba

Thumbnail PDF


  • Filesize: 0.68 MB
  • 8 pages

Document Identifiers

Author Details

José Carlos Paiva
  • CRACS - INESC TEC, Porto, Portugal
  • DCC - FCUP, Porto, Portugal
Ricardo Queirós
  • CRACS - INESC TEC, Porto, Portugal
  • uniMAD - ESMAD, Polytechnic of Porto, Portugal
Tiago Gasiba
  • Siemens AG, München, Germany
  • Universität der Bundeswehr München, Germany

Cite AsGet BibTex

José Carlos Paiva, Ricardo Queirós, and Tiago Gasiba. Sifu Reloaded: An Open-Source Gamified Web-Based CyberSecurity Awareness Platform (Short Paper). In 4th International Computer Programming Education Conference (ICPEC 2023). Open Access Series in Informatics (OASIcs), Volume 112, pp. 5:1-5:8, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2023)


Malicious actors can cause severe damage by exploiting software vulnerabilities. In industrial settings, where critical infrastructures rely on software, handling these vulnerabilities with utmost care is crucial to prevent catastrophic consequences. For this purpose, a cybersecurity awareness platform called Sifu was created. This platform automatically assesses challenges to verify its compliance to secure coding guidelines. Using an artificial intelligence method, an interactive component provides players with solution-guiding hints. This paper presents an improved version of the Sifu platform, which evolves the tool in the following aspects: architecture, data model and user interface. The new platform separates the server and client-side using a REST API architecture. It also accommodates an intrinsic and richer layer of gamification, which explores the concept of game rooms at an organizational and gamification level. Finally, it offers an improved interactive training experience for individuals and organizations through a responsive and intuitive single-page web application.

Subject Classification

ACM Subject Classification
  • Applied computing → Interactive learning environments
  • Applied computing → E-learning
  • Applied computing → Computer-managed instruction
  • Applied computing → Computer-assisted instruction
  • Security and privacy
  • learning environment
  • cybersecurity
  • challenges
  • gamification
  • automatic assessment


  • Access Statistics
  • Total Accesses (updated on a weekly basis)
    PDF Downloads


  1. Vue JS Community. What is Vuex? - Vuex, 2023. Accessed on May 2nd, 2023. URL:
  2. Ericsson. CodeChecker, 2023. Accessed on May 2nd, 2023. URL:
  3. Tiago Espinha Gasiba, Ulrike Lechner, and Maria Pinto-Albuquerque. Sifu - a cybersecurity awareness platform with challenge assessment and intelligent coach. Cybersecurity, 3(1):24, December 2020. URL:
  4. T. Espinha Gasiba, K. Beckers, S. Suppan, and F. Rezabek. On the requirements for serious games geared towards software developers in the industry. In 2019 IEEE 27th International Requirements Engineering Conference (RE), pages 286-296, Los Alamitos, CA, USA, September 2019. IEEE Computer Society. URL:
  5. Tiago Gasiba, Ulrike Lechner, Jorge Cuellar, and Alae Zouitni. Ranking Secure Coding Guidelines for Software Developer Awareness Training in the Industry. In Ricardo Queirós, Filipe Portela, Mário Pinto, and Alberto Simões, editors, First International Computer Programming Education Conference (ICPEC 2020), volume 81 of OpenAccess Series in Informatics (OASIcs), pages 11:1-11:11, Dagstuhl, Germany, 2020. Schloss Dagstuhl-Leibniz-Zentrum für Informatik. URL:
  6. Tailwind Labs. Tailwind CSS, 2023. Accessed on May 2nd, 2023. URL:
  7. Microsoft. Monaco - The Editor of the Web, 2023. Accessed on May 2nd, 2023. URL:
  8. Pallets. Welcome to Flask, 2023. Accessed on May 4th, 2023. URL:
  9. SonarSource SA. SonarQube, 2023. Accessed on May 2nd, 2023. URL:
  10. Pouya Saadeghi. daisyUI - Tailwind CSS Components, 2023. Accessed on May 2nd, 2023. URL: