2026-07-25T00:41:09Z https://drops.dagstuhl.de/oai

oai:drops-oai.dagstuhl.de:12297 2024-03-06T10:30:56Z ddc:004 open_access

Cybersecurity Games for Secure Programming Education in the Industry: Gameplay Analysis Gasiba, Tiago Lechner, Ulrike Rezabek, Filip Pinto-Albuquerque, Maria education training secure coding industry cybersecurity capture-the-flag game analysis cybersecurity challenge To minimize the possibility of introducing vulnerabilities in source code, software developers may attend security awareness and secure coding training. From the various approaches of how to raise awareness and adherence to coding standards, one promising novel approach is Cybersecurity Challenges. However, in an industrial setting, time is a precious resource, and, therefore, one needs to understand how to optimize the gaming experience of Cybersecurity Challenges and the effect of this game on secure coding skills. This work identifies the time spent solving challenges of different categories, analyzes gaming strategies in terms of a slow and fast team profile, and relates these profiles to the game success. First results indicate that the slow strategy is more successful than the fast approach. The authors also analyze the possible implications in the design and the training of secure coding in an industrial setting by means of Cybersecurity Challenges. This work concludes with a brief overview of its limitations and next steps in the study. Schloss Dagstuhl – Leibniz-Zentrum für Informatik Tiago Gasiba and Ulrike Lechner and Filip Rezabek and Maria Pinto-Albuquerque 2020 Is Part Of OASIcs, Volume 81, First International Computer Programming Education Conference (ICPEC 2020) InProceedings Text doc-type:ResearchArticle publishedVersion application/pdf doi:10.4230/OASIcs.ICPEC.2020.10 urn:nbn:de:0030-drops-122977 https://drops.dagstuhl.de/entities/document/10.4230/OASIcs.ICPEC.2020.10 eng https://creativecommons.org/licenses/by/3.0/legalcode