Analyzing User Interactions with Cybersecurity Games

ŠVÁBENSKÝ, Valdemar. Analyzing User Interactions with Cybersecurity Games. In Proceedings of the 50th ACM Technical Symposium on Computer Science Education (SIGCSE’19). 2019. ISBN 978-1-4503-5890-3. Available from: https://dx.doi.org/10.1145/3287324.3293717.

Basic information

• Original name: Analyzing User Interactions with Cybersecurity Games
• Authors: ŠVÁBENSKÝ, Valdemar (703 Slovakia, guarantor, belonging to the institution).
• Edition: Proceedings of the 50th ACM Technical Symposium on Computer Science Education (SIGCSE’19), 2019.

Other information

• Original language: English
• Type of outcome: Conference abstract
• Field of Study: 10201 Computer sciences, information science, bioinformatics
• Country of publisher: United States of America
• Confidentiality degree: is not subject to a state or trade secret
• RIV identification code: RIV/00216224:14330/19:00108980
• Organization unit: Faculty of Informatics
• ISBN: 978-1-4503-5890-3
• Doi: http://dx.doi.org/10.1145/3287324.3293717
• Keywords in English: Cybersecurity games; Capture the flag; Learning analytics
• Tags: International impact, Reviewed

Abstract

Capture the Flag games are software applications designed to exercise cybersecurity concepts, practice using security tools, and understand cyber attacks and defense. We develop and employ these games at our university for training purposes, unlike in the traditional competitive setting. During the gameplay, it is possible to collect data about players’ in-game actions, such as typed commands or solution attempts, including the timing of these actions. Although such data was previously employed in computer security research, to the best of our knowledge, there were few attempts to use this data primarily to improve education. In particular, we see an open and challenging research problem in creating an artificial intelligence assistant that would facilitate the learning of each player. Our goal is to propose, apply, and experimentally evaluate data analysis and machine learning techniques to derive information about the players' interactions from the in-game data. We want to use this information to automatically provide each player with a personalized formative assessment. Such assessment will help the players identify their mastered concepts and areas for improvement, along with suggestions and actionable steps to take. Furthermore, we want to identify high- or low-performing players during the game, and subsequently, offer them game tasks more suitable to their skill level. These interventions would supplement or even replace feedback from instructors, which would significantly increase the learning impact of the games, enable more students to learn cybersecurity skills at an individual pace, and lower the costs.

Links

• MUNI/A/1145/2018, interní kód MU: Name: Aplikovaný výzkum na FI: softwarové architektury kritických infrastruktur, bezpečnost počítačových systémů, techniky pro zpracování a vizualizaci velkých dat a rozšířená realita.

Investor: Masaryk University, Critical Infrastructure Software Architectures, Computer Systems Security, Data Processing and Visualization Techniques, and Augmented Reality, Category A