Improving Software Security Awareness Using A Serious Game

Setup the game environment: Print the map of the game. (The original dimension of the map size is set to adjust on the table). [Map Hospital.png] Print asset cards [Assets Cards – Hospital.pdf] and weakness cards for human assets [Weakness people.pdf]. Attach / pin the human asset cards with the weakness card on the back. Print Vulnerability card [Vulnerability IT Devices.pdf]. Attach / pin the IT asset cards with the respective vulnerability card on the back. Print and cut the psychology card [Psychology compliance principle.pdf]. Print and cut the puzzle card [Riddle or puzzle.pdf]. Print the Network Attack techniques card [Network Attack Cards.pdf]. Print the Physical Attack techniques card [Physical Attacker cards.pdf] Print the Social Engineering Attack techniques card [Social Engineer cards.pdf]. Print and cut the role card [Player role card.pdf]. Print the attackers positions cards [Attacker position.jpg]. Print Goal Sheets for social engineering attackers [gs2.png]. Print Goal sheets for physical and network attacker [gs1.png]. Take simple paper sheet for players to write hypothetical scenarios. Print discussion sheet [score sheet discussion.pdf]. Take any sheet for getting feedback. For discussion session or observation use any sheet to record. Post survey.pdf can be used to get feedback regarding the game. Learning scenarios can be taken from the paper published. Game data, Animated Videos for evaluation, and post survey template is attached.

搭建游戏环境：打印游戏地图，地图初始尺寸可根据桌面调整[Map Hospital.png]。打印医院资产卡片[Assets Cards – Hospital.pdf]及人力资产弱点卡片[Weakness people.pdf]，并将弱点卡片粘贴/固定于人力资产卡片的背面。打印IT设备漏洞卡片[Vulnerability IT Devices.pdf]，将对应漏洞卡片粘贴/固定于IT资产卡片的背面。打印并裁剪合规原则心理卡片[Psychology compliance principle.pdf]与谜题卡片[Riddle or puzzle.pdf]。依次打印网络攻击技术卡片[Network Attack Cards.pdf]、物理攻击技术卡片[Physical Attacker cards.pdf]及社会工程学攻击技术卡片[Social Engineer cards.pdf]。打印并裁剪玩家角色卡片[Player role card.pdf]与攻击者位置卡片[Attacker position.jpg]。打印社会工程学攻击者目标记录表[gs2.png]以及物理与网络攻击者目标记录表[gs1.png]。取用普通白纸供玩家书写假想场景，打印讨论评分表[score sheet discussion.pdf]。取用任意纸张用于收集反馈，讨论环节与观察环节可使用任意纸张进行记录。可使用post survey.pdf收集本次游戏的相关反馈。游戏学习场景可参考已发表的学术论文，游戏数据、用于评估的动画视频及后测问卷模板均已附随。