Information Security Through Gamification. Marius Corici.

1. Information Security
Through Gamification
Learning | Training | Improving

2. Marius Corici:
Lazy entrepreneur (energy efficient):
Thinking a lot to do less, preserving energy, providing simplicity.
https://CTF365.com - Finalist Kaspersky Security Startup Challenge 2015
Wanna talk?
Email: marius@ctf365.com
Skype: marius.corici
https://www.linkedin.com/pub/marius-corici/12/73/73b

3. Source: http://www.juniperresearch.com/press/press-releases/iot-connected-devices-to-triple-to-38-bn-by-2020
IoT 38 Billion Devices by 2020
(In)Security Landscape

4. Information Security
Employment Landscape
Demand > Supply
-1.5M
2017
http://www.csoonline.com/article/2922381/infosec-careers/confronting-the-widening-infosec-skills-gap.html
https://www.isc2.org/uploadedFiles/%28ISC%292_Public_Content/2013%20Global%20Information%20Sec
urity%20Workforce%20Study%20Feb%202013.pdf
Employment ↑11.3%

5. “I know Information Security!”

6. ● Security Training Companies
● CS Faculties
● Self – Taught

7. Are
We
Screwed?

8. Gamification
Gamification:
● Using game elements in non-game context.
Game ≠ Gaming ≠ Gamification
GAME
GAMING
GAMIFICATION
{
● Engagement
● Productivity
● Learning
● Employee Recruitment
● Evaluation

9. Learning Through Gamification
Educational, Entertaining, Challenging, Continuous Improvement, Community Driven, Hands On
Lecture
Reading
Audio/Visual
Demonstration
Discussion Group
Practice by Doing
Gamification
Teaching Others
5%
10%
20%
30%
50%
75%
80-90%
95%

10. Information Security
Training Hands-On
Information
Security
Security
Lab
Hands-On
Information Security is a journey not a destination

11. Information Security
Through Gamification
Challenging, Entertaining,
Community Driven
Information
Security
Security
Lab
Hands-On
Gamification

12. Badges, Ranks & Points
… To show user's expertise for different hacks and skills.
XSS, SQLi, Crypto, Deface, TakeOver BruteForce, Sniffing, etc.

13. Gamification – Why?
Progress
Motivation
Social Interaction
Mastery

14. Gamification Benefits
●
Improve Attendance
●
Improve Motivation
●
Improve Retention Rate
●
Increase Attainment
●
Speed up Learning Curve

15. Enterprise Gamification
2011: Gartner: Over 70 Percent of Global 2000 Organisations Will
Have at Least One Gamified Application by 2014*
* http://www.gartner.com/newsroom/id/1844115
http://blogs.clicksoftware.com/index/top-25-best-examples-of-gamification-in-business/
http://www.yukaichou.com/gamification-examples/top-10-enterprise-gamification-cases-employees-productive/#.VgGXdd9_c3o

16. Designing Gamification
2012: GARTNER Says by 2014, 80 Percent of Current Gamified Applications
Will Fail to Meet Business Objectives Primarily Due to Poor Design*
* http://www.gartner.com/newsroom/id/2251015
Player, Mission, Motivation, Mechanics, Challenge

17. https://CTF365.com
Getting your Infosec Certificate, makes you a Security Professional.
Keeping your hacking skills up to date, makes you an Expert.