abstract

Public Access

Self-Efficacy-Based Game Design to Encourage Security Behavior Online

Authors:

Tianying Chen,

Jessica Hammer,

Laura DabbishAuthors Info & Claims

CHI EA '19: Extended Abstracts of the 2019 CHI Conference on Human Factors in Computing Systems

Paper No.: LBW1610, Pages 1 - 6

https://doi.org/10.1145/3290607.3312935

Published: 02 May 2019 Publication History

All formats PDF

Abstract

Eliciting cybersecurity behavior change in users has been a difficult task. Although most users have concerns about their safety online, few take precautions. Transformational games offer a promising avenue for cybersecurity behavior change. To date, however, studies typically focus on entertainment value instead of investigating the effectiveness and design potential of games in cybersecurity. As a first step to filling this gap, we present the design of Hacked Time, a desktop game that aims to encourage cybersecurity behavior change by translating self-efficacy theory into the game's design. As cybersecurity games are a relatively novel area, our design aims to serve as a prototype for mapping specific behavior change principles relevant to this area onto game design practice.

References

[1]

Faisal Alotaibi, Steven Furnell, Ingo Stengel, and Maria Papadaki. 2016. A Review of Using Gaming Technology for Cyber-Security Awareness. International Journal for Information Security Research (IJISR) 6, 2 (2016), 660--666.

Google Scholar

[2]

Per Backlund, Henrik Engström, Mikael Johannesson, Mikael Lebram, and Björn Sjödén. 2008. Designing for self-efficacy in a game based simulator: An experimental study and its implications for serious games design. In Visualisation, 2008 international conference. IEEE, 106--113.

Digital Library

Google Scholar

[3]

Albert Bandura. 1990. Perceived self-efficacy in the exercise of control over AIDS infection. Evaluation and program planning 13, 1 (1990), 9--17.

Google Scholar

[4]

Sabrina Culyba. 2018. The Transformational Framework: A Process Tool for the Development of Transformational Games. (9 2018).

Google Scholar

[5]

Sauvik Das, Tiffany Hyun-Jin Kim, Laura A Dabbish, and Jason I Hong. 2014. The effect of social influence on security sensitivity. In Proc. SOUPS, Vol. 14.

Digital Library

Google Scholar

[6]

Sauvik Das, Adam DI Kramer, Laura A Dabbish, and Jason I Hong. 2014. Increasing security sensitivity with social proof: A large-scale experimental confirmation. In Proceedings of the 2014 ACM SIGSAC conference on computer and communications security. ACM, 739--749.

Digital Library

Google Scholar

[7]

Michael Fagan and Mohammad Maifi Hasan Khan. 2016. Why do they do what they do?: A study of what motivates users to (not) follow computer security advice. In Twelfth symposium on usable privacy and security (SOUPS 2016). 59--75.

Digital Library

Google Scholar

[8]

Maurice Hendrix, Ali Al-Sherbaz, and Bloom Victoria. 2016. Game based cyber security training: are serious games suitable for cyber security training? International Journal of Serious Games 3, 1 (2016), 53--61.

Crossref

Google Scholar

[9]

Ruogu Kang, Stephanie Brown, Laura Dabbish, and Sara Kiesler. 2014. Privacy attitudes of Mechanical Turk workers and the US public. In Symposium on Usable Privacy and Security (SOUPS), Vol. 4. 1.

Digital Library

Google Scholar

[10]

Geoff Kaufman and Mary Flanagan. 2015. A psychologically "embedded" approach to designing games for prosocial causes. Cyberpsychology: Journal of Psychosocial Research on Cyberspace 9, 3 (2015).

Google Scholar

[11]

Elissa M Redmiles, Sean Kross, and Michelle L Mazurek. 2016. How I learned to be secure: a census-representative survey of security advice sources and behavior. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security. ACM, 666--677.

Digital Library

Google Scholar

[12]

Alexandra To, Elaine Fath, Eda Zhang, Safinah Ali, Catherine Kildunne, Anny Fan, Jessica Hammer, and Geoff Kaufman. {n. d.}. Tandem Transformational Game Design: A Game Design Process Case Study.

Google Scholar

[13]

Langxuan Yin, Lazlo Ring, and Timothy Bickmore. 2012. Using an interactive visual novel to promote patient empowerment through engagement. In Proceedings of the International Conference on the Foundations of Digital Games. ACM, 41--48.

Digital Library

Google Scholar

Cited By

View all

Hammad NHarpstead EHammer J(2024)Towards a Design Framework for Data-Driven Game Streaming: A Multi-Stakeholder ApproachProceedings of the ACM on Human-Computer Interaction10.1145/36771078:CHI PLAY(1-28)Online publication date: 15-Oct-2024
https://dl.acm.org/doi/10.1145/3677107
Prümmer Jvan Steen Tvan den Berg B(2024)A systematic review of current cybersecurity training methodsComputers and Security10.1016/j.cose.2023.103585136:COnline publication date: 1-Feb-2024
https://dl.acm.org/doi/10.1016/j.cose.2023.103585
Glas MVielberth MPernul G(2023)Train as you Fight: Evaluating Authentic Cybersecurity Training in Cyber RangesProceedings of the 2023 CHI Conference on Human Factors in Computing Systems10.1145/3544548.3581046(1-19)Online publication date: 19-Apr-2023
https://dl.acm.org/doi/10.1145/3544548.3581046
Show More Cited By

Index Terms

Self-Efficacy-Based Game Design to Encourage Security Behavior Online
1. Human-centered computing
  1. Human computer interaction (HCI)
    1. HCI theory, concepts and models
2. Security and privacy
  1. Human and societal aspects of security and privacy

Recommendations

Hacked Time: Design and Evaluation of a Self-Efficacy Based Cybersecurity Game
DIS '20: Proceedings of the 2020 ACM Designing Interactive Systems Conference

A major reason why people don't use security tools online is that they perceive them as difficult and challenging, resulting in the lack of self-efficacy. Previous research has looked at improving user security attitude and practices through a variety ...
C.A.L.Y.P.S.O.: Designing Gameplay Features for Improving Player's Cybersecurity Self-Efficacy
CHI PLAY Companion '24: Companion Proceedings of the 2024 Annual Symposium on Computer-Human Interaction in Play

Cybersecurity campaigns often fail because tools and practices, like password managers, appear too daunting or difficult to implement. While prior work has shown that transformational game design approaches to improving players’ security self-efficacy ...
Design Constraints in Game Design Case: Survival Mode Game Jam 2016
GJH&GC '16: Proceedings of the International Conference on Game Jams, Hackathons, and Game Creation Events

In this paper, we present the findings of an interview study of game developers participating to a constrained game development event, Survival Mode 2016 game jam. Survival Mode 2016 was organized in Finnish Lapland as the northernmost jamming site of ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

CHI EA '19: Extended Abstracts of the 2019 CHI Conference on Human Factors in Computing Systems

May 2019

3673 pages

ISBN:9781450359719

DOI:10.1145/3290607

General Chairs:
Stephen Brewster
University of Glasgow, Scotland, UK
,
Geraldine Fitzpatrick
TU Wien, Austria
,
Program Chairs:
Anna Cox
University College London, UK
,
Vassilis Kostakos
University of Melbourne, Australia

Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 02 May 2019

Check for updates

Author Tags

Qualifiers

Abstract

Funding Sources

National Science Foundation

Conference

CHI '19

Sponsor:

SIGCHI

CHI '19: CHI Conference on Human Factors in Computing Systems

May 4 - 9, 2019

Glasgow, Scotland Uk

Acceptance Rates

Overall Acceptance Rate 6,164 of 23,696 submissions, 26%

Upcoming Conference

CHI 2025

Sponsor:
sigchi

ACM CHI Conference on Human Factors in Computing Systems

April 26 - May 1, 2025

Yokohama , Japan

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

17
Total Citations
View Citations
1,509
Total Downloads

Downloads (Last 12 months)258
Downloads (Last 6 weeks)23

Reflects downloads up to 17 Jan 2025

Other Metrics

View Author Metrics

Citations

Cited By

View all

Hammad NHarpstead EHammer J(2024)Towards a Design Framework for Data-Driven Game Streaming: A Multi-Stakeholder ApproachProceedings of the ACM on Human-Computer Interaction10.1145/36771078:CHI PLAY(1-28)Online publication date: 15-Oct-2024
https://dl.acm.org/doi/10.1145/3677107
Prümmer Jvan Steen Tvan den Berg B(2024)A systematic review of current cybersecurity training methodsComputers and Security10.1016/j.cose.2023.103585136:COnline publication date: 1-Feb-2024
https://dl.acm.org/doi/10.1016/j.cose.2023.103585
Glas MVielberth MPernul G(2023)Train as you Fight: Evaluating Authentic Cybersecurity Training in Cyber RangesProceedings of the 2023 CHI Conference on Human Factors in Computing Systems10.1145/3544548.3581046(1-19)Online publication date: 19-Apr-2023
https://dl.acm.org/doi/10.1145/3544548.3581046
Ganesh ANdulue COrji R(2023)Tailoring a Persuasive Game to Promote Secure Smartphone BehaviourProceedings of the 2023 CHI Conference on Human Factors in Computing Systems10.1145/3544548.3581038(1-18)Online publication date: 19-Apr-2023
https://dl.acm.org/doi/10.1145/3544548.3581038
Gutfleisch MSchöps MSayin SWende FSasse MPéraire CSerebrenik A(2022)Putting security on the tableProceedings of the ACM/IEEE 44th International Conference on Software Engineering: Software Engineering Education and Training10.1145/3510456.3514139(217-222)Online publication date: 21-May-2022
https://dl.acm.org/doi/10.1145/3510456.3514139
Gutfleisch MSchops MSayin SWende FSasse M(2022)Putting Security on the Table: The Digitalisation of Security Tabletop Games and its Challenging Aftertaste2022 IEEE/ACM 44th International Conference on Software Engineering: Software Engineering Education and Training (ICSE-SEET)10.1109/ICSE-SEET55299.2022.9794181(217-222)Online publication date: May-2022
https://doi.org/10.1109/ICSE-SEET55299.2022.9794181
Ganesh ANdulue COrji R(2022)Smartphone Security and Privacy – A Gamified Persuasive Approach with Protection Motivation TheoryPersuasive Technology10.1007/978-3-030-98438-0_7(89-100)Online publication date: 29-Mar-2022
https://dl.acm.org/doi/10.1007/978-3-030-98438-0_7
Wu TMa WWen SXia XParis CNepal SXiang Y(2021)Analysis of Trending Topics and Text-based Channels of Information Delivery in CybersecurityACM Transactions on Internet Technology10.1145/348333222:2(1-27)Online publication date: 29-Oct-2021
https://dl.acm.org/doi/10.1145/3483332
Chen TZhang KKraut RDabbish L(2021)Scaffolding the Online Peer-support Experience: Novice Supporters' Strategies and ChallengesProceedings of the ACM on Human-Computer Interaction10.1145/34795105:CSCW2(1-30)Online publication date: 18-Oct-2021
https://dl.acm.org/doi/10.1145/3479510
Ganesh ANdulue COrji R(2021)PERMARUN- A Persuasive Game to Improve User Awareness and Self-Efficacy Towards Secure Smartphone BehaviourExtended Abstracts of the 2021 CHI Conference on Human Factors in Computing Systems10.1145/3411763.3451781(1-7)Online publication date: 8-May-2021
https://dl.acm.org/doi/10.1145/3411763.3451781
Show More Cited By

View Options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

HTML Format

View this article in HTML Format.

HTML Format

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Cited By

Index Terms

Recommendations

Hacked Time: Design and Evaluation of a Self-Efficacy Based Cybersecurity Game

C.A.L.Y.P.S.O.: Designing Gameplay Features for Improving Player's Cybersecurity Self-Efficacy

Design Constraints in Game Design Case: Survival Mode Game Jam 2016