Identification of Unintentional Perpetrator Attack Vectors using Simulation Game: A Case Study
Martin Macák, Stefan Bojnak, Barbora Bühnová · Annals of Computer Science and Information Systems · 2021
In our digital era, insider attacks are among the serious underresearched areas of the cybersecurity landscape.A significant type of insider attack is facilitated by employees without malicious intent.They are called unintentional perpetrators.We proposed mitigating these threats using a simulationgame platform to detect the potential attack vectors.This paper introduces and implements a scenario that demonstrates the usability of this approach in a case study.This work also helps to understand players' behavior when they are not told upfront that they will be a target of social engineering attacks.Furthermore, we provide relevant acquired observations for future research.