A Gamified Approach to Explore Techniques of Neutralization of Threat Actors in Cybercrime

摘要

In the serious game "Operation Digital Chameleon" red and blue teams develop attack and defense strategies as part of an IT security Awareness training. This paper presents the game design and selected results from a structured evaluation of techniques of neutralization applied by cybercrime threat actors. Various motives and five neutralization techniques are identified in fifteen instances of "Operation Digital Chameleon". We argue that "Operation Digital Chameleon" is not only an instrument to raise IT security awareness but also a sensible method to explore techniques of neutralization in cybercrime.