Building a Game-Based Internet Security Learning System by Ontology Crystallization Approach

摘要

In recent years, with the rapid growth of the Internet applications and services, phishing becomes one of the most severe threats on the Internet. A phishing can be composed of scenarios and attacking techniques. It is a challenge to collect and analyze scenarios and attacking techniques of phishing efficiently since they can evolve rapidly in diversified media. This research proposes an ontology crystallization process for building the phishing ontology. The layers of phishing ontology is firstly set up based on the attacking intention and the attacking media. More sub-nodes are then added subsequently by analyzing keywords in the collected phishing cases to enrich the attacking process layer of phishing ontology. The proposed construction process and the resulting ontology have also been applied in the anti-phishing game-based learning system for students. In the system, the proposed assessment method indeed helps in promoting the ability of anti-phishing. In addition, the card game called iMonsters has also been designed and developed to help students to easily understand the attack or defense strategies and concepts in Internet security domain. In our experiment, the students were engaged in the game-based learning activity. It shows game playing is a good way to introduce the Internet Literacy.