CyberSecurity Education and Training in a Corporate Environment in South Africa Using Gamified Treasure Hunts

摘要

Breaches in computer security can have economical, political, and social costs. In a busy corporate IT department, unfortunately, there is often not time enough to train programmers and other technical people on the best practices of computer security and encryption. This paper looks at the use of gamified treasure hunts to encourage participants to follow digital clues in order to find a physical treasure box of chocolates. By following the digital clues, participants in the treasure hunts will learn about such important security tools as Cryptography, GnuPG, SSL, HTTPS, Jasypt, Bouncy Castle, Wireshark, and common attack techniques.