Welcome to Scribd, the world's digital library. Read, publish, and share books and documents. See more
Download
Standard view
Full view
of .
Look up keyword
Like this
0Activity
0 of .
Results for:
No results containing your search query
P. 1
HuskyHunt: Gamifying Security Awareness for Students (237226563)

HuskyHunt: Gamifying Security Awareness for Students (237226563)

Ratings: (0)|Views: 1|Likes:
Published by EDUCAUSE
HuskyHunt is a game developed by the University of Connecticut designed to teach students practical information security lessons while using social media to improve message reach and build local business partnerships to increase overall participation. The talk will focus on the application, the flow of the game, the partnerships we have developed across the institution, and the metrics we are using to determine engagement and reach. We are now considering a multiuniversity Hunt contest for the upcoming fall semester and are hoping to identify schools that will use the software and participate.
OUTCOMES:
Get practical data on what is effective (and not effective) to help you design a student-focused security awareness program * Receive software and associated collateral to be able to run HuskyHunt at your institution * Recognize that running such a game is straightforward, has great reach, and can be done at any sized institution https://www.educause.edu/events/security-professionals-conference/2014/huskyhunt-gamifying-security-awareness-students
HuskyHunt is a game developed by the University of Connecticut designed to teach students practical information security lessons while using social media to improve message reach and build local business partnerships to increase overall participation. The talk will focus on the application, the flow of the game, the partnerships we have developed across the institution, and the metrics we are using to determine engagement and reach. We are now considering a multiuniversity Hunt contest for the upcoming fall semester and are hoping to identify schools that will use the software and participate.
OUTCOMES:
Get practical data on what is effective (and not effective) to help you design a student-focused security awareness program * Receive software and associated collateral to be able to run HuskyHunt at your institution * Recognize that running such a game is straightforward, has great reach, and can be done at any sized institution https://www.educause.edu/events/security-professionals-conference/2014/huskyhunt-gamifying-security-awareness-students

More info:

Published by: EDUCAUSE on Aug 19, 2014
Copyright:Traditional Copyright: All rights reserved

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as DOC, PDF, TXT or read online from Scribd
See more
See less

08/19/2014

pdf

text

original

 
EDUCAUSEHuskyHunt: Gamifying Security Awareness for Students
Good morning, everybody. Good morning, everybody, wo is virtua!!y attending. "y name is #ason $ufa!% &'m te C&S( for te University of Connecticut. As & go troug tis ))&'ve done tis *resentation afew times. +e've been doing tis *rogram for te better *art of two years now. So if you've got uestions as we *rogress, fee! free to raise your and. &'m a**y to engage in more of adia!og tan -ust ta!k for an our% so fee! free. &'!! set te stage of wy we started tis. About two years ago, te University oundation a**roaced me and said tat tey ad about /0,111 in a fund tat was donated wit te e2*ress *ur*ose of training students in some fasion as it re!ates to information security. So & ad a funding source to kick tis off and a rea!!y s*ecific directive. & sat down wit a few *eo*!e, Student Affairs *rimari!y, and started brainstorming about wat we may want to do. And it was *retty uick for us a!! to decide tat we didn't want to -ust send out e)mai! and do a cou*!e of videos and some of te tings tat & tink we've traditiona!!y done wit fair!y mi2ed success. So we said, 3&n wat way do te students engage most regu!ar!y43 And socia! media certain!y seemed tobe te most obvious. So wat we decided was we wou!d try to bui!d someting tat at !east took advantage of tat and !everage socia! media to get our message out more effective!y. 5ut at te same time, we wanted tat to be meaningfu!. +e wanted tis e2*erience to be as interactive as *ossib!e. &f we were going to *ut te effort into it, we wanted it to be someting tat we we cou!d re*eat. So to tis *oint, we ave done it tree times in tota!. +e've done it a variety of times, and we're trying to actua!!y try different ways to see wic is te most successfu!. And &'!! go troug tat as & work troug te *resentation. & tink one of te tings tat does make tis uniue is tat it's fair!y innovative. +e're trying to educate *eo*!e troug an on!ine game tat can actua!!y assess, to a degree, wat tey've !earned% !everage socia! media to get te word out into a broader audience% but ten a!so bring tis into te *ysica! s*ace and ave te students engage in an actua! scavenger unt. 6e game is *rimari!y e!d on!ine. +e ave not deve!o*ed a mobi!e a**, but it's mobi!e friend!y. So any device works fair!y we!! wit it. And we ave a variety of wat we ca!! incentives. +e weren't officia!!y a!!owed to ca!! tem *ri7es for watever reason, so we've got a variety of incentives tat we ave. irst, te grand incentive or te first *ri7e is a /011 gift certificate to te UConn Co)o*% ty*ica!!y our tougt wou!d be to use it for books wit some o*e. 6en tere is a second and tird *!ace and ten a variety of oter giveaways trougout te contest. 6at's -ust a !ook at te front *age of te website. &t as im*roved over time. +e've engaged a grou* on cam*us% we've got a Digita! "edia *rogram on cam*us. So we've actua!!y engaged te students in tat *rogram to e!* us wit some of te marketing, some of te website design. &'m o*efu! tat in te u*coming semester, tey'!! be more eavi!y invo!ved as it re!ates to te game design itse!f. & tink te game, wi!e it works fair!y we!!, as a few f!aws tat & tink we need to work out. And &'!! s*eak to tose as we go troug it. 6is is an overview on wat te game !ooks !ike in rea!!y sim*!e ste*s. 8ou want to *icture te game itse!f essentia!!y as two stages. 6ere is te initia! uestion and answer *iece tat's done on!ine. +e send out a message to a!! te students wo ave actua!!y enro!!ed. +e've got a!! tat information because we !everage our university 9et &DEA for access. So we've got te *eo*!e wo *!ay. +e send out e)mai!% if tey actua!!y *rovide us teir socia! media identifier, we'!! communicate wit tem troug tat as we!!. 5ut ty*ica!!y, tat's *robab!y 0101. 9ot everybody wants to do tat rigt out of te gates. +e'!! send tem information tat tat week's uestion as started or tat day's uestion as started. Give tem an o**ortunity to read troug it, do te uestion and answer, and ten tey'!! ave an o**ortunity to essentia!!y *ost or tweet or watever to acebook or twitter a *re)canned message tat we'!! set u*.
1
 
EDUCAUSEHuskyHunt: Gamifying Security Awareness for Students
So if te modu!e tat week is re!ated to *assword management, after tey com*!ete teir initia! uestion and answer, tey'!! be *resented wit a dia!og bo2 tat wi!! say, 3$!ease create strong *asswords.3 6at wi!! get *osted out. And idea!!y, our o*e ere is tat tose *eo*!e wo aren't *!aying te game actua!!y ave an o**ortunity to see some basic security)awareness messages. (nce tey get tat, tey'!! be *resented essentia!!y wit te second stage of tat modu!e, wic is te scavenger *ortion )) an actua! on cam*us scavenger unt. And te o*e tere )) and uite onest!y, & don't tink it's tru!y materia!i7ed tis way )) but te o*e is tat we'!! ave oards of kids running around !ooking for tings creative!y *!aced on cam*us. 3Hoards3 migt be a !itt!e bit aggressive% & tink we ave a cou*!e of *eo*!e stro!!ing about !ooking for tings. 5ut & certain!y wou!dn't say our engagement as been tat significant yet. And ten tey find te !ocation tat we ask tem to go to. 6ey'!! ten !ocate watever te *oster is )) we *ut a *oster everywere. 6ey can use a ;< code to eiter scan in to verify tat tey've been tere, or tey can actua!!y ty*e in te message tere. And again, anoter o**ortunity for tem to tweet or *ost to acebook wat te security message wi!! be. So tat's te ig)!eve! conce*t of te game. 8ou'!! see at te bottom tere we've got a variety of vendors. +at we've done is *artnered now wit some of te !oca! businesses to draw tem in, and &'!! s*eak to wy we've done tat and ow tat as gone over time. 6at's -ust a *icture of somebody standing in front of, & tink, Husky $i77a if & reca!!, aving found te *oster and *re*aring to scan it in. 6o date, we've covered to*ics genera!!y around tis. +e -ust ran anoter week's version of te game in  A*ri!% & tink it was A*ri! =>t tat it started. +e've actua!!y added a cou*!e ere. 5ut te focus for us rea!!y s*ecifica!!y was identify to*ics tat were re!evant and usefu! to students in teir everyday !ives. So it wasn't about me as te C&S( trying to find tings tat & fe!t te University wou!d be beneficia! in teacing. & rea!!y wanted to make tis as *ractica! as & cou!d for te students. So a !ot of it rea!!y is beavior as it re!ates to socia! media )) wat to *ost, wat not to *ost. 6e understanding tat wen you take *ictures and you *ut tem u* tere, tat gives you !ocation)based information% How to do some basic *assword management% ow to understand ow to interact wit te financia! websites tat tey may or may not be going to% ow to identify fising )) tings tat are re!evant in everyday !ife. 6e feedback as been *retty good, & wou!d say, so far. Honest!y, te criticism tat we've ad as been tat our uestions *robab!y ty*ica!!y ave been too easy. So we rea!!y went down te road initia!!y of a 6rue and a!se sty!e of uestion and answer. & tink te uestions were -ust too easy. And we've got designs on making tem more com*!icated, but we rea!!y wanted to go troug a cou*!e of iterations of tis to see wat our engagement wou!d be and get a sense. 5ut it was rea!!y interesting wen *eo*!e were saying tat tey wanted te game to be more ca!!enging. And & tink wat it was is your to* *eo*!e rea!!y want a way to differentiate temse!ves from te *eo*!e tat tey're actua!!y com*eting wit, rater tan make tis as easy as we ave done so far. So tat's rea!!y going to be a key for us going forward is trying to make tis game more ca!!enging, make te !ocations tat tey need to find *robab!y more ca!!enging if *ossib!e% and go from tere. And te reason & *ut tis u* ere is every time &'ve s*oken about tis is one of te uestions we do get is, 3+at are you training *eo*!e on, and ow did you identify wat te uestions were43 +e reaced out to students for a !ot of tese. So we've got a fair!y significant student staff for -ust student)based tecnica! su**ort. +e've got a Student Affairs)run organi7ation. & tink tey've got a!most =?1 students wo work for tem wo s*ecifica!!y do tecnica! su**ort.. So tey're te ones wo are engaged wit students every day. 6ey're te ones wo ave a sense for were teir ca!!enges. So we rea!!y reaced out to tem. Certain!y we guided tem% tere are some tings tat & s*ecifica!!y wanted to inc!ude . 5ut te rea!ity is a !ot of tis was generated s*ecifica!!y from student engagement. 6is is rea!!y a framework. 6e a**!ication itse!f a!!ows us to embed essentia!!y watever content we want in it
2
 
EDUCAUSEHuskyHunt: Gamifying Security Awareness for Students
So we've deve!o*ed some of our own videos tat we've created. & tink we ave maybe four or five videos tat we've created inouse tat are very s*ecific and re!evant to te content tat we want to train on, tat references and !everages te UConn and te store's !ocation so tat it drives it ome tat we've actua!!y done it. +e've certain!y !everaged content tat we found on!ine. 6ere is tons of stuff out tere. Some of it is fun and engaging% some of it is dry and boring. +e've !everaged bot. 5ut it's a rea!!y good framework for us to be ab!e to embed information and actua!!y distribute tat. & tink & took te s!ide out, so &'m going to go back u* one more. (ne of te tings tat actua!!y was andy for tis was tere was a @ero Day &nternet E2*!orer issue at one *oint. And we were running te game wi!e tat was going on, and we actua!!y !everaged tat as an o**ortunity for at !east tose individua!s wo were *!aying it to basica!!y ave a uestion and answer around @ero Day and some tings s*ecific to tat actua! vu!nerabi!ity. So werever we can, we !everage tis as an o**ortunity to get even additiona! information out. And tat as actua!!y worked fair!y a cou*!e of different times. Anoter nice ting tat we did )) and & don't be!ieve & ave it u* ere anymore )) $C )) o, yea, u* to* tere. +e've got a *retty !arge de*!oyment )) D&, irtua! Deskto* de*!oyment )) for students to use so tey ave access to course)s*ecific software. And as tat organi7ation )) tere are a a!f do7en *eo*!e, and tey're res*onsib!e for de!ivering tat service ))tey !everaged HuskyHunt to actua!!y get more access to students so tey cou!d actua!!y distribute teir message out as we!!, wit some basic ;BA about ow do you interact wit it, ow do you down!oad te c!ient to insta!! it. So as muc as tis is a security framework, as we've gone troug te !ast cou*!e of years, we've ad *eo*!e ask us to use our medium as a way to de!iver teir message. And uite onest!y, &'m *erfect!y a**y to do tat. &f & can increase engagement, and if & can increase *eo*!e's interest in tis game, ten & ave a better o**ortunity to de!iver my message u!timate!y anyway. So it's com*!ete!y wortwi!e. & ta!k fair!y uick!y sometimes, so does anybody ave any uestions so far4 +e've a!so *artnered wit te A6&(9 grou*, wic is tat digita! media grou* on cam*us. & tink tere are about 01 students in tat *rogram rigt now. And as you wou!d e2*ect, =1 of tem are incredib!y engaged and >1 of tem aren't so muc. 5ut te rea!ity is it's ten *eo*!e wo are actua!!y !ooking to try and im*rove u*on te design tat we've created to date. So it's rea!!y been great for us. +ere & tink te Security (ffice fe!! sort te first year was rea!!y in te scavenger unt *ortion. &t's a !ot of work to manage. &t takes a fair amount of time to wa!k around to *ut your *osters u*, to create te !ocations tat you want, and ten a!! te associated c!ues to get *eo*!e tere. And & tink wat we found was tat it didn't rea!!y aid tat muc in de!ivering our message. ;uite onest!y, my origina! tougt was, 36is is going to be te coo!est *art of te game. Everybody is going to want to run around and do te scavenger unt. 6ey'!! go out 6ursday nigt before tey go out drinking, and tey're going to want to do tis scavenger unt and it's going to be great. And tey didn't.  And we a!so )) wic you don't e2*ect )) we ad a urricane on one of tem wic *rom*t!y b!ew a!! of our *osters off of everywere we *ut tem. So students wou!d wa!k around and tey'd find a *oster on te ground and scan it tere. And tey'd find one somewere e!se on cam*us and scan it tere. And te *eo*!e wo didn't find it were a!! angry because tey didn't get teir *oints. So you kind of rea!i7e tat was more work tan & tink we ad initia!!y antici*ated. 5ut te great news was after we ran tis te first year, our Husky (ne Card (ffice a**roaced us and said, 3+e're rea!!y trying to drive *eo*!e out to te businesses tat acce*t te Husky 5ucks $rogram. 6ey've got teir student &D, tey're going to essentia!!y add money to it, and tey can go buy *i77a and tings !ike tat. So tey said, 3Can we be te *eo*!e wo actua!!y !everage your scavenger unt *ortion and drive *eo*!e out43 So tey now manage tat fu!!y.
3

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->