Cyber Suraksha: a card game for smartphone security awareness

• Published in: Information and computer security Vol. 31; no. 5; pp. 576 - 600
• Main Authors: Shah, Pintu, Agarwal, Anuja
• Format: Journal Article
• Language: English
• Published: Bingley Emerald Publishing Limited 16.11.2023; Emerald Group Publishing Limited
• Subjects: Card games; Chi-square test; Computer & video games; Cybercrime; Cybersecurity; Data encryption; Design; Education; Educational software; Fear; Games; Learning theory; Literature reviews; Research methodology; Researchers; Security management; Simulation; Smartphones; Software; Software development; Threats; User behavior; Smartphone user; Fogg behaviour model; Cybersecurity awareness; Serious games; Game-based learning; Constructive learning theory
• ISSN: 2056-4961; 2056-497X; 2056-4961
• DOI: 10.1108/ICS-05-2022-0087

Purpose The frequency and sophistication of cybercrimes are increasing. These cybercrimes are impacting government and private organizations as well as individuals. One of the countermeasures is to improve the cyber hygiene of the end-users. Serious games or game-based learning has emerged as a promising approach for implementing security education, training and awareness program. In this paper, the researchers propose a tabletop card game called Cyber Suraksha to increase threat awareness and motivate users to adopt recommended security controls for smartphone users. Cyber Suraksha provides an active learning environment for the players. This paper aims to provide the details of the design and evaluation of the game using a between-subjects design. Design/methodology/approach The researchers have used constructive learning theory and the Fogg behaviour model (FBM) to design a tabletop card game called Cyber Suraksha. The researchers evaluated the game using a between-subjects design. The participants' responses in the control and intervention groups were collected using the risk behaviour diagnosis scale. Pearson’s Chi-Square test with a 5% significance level was used to test the hypotheses. Findings The results indicate that the game is enjoyable and fun. Cyber Suraksha game effectively motivates users to adopt the recommended security control for the targeted behaviour. The results indicate that the participants in the intervention group are 2.65 times more likely to adopt recommended behaviour. The findings of this study provide evidence for the effectiveness of hope and fear appeals in improving cybersecurity awareness. Research limitations/implications The generalizability of the study is limited because the sample size is small compared to the total number of smartphone users in India, and only students from computer/IT UG programs in India are used as participants in this study. Practical implications This study uses hope and a fear appeal to design an effective serious game. It also demonstrates using the FBM and constructive learning principles for effective serious game design. Cyber Suraksha is effective for the student group and may be tested with other age groups. Originality/value To the researchers' knowledge, there are no serious games for cybersecurity awareness focusing on the threats faced by smartphone users based on FBM and constructive learning theory. This research used hope along with a fear appeal to motivate smartphone users to adopt recommended security controls.