A Gamified Experience: A CTF Approach to Understanding Insider Threats
Authors
Blume, Nick Büchmann ; Jørgensen, Nikolaj
Term
4. semester
Education
Publication year
2025
Submitted on
2025-06-04
Pages
146
Abstract
Dette speciale undersøger, hvordan et Capture the Flag (CTF)-forløb kan bruges til at introducere begyndere til insidertrusler. I samarbejde med Campfire Security designer og implementerer projektet et CTF-modul målrettet brugere med begrænset eller ingen erfaring. Udviklingen bygger på etablerede cybersikkerhedsrammeværker, akademisk litteratur og indsigter fra et interview med en erfaren cybersikkerhedspraktiker samt en analyse af eksisterende uddannelses-CTF-platforme, hvor Campfire Securitys platform også blev anvendt til at afvikle modulet. Modulet blev afprøvet i en workshop med en lille deltagergruppe for at indsamle kvalitativ feedback om brugbarhed, brugeroplevelse og engagement. De indledende resultater indikerer, at deltagerne foretrak det interaktive, gamificerede format frem for traditionel undervisning, og peger på, at CTF’er kan være et effektivt redskab til at introducere komplekse emner som insidertrusler til nybegyndere; konklusionerne er dog foreløbige på grund af den begrænsede prøve.
This thesis examines how a Capture the Flag (CTF) approach can introduce novices to insider threats. In partnership with Campfire Security, the project designs and implements a CTF module for learners with little to no prior experience. The development draws on established cybersecurity frameworks, academic literature, and insights from an interview with an experienced practitioner, alongside an analysis of existing educational CTF platforms; the module was hosted on Campfire Security’s platform. The module was piloted in a workshop with a small group to gather qualitative feedback on usability, user experience, and engagement. Initial findings suggest participants preferred the interactive, gamified format over traditional teaching and indicate that CTFs can be an effective way to introduce complex topics such as insider threats to novices, although conclusions are tentative due to the small sample.
[This abstract was generated with the help of AI]
Documents