7 documents found, page 1 of 1
Serious game for industrial cybersecurity: Experiential learning through code r...
Iosif, A.; Lechner, U.; Pinto-Albuquerque, M.; Gasiba, T.Every stage of the industrial software development process is crucial for ensuring high-quality results in a time of increasing digitalization and complexity. Code review is a method to enhance software quality and also promote knowledge exchange among teams. It is generally accepted that the earlier that software bugs and vulnerabilities are caught during product development, the more costs can be saved. As su...
CATS: A serious game in industry towards stronger cloud security
Zhao, T.; Lechner, U.; Pinto-Albuquerque, M.; Ata, E.; Gasiba, T.Cloud computing has become a widely applied technology in the industry. Broad network access as a characteristic of cloud computing brings business value. It poses threats to cloud assets due to a greater attack surface than on-premises and other service models. Industry standards aim to regulate cloud security by enforcing best practices. To comply with the standards, practitioners in the industry are mandated...
CyberSecurity challenges for software developer awareness training in industria...
Gasiba, T.; Lechner, U.; Albuquerque, M. P.Awareness of cybersecurity topics facilitates software developers to produce secure code. This awareness is especially important in industrial environments for the products and services in critical infrastructures. In this work, we address how to raise awareness of software developers on the topic of secure coding. We propose the “CyberSecurity Challenges”, a serious game designed to be used in an industrial en...
Raising awareness about cloud security in industry through a board game
Zhao, T.; Gasiba, T.; Lechner, U.; Pinto-Albuquerque, M.Today, many products and solutions are provided on the cloud; however, the amount and financial losses due to cloud security incidents illustrate the critical need to do more to protect cloud assets adequately. A gap lies in transferring what cloud and security standards recommend and require to industry practitioners working in the front line. It is of paramount importance to raise awareness about cloud securi...
Cybersecurity challenges in industry: measuring the challenge solve time to inf...
Gasiba, T.; Lechner, U.; Pinto-Albuquerque, M.Cybersecurity vulnerabilities in industrial control systems have been steadily increasing over the last few years. One possible way to address this issue is through raising the awareness (through education) of software developers, with the intent to increase software quality and reduce the number of vulnerabilities. CyberSecurity Challenges (CSCs) are a novel serious game genre that aims to raise industrial sof...
Cybersecurity awareness platform with virtual coach and automated challenge ass...
Gasiba, T.; Lechner, U.; Pinto-Albuquerque, M.; Porwal, A.Over the last years, the number of cyber-attacks on industrial control systems has been steadily increasing. Among several factors, proper software development plays a vital role in keeping these systems secure. To achieve secure software, developers need to be aware of secure coding guidelines and secure coding best practices. This work presents a platform geared towards software developers in the industry tha...
Sifu - a cybersecurity awareness platform with challenge assessment and intelli...
Gasiba, T.; Lechner, U.; Pinto-Albuquerque, M.Software vulnerabilities, when actively exploited by malicious parties, can lead to catastrophic consequences. Proper handling of software vulnerabilities is essential in the industrial context, particularly when the software is deployed in critical infrastructures. Therefore, several industrial standards mandate secure coding guidelines and industrial software developers’ training, as software quality is a sig...